Schedule A — Agreement on the protection of personal information

English translation provided for convenience. The parties wished this agreement to be drawn up in French (section 14.3 of the terms of use): in case of difference, the French version prevails.

Version of November 2, 2026

Between: the subscribing company that accepts this schedule when it signs up for the service (the "subscriber") And: Eric Campeau, doing business as Gestion Onyxia (NEQ 2249818370; info@gestiononyxia.ca, 514 475-5027) ("Gestion Onyxia")

This schedule forms part of the Gestion Onyxia terms of use. It is intended to comply with section 18.3 of Québec's Act respecting the protection of personal information in the private sector.

1. Roles

1.1 For the personal information of its employees, its clients and their contact persons, and its suppliers (the "information"), the subscriber is the company responsible. Gestion Onyxia acts only on its behalf, as a service provider.

1.2 The subscriber undertakes to inform its employees and its clients of the use of Gestion Onyxia, of the information collected and of its purposes (two model notices are attached at the end of this schedule: one for employees, one for clients).

2. What Gestion Onyxia may do with the information

2.1 Only what is needed to provide the service described in the terms of use: keep it, show it to the right people, produce the schedules, orders, quotes, invoices and the hours file, send the emails requested, back it up and restore it.

2.2 Never use it for other purposes, sell it, disclose it to a third party (except the subcontractors in section 4) or combine it with another subscriber's data. When one of the subscriber's employees taps "Directions" or "Waze", their phone sends the address of the premises to Google or Waze; Gestion Onyxia does not send it to them.

2.3 Gestion Onyxia may consult the subscriber's data only for maintenance, security, or when the subscriber asks for help (including the setup done with it), and only to the extent necessary. Gestion Onyxia never enters the subscriber's account without the owner's authorization, given in the application (My account, "Need help?"), except for security or if the law requires it: the owner chooses "View only" or "View and fix", and whether absence reasons and the Hours page are visible; each entry and each change is recorded and visible to the owner; the access can be removed at any time and closes by itself after 30 minutes of inactivity. Support sends nothing to the subscriber's clients or suppliers (no invoice, email or order); for the setup, it may create the access links of the employees and clients, without ever seeing a password. A copy made to fix an error is masked before it leaves the server (no name, no contact details, no free text, never the "sickness" reason for an absence), is used only to fix the application, including with a programming assistant (Claude, by Anthropic, in the United States), and is erased within 30 days.

3. Security measures

Gestion Onyxia maintains at least the following measures:

• hosting in Québec (OVHcloud, Beauharnois);
• encrypted connection (HTTPS); passwords kept as an irreversible fingerprint; blocking after several failed attempts; sessions of at most 30 days for management and 90 days for employees and clients, ended by "Sign out", the removal of the access or a password change; a Gestion Onyxia support session of at most 8 hours, closed by the removal of the access, the end of the help or 30 minutes of inactivity;
• separation: each subscriber sees only its own data. Within the subscriber, each employee and each client sees only what concerns them. The subscription, the settings, the full export and the management of accesses remain reserved to management. This separation is checked by automatic tests at each update;
• server protected by a firewall, automatic security updates, administration access by encrypted key, reserved to Eric Campeau;
• alarm code for the premises, encrypted with a key kept separately, shown only to management and to the employees it gives access to, until it removes that access; each display and each access given or removed is recorded;
• daily backup; off-server copies encrypted before they are sent; restore test at least every quarter;
• log of sign-ins and administration actions, kept 12 months.

4. Subcontractors

4.1 The subscriber authorizes Gestion Onyxia to use the following subcontractors:

4.2 Communication outside Québec: the subscriber acknowledges that the emails it has the application send go through Resend, in the United States. Gestion Onyxia gives it, on request, its privacy impact assessment for this service.

4.3 Gestion Onyxia notifies the subscriber at least 30 days before adding or replacing a subcontractor. The subscriber may then end the subscription at no cost.

4.4 Gestion Onyxia requires its subcontractors to meet protection obligations at least equivalent to these.

5. Confidentiality incidents

5.1 Gestion Onyxia notifies the subscriber without delay, and at the latest within 72 hours after becoming aware of it, of any access, use, communication or loss of information that is not authorized, or of any serious attempt, with what it knows: information affected, number of people, circumstances, measures taken.

5.2 Gestion Onyxia helps the subscriber assess the risk of harm and, if needed, notify the Commission d'accès à l'information and the people concerned. It records the incident in its own register.

6. Retention, export and destruction

6.1 During the subscription, the subscriber may obtain a full export of its data (JSON format, readable by other software). Passwords and alarm codes are never part of it, nor are the shopping list and suppliers that a client keeps for itself on its portal.

6.2 At the end of the subscription, the export remains available for 30 days. During those 30 days, the subscriber's clients keep their portal in read-only mode, to view and download their invoices and shopping list. Gestion Onyxia then erases all the subscriber's data from the application within the following 15 days, and confirms the erasure in writing on request. It also keeps the proof that the terms were accepted (section 14.4 of the terms of use), without any information about the subscriber's employees, clients or contact person; what it keeps after the erasure, and for how long, is in the retention table of its privacy policy.

6.3 The encrypted backup copies that still contain this data are destroyed automatically, at the latest 12 months later. They are never consulted, except to restore the service after an incident; in that case, the data of a subscriber who has left would be erased again.

7. Requests from the people concerned

If an employee or a client of the subscriber asks Gestion Onyxia for access to their information, its correction or its deletion, Gestion Onyxia forwards the request to the subscriber within 5 business days and helps it respond within the legal 30-day period.

8. Verification

The subscriber may ask in writing, once a year, for the up-to-date description of the security measures and the list of the incidents that affected it. Gestion Onyxia responds within 30 days.

9. Term

This schedule applies as long as Gestion Onyxia holds information of the subscriber, even after the end of the subscription.

Acceptance. The subscriber accepts this schedule with the terms of use, by checking the box provided at sign-up. Gestion Onyxia keeps the date and the version accepted, which the subscriber sees in My account. A hand-signed version can also be provided on request.

Model notice to give to the subscriber's employees

[Company name] uses the Gestion Onyxia application to organize the schedules and the cleanings at our clients'. It keeps your first and last name, phone, email (if entered), schedule, arrival and departure times at the work sites, the tasks checked, the products scanned, your absences (period and reason: sickness, vacation or other; the reason is erased 13 months after the absence ends), the notes you leave on a contract for your coworkers, the times you display a site's alarm code (never the code itself), and the PIN you choose to see the codes (only as a fingerprint). This information is used only to organize the work, to confirm the cleanings done at our clients', to manage the products and to give your hours to our accountant for the payroll. The application asks for neither your social insurance number nor your date of birth. The application never records your location; the camera is used to read barcodes and, if you wish, to attach a photo of the premises to a note. The data is hosted in Québec; the email notices sent to management (when an arrival isn't recorded, or an absence is reported or withdrawn), with your first name, your last name for an absence, your phone number for a missed arrival, and the cleanings concerned (never the reason for an absence), go through an email provider in the United States (Resend). To consult or correct your information, contact [name and contact details of the person in charge at the subscriber]. This information is consulted only by the management of [Company name], and by Gestion Onyxia support only if management opens access to help it (and, without management's consent, only for maintenance, security or when the law requires it); the notes you leave on a contract are also read, with your first name, by your coworkers on that contract. For the cleanings done at their premises, the client sees only your first name, your arrival and departure times and the tasks done.

Model notice to give to the subscriber's clients

[Company name] uses the Gestion Onyxia application to organize the cleanings of your premises. It keeps your company's name, the name, phone and email of your contact person, the address and instructions of your premises, the alarm code if you entrust it to us (encrypted), the messages you send us through your portal and our replies, your shopping list and the suppliers you add to it, your quotes, your invoices and credit notes (with the billing address and the purchase order number, if any), the language of your portal, the portal username and password (the password only as an irreversible fingerprint) and, at each sign-in, the IP address, date and time (kept 12 months, for security). This information is used only to plan and do the cleanings, to answer your messages, to prepare your quotes and invoices, to order the products for your premises, and to keep your shopping list. Your shopping list and your suppliers do not appear on our screens or in our exports. The data is hosted in Québec. Three kinds of email go through an email provider in the United States (Resend), though: your messages, passed on to our management with your company's name; our replies, when they are sent to you by email; and our product orders, which give our suppliers your company's name, the address of the premises and where to store the products. This information is consulted only by the management of [Company name]; our employees see the address and instructions of the premises where they work, and the alarm code only if we give them access to it; when an employee taps "Directions" or "Waze" to get there, the address of the premises goes to Google or Waze; our product suppliers receive your company's name, the delivery address and where to store the products of each order; Gestion Onyxia support sees it only if management opens access to help it (and, without management's consent, only for maintenance, security or when the law requires it). To consult or correct your information, contact [name and contact details of the person in charge at the subscriber].