Privacy Policy

Effective Date: September 28, 2026
Last Reviewed: September 28, 2026

10505471 Canada Inc., operating as Rabbithole Labs ("Rabbithole Labs", "we", "us", or "our"), respects the privacy of individuals whose information we receive or process in connection with our websites, products, services, customer relationships, and business operations.

This Privacy Policy explains the types of personal information we may collect, how we use and protect that information, when it may be shared, how long it may be retained, and the choices and rights available to individuals.

Rabbithole Labs primarily operates as a business-to-business technology and data-processing provider. In some circumstances, information processed through our Services is provided or controlled by our customers rather than collected directly by Rabbithole Labs.

1. Scope

This Privacy Policy applies to personal information handled by Rabbithole Labs in connection with:

• the Rabbithole Labs website;
• the Rabbithole Labs Monitoring Platform;
• the Sprockit Platform and related services;
• APIs and supported programmatic interfaces;
• customer support and business communications;
• sales, billing, contracting, and customer administration;
• technical integrations;
• security, operational, and diagnostic activities; and
• other services provided by Rabbithole Labs.

Where Rabbithole Labs processes information on behalf of a customer, the applicable customer may be responsible for determining how and why that information is collected and used.

A separate customer agreement, data-processing agreement, or other contractual document may also apply.

2. Information We May Collect

Depending on how an individual interacts with Rabbithole Labs, we may collect or process the following categories of information.

Information Provided Directly

This may include:

• name;
• business email address;
• telephone number;
• company or organization name;
• job title or business role;
• information provided through inquiries or support requests;
• account or customer information;
• billing or administrative information;
• technical information supplied for integration or troubleshooting; and
• other information voluntarily provided to Rabbithole Labs.

Customer and Service Data

Customers may provide data to Rabbithole Labs or authorize Rabbithole Labs systems to process information in connection with the Services.

Depending on the applicable Service, this may include:

• system or device identifiers;
• application or equipment information;
• monitoring and operational data;
• technical events and status information;
• integration data;
• customer-provided account information; and
• other information required to provide an agreed Service.

Customers retain their rights and ownership interests in Customer Data. Rabbithole Labs processes Customer Data only as reasonably necessary to provide and support the applicable Services. This is consistent with our contractual framework, which states that Customer Data may be processed to operate Services, perform integrations, provide support, maintain security, meet contractual obligations, and comply with applicable legal requirements.

Website and Technical Information

When our website or online Services are accessed, we may receive technical information such as:

• IP address;
• browser type;
• device or operating-system information;
• referring pages;
• pages or resources accessed;
• timestamps;
• security and diagnostic information; and
• similar technical information generated through normal website or service operation.

Cookies and Similar Technologies

Our public website may use cookies or similar technologies for functions such as:

• basic website operation;
• security;
• remembering preferences;
• understanding website usage; and
• analytics, where enabled.

Where consent is required for non-essential cookies or analytics, applicable consent mechanisms may be used.

Users may also control certain cookies through their browser settings, although disabling cookies may affect some website functionality.

3. How We Use Information

Rabbithole Labs may use personal information where reasonably necessary to:

• provide, operate, maintain, and support our Services;
• establish and administer customer relationships;
• respond to inquiries and support requests;
• authenticate and manage access to Services;
• perform requested integrations;
• troubleshoot technical issues;
• communicate with customers and business contacts;
• process billing and administrative activities;
• monitor system performance and availability;
• protect the security and integrity of our systems and Services;
• investigate suspected unauthorized activity or security incidents;
• maintain operational, security, and audit records;
• improve our Services and business operations;
• comply with contractual requirements;
• comply with applicable laws and regulatory obligations; and
• establish, exercise, or defend legal rights.

We limit collection, use, and retention of personally identifiable information to legitimate business, operational, contractual, security, or legal purposes.

4. Customer-Controlled Information

Rabbithole Labs primarily provides business-to-business technology services.

In some cases, Rabbithole Labs processes personal information on behalf of a customer. In those situations:

• the customer may determine why the information is collected and used;
• Rabbithole Labs may process the information according to the customer's instructions and the applicable agreement;
• the customer may be responsible for providing applicable privacy notices and obtaining any required permissions; and
• individuals may need to direct privacy requests to the applicable customer.

If Rabbithole Labs receives a request relating to information controlled by one of our customers, we may refer the requester to that customer or coordinate with the customer where appropriate.

5. How We Share Information

Rabbithole Labs does not sell Customer Data.

We may disclose information where reasonably necessary to:

• customers or authorized customer representatives;
• approved cloud, hosting, authentication, infrastructure, communications, monitoring, security, or technology service providers;
• professional advisers such as accountants, auditors, insurers, or legal advisers;
• regulators, courts, law-enforcement authorities, or government bodies where legally required;
• parties involved in the investigation or response to a security incident;
• parties involved in a corporate restructuring, merger, acquisition, financing, or sale of assets, subject to appropriate confidentiality requirements; or
• another party when authorized by the individual, customer, or applicable agreement.

Third-party providers that process or store confidential information are evaluated based on the nature and risk of the information involved.

6. Third-Party Service Providers

Rabbithole Labs uses third-party technology providers where reasonably necessary to provide and secure our Services.

These may include providers of:

• cloud infrastructure;
• authentication;
• communications;
• security;
• monitoring;
• business productivity;
• accounting or billing; and
• other supporting technology services.

Access by service providers is limited according to the applicable service, legitimate business requirements, and appropriate security controls.

Our contractual framework similarly provides that third-party access to Customer Data is limited to what is reasonably necessary for the applicable service.

7. Information Security

Rabbithole Labs maintains administrative, technical, and operational safeguards intended to protect information against unauthorized access, disclosure, alteration, loss, or misuse.

Depending on the applicable system and information, safeguards may include:

• access restrictions based on legitimate business need;
• authentication and access-control mechanisms;
• least-privilege access;
• encryption or protected transmission mechanisms;
• protected credential and secret storage;
• security logging and monitoring;
• threat detection;
• backup protections;
• incident-response procedures; and
• secure disposal practices.

Our internal Data Management Policy requires confidential information to be restricted to authorized personnel, protected using appropriate security controls in transit and at rest, and securely managed before disposal or transfer.

No security system can guarantee absolute protection, but Rabbithole Labs uses safeguards appropriate to the nature of the information, applicable systems, and identified risks.

8. Data Retention

Rabbithole Labs retains information based on legitimate:

• business;
• operational;
• contractual;
• regulatory;
• security; and
• legal requirements.

Retention periods vary depending on the type and purpose of the information.

Personally identifiable information is retained only while reasonably necessary for an applicable legitimate purpose and is deleted, de-identified, archived, or otherwise appropriately managed when no longer required.

Customer information may be retained after a customer relationship ends where necessary for:

• contractual requirements;
• legitimate business or operational requirements;
• security or audit purposes;
• troubleshooting;
• legal or regulatory obligations; or
• other justified retention requirements.

Information subject to a legal hold, litigation requirement, regulatory requirement, or similar preservation obligation may be retained for the required period even where normal retention practices would otherwise permit deletion.

9. Access, Correction, and Deletion Requests

Subject to applicable law and the nature of the information involved, individuals may request:

• access to personal information about them;
• correction of inaccurate personal information;
• deletion of personal information;
• information regarding the use of their personal information; or
• other privacy rights provided by applicable law.

Requests may be subject to reasonable identity verification.

Rabbithole Labs will evaluate verified deletion requests and fulfill them where applicable and where no overriding contractual, business, security, regulatory, or legal obligation requires continued retention.

Where the information is controlled by a Rabbithole Labs customer, the request may need to be directed to that customer.

10. Cross-Border Processing

Depending on the applicable Service and third-party provider, information may be stored or processed in Canada or in other jurisdictions in which Rabbithole Labs or its service providers operate.

Where information is processed by an authorized service provider, applicable contractual, technical, and organizational protections may be used based on the nature and sensitivity of the information.

Information processed outside an individual's home jurisdiction may be subject to the laws of the jurisdiction in which it is processed.

11. Children's Privacy

Rabbithole Labs provides business-to-business technology products and services and does not intentionally offer its Services directly to children.

We do not knowingly collect personal information directly from children through our public website for the purpose of providing consumer services.

If we become aware that personal information was collected directly from a child in circumstances where it should not have been collected, we will take appropriate steps to address the information.

12. External Links

The Rabbithole Labs website or Services may contain links to websites, products, or services operated by third parties.

Rabbithole Labs is not responsible for the privacy practices of independent third parties. Individuals should review the applicable privacy notices of those organizations.

13. Changes to This Privacy Policy

Rabbithole Labs will review this Privacy Policy at least annually and when significant changes occur to our data-handling practices, Services, legal obligations, or business operations.

The Last Reviewed date at the top of this page indicates the most recent review.

Where material changes are made, the revised policy will be published on this page with an updated effective or review date.

This annual review approach is consistent with Rabbithole Labs' internal data-management process, which requires retention and disposal requirements to be reconsidered during periodic policy review and when material business, contractual, system, or regulatory requirements change.

14. Contact Us

Questions, concerns, or privacy requests regarding this Privacy Policy or Rabbithole Labs' handling of personal information may be submitted through the contact information available on the Rabbithole Labs website.

Written correspondence may be directed to:

10505471 Canada Inc. operating as Rabbithole Labs
38 Goldring Dr
Whitby, Ontario L1P 1C1
Canada