Regarding QuickBooks Online processing for Remax, what agreement governs Intuit's processing of personal information about a franchisee's customers, vendors, and prospects?

You agree that Intuit's processing of personal information about your customers, vendors, and prospects ("Business Connection Data"), shall be in accordance with the QuickBooks Online Data Processing Agreement ("DPA"). Some services may be subject to a separate DPA or processing terms, as specified in any service-specific terms. For the purposes of applicable data protection laws, you agree and acknowledge that there are instances in which we process Business Connection Data as a data controller for certain limited purposes, including for example, in relation to our product development and improvement, data analytics, and fraud prevention and security. In those cases, the terms of our Global Privacy Statement govern our processing of Business Connection Data. In all other instances, as further set forth in the DPA, we act as your processor or service provider of Business Connection Data. If you acquire personal information of other Intuit customers as part of our B2B Network, we will process that information as Business Connection Data. You further agree that you will notify Business Connection Data subjects in your privacy notice or by other commercially reasonable means, that Intuit is a data controller with respect to Business Connection Data as described in this paragraph and will include a link to the Intuit Global Privacy Statement.

Source: Item 22 — Contracts (FDD pages 108–334)