Privacy Policy — version history

This page lists every published version of the Nysroc Privacy Policy. The current version is always at
nysroc.com/legal/privacy (Français · Español).

Version 1.0 — effective 6 November 2026

First published version. Earlier drafts were prepared for review and were never in force. Compared with the last
review draft, the published text:

• states the version, the last-updated date and the effective date (6 November 2026);
• describes Nysroc as a platform for small businesses;
• keeps the register of confidentiality incidents and security breaches for 5 years, and acknowledges complaints
  within 5 business days;
• confirms that AI embeddings for DeepSeek workspaces run on a model Nysroc hosts in Canada, and says that AI speech,
  text-to-speech and image generation, and Nysroc Phone, are not available yet;
• says plainly that Nysroc has no separate written agreement with DeepSeek, and that DeepSeek offers neither a data
  processing agreement nor Standard Contractual Clauses;
• says that the Quebec transfer assessment (section 17) for DeepSeek has not yet been completed;
• adds this archive of past versions.

Correction of 5 November 2026 (before version 1.0 took effect)

The text first published on 4 November 2026 said that encrypted off-site backups were kept in Toronto, Ontario, and
that Service emails were sent through Amazon SES in its Canada (Central) region. Neither was accurate, and the text
was corrected before it took effect. The corrected version 1.0:

• says that encrypted backups are stored on our servers in Beauharnois, Quebec, that we do not currently keep backups
  at a separate off-site location, and that deleted data disappears from backups at most 35 days after deletion;
• names Google Workspace (Google LLC) as the provider that delivers the emails the Service sends, which may process
  them in the United States and other countries where Google operates, and adds it to the list of service providers
  (section 12.2) and to the sub-processor list;
• names Amazon Web Services (Amazon SES), Canada (Central) region, as the provider that receives emails sent to a
  workspace's receipt-forwarding address;
• updates the note for Quebec: the Quebec transfer assessments (section 17) for Google Workspace and for Amazon SES
  have not yet been completed.

The privacy summary and the sub-processor list were corrected the same way.

The Spanish translation is provided for convenience; the English version governs.