Terms of Service

1. Who we are

The seller and operator is JFORGELABS INC., a Saskatchewan corporation (entity number 102244197), incorporated 21 September 2026, carrying on business as JForge Labs, of 33 Campbell Crescent, Weyburn, Saskatchewan S4H 3M3, Canada (“we”, “us”, “JForge Labs”).

Questions: john@jforgelabs.com.

2. What these terms cover

These terms apply to every JForge Labs product and site unless a written order, statement of work, or product addendum says otherwise. Where an order conflicts with these terms on price, term, or a named product feature, the order controls for that item. These terms control everything else.

The QuickBooks Online connector, if present, is for authorized JForge Labs use of our own books. It is not a public product and is not a licence for you to connect your own QuickBooks company through our tools.

3. The service

We will provide the product described on your order or invoice with reasonable skill and care. We host production systems in Canada where the product is designed that way (RootsX production is on DigitalOcean in Toronto). Scheduled maintenance, deploys, and platform outages happen. We do not promise a specific uptime percentage unless an order says so.

Optional features (for example SMS or AI assist) may be off. A product page or order that marks a feature as optional is the source of truth.

You are responsible for your staff accounts, your content, and your lawful basis for collecting personal information about the people you serve.

4. Fees, GST, and renewal

Fees are those on the invoice or order. Prices are in Canadian dollars unless the order says otherwise. GST (5%) is added where Canadian law requires it.

Subscriptions renew automatically at the end of each billing period (monthly unless the order says otherwise) until you or we cancel. Cancel by written notice to john@jforgelabs.com before the next period starts. Cancellation takes effect at the end of the paid period. We do not refund a current period unless the law requires it.

If we change a recurring price we will give at least 30 days' notice before the new price applies. If you do not accept the new price, cancel before it takes effect.

We may suspend service for unpaid invoices after notice.

5. Privacy, PIPEDA, and reasonable measures

Where we process personal information for you, we do so as a service provider / processor. You remain the organization that decides why the information is collected (the controller). We process it only to run the product, including hosting, backups, email, and features you enable.

We take reasonable administrative, technical, and organizational measures appropriate to the sensitivity of the information, including access control, encryption in transit, Canadian production hosting where the product is built that way, and vendor review. Those measures are described in more detail in the security architecture summary and CIS Controls mapping we maintain for RootsX. They are not a certification. We list known gaps honestly. We do not promise a particular insurance policy.

We take reasonable steps to comply with applicable Canadian federal law, including the Personal Information Protection and Electronic Documents Act (PIPEDA), and with Saskatchewan law that applies to us. We do not use participant or customer files to train a public model, and we do not sell them.

Vendors and regions are listed in the subprocessor register for the product (for RootsX: DigitalOcean in Canada; Cloudflare, Resend, and Anthropic in the United States). Using the product is your authorization of those subprocessors. We will not disclose your files except to those subprocessors, to your authorized staff, as required by law, or as needed to handle a security incident.

6. Data breach response

If we confirm unauthorized access to personal information we process for you, we will notify your named contact as soon as feasible, with an internal target of 24 hours, and we will give you written facts so you can meet PIPEDA.

You decide, with those facts, whether there is a real risk of significant harm and whether you must notify affected people and the Privacy Commissioner of Canada, unless the law also requires us to file. Canada's statutory clock is "as soon as feasible," not a GDPR 72-hour rule. Our internal target for a Commissioner filing, if one is required of us after a real-risk finding, is 72 hours.

We keep incident records. A waiver or liability cap in these terms does not cancel a PIPEDA duty.

7. Your responsibilities

• Keep logins individual. Disable staff who leave.
• Do not upload information you have no right to hold.
• Keep your contact email current.
• Tell us promptly if you think an account or file was misused.
• Comply with the law that applies to your programs, including consent and retention.

8. Insurance

As of the date above, we do not represent that we carry a dedicated cyber-liability policy. You should keep your own coverage for privacy and cyber events that affect your programs. You may require a policy as a condition of a later renewal. Silence is not a waiver of PIPEDA or of claims for our willful misconduct.

9. Warranties and limit of liability

The service is provided as available. We do not warrant that it is error-free or that it will, on its own, satisfy a funder, auditor, or regulator.

Except for death or personal injury caused by negligence, fraud, or willful misconduct:

• each party's total liability under these terms in any twelve-month period is limited to the fees you paid us for the product in that period;
• if you paid nothing in that period, that cap is CAD $1,000;
• neither party is liable for lost profits, lost data (except the cost of reasonable restoration from backups we control), or other indirect or consequential loss.

You will defend us against claims that arise from your content, your staff, or your instructions, except to the extent we caused the claim.

10. End of service

Either party may end a subscription on written notice, effective at the end of the current paid period, or immediately for a material breach that is not cured within 15 days of notice.

After end of service we will give you a reasonable window to export your data, then delete or return the production copy on a schedule you confirm in writing.

11. Law

These terms are governed by the laws of Saskatchewan and the federal laws of Canada that apply there. The courts of Saskatchewan have exclusive jurisdiction, except where applicable law says you cannot be required to use those courts.

12. Changes

We may update these terms. The current version lives at https://jforgelabs.com/terms. Material changes will be posted there and, for paying customers, emailed to the billing contact at least 15 days before they take effect. Continued use after that date is acceptance. If you do not agree, stop using the product and cancel under section 4.