This policy is written in plain language for transparency. It does not reduce rights or obligations that applicable law does not permit the parties to change.
1. Register scope
This register distinguishes core provider categories from optional customer-enabled integrations. RestoreCheck IQ treats a provider as active only after completing the applicable commercial, security, privacy, regional, and data-processing review.
Not every provider receives every category of data. RestoreCheck IQ applies necessity, least privilege, contractual safeguards, and customer configuration.
2. Core provider categories
- Cloud application hosting and content delivery: application code, request metadata, and encrypted traffic.
- Managed PostgreSQL database: account, organization, workflow, audit, support, and configuration records.
- Private object storage: customer-uploaded documents, photos, generated reports, and evidence objects.
- Transactional email: recipient address and the minimum content needed for activation, security, billing, and support messages.
- Billing and payment processing: customer, subscription, invoice, transaction, and payment-token information.
- Monitoring and incident response: minimized error, performance, release, and security telemetry; customer document contents should be excluded.
3. Optional integrations
- QuickBooks/Intuit: only when an authorized customer connects accounting sync.
- Twilio or another messaging provider: only when the customer enables SMS notifications.
- Slack or customer webhooks: only for destinations configured by an authorized customer administrator.
- OCR or document-processing provider: only if enabled and disclosed for the affected workflow; source documents must not be used to train a provider model without separate lawful authority.
- Apple and Google distribution services: app-store account, device, diagnostic, purchase, or distribution information governed by the applicable store.
4. Changes and objections
We will update this page before a new material subprocessor begins processing Customer Personal Information and provide contractual notice where required. Customers may raise a reasonable data-protection objection at privacy@restorecheckiq.ca; the parties will work in good faith on a practical alternative.