Law 25
Privacy Policy
Last updated: March 23, 2026
1. Personal Information Protection Officer
In accordance with the Act respecting the protection of personal information in the private sector (Law 25), the personal information protection officer at Synaptiqc is:
Patrick Goulet
Founder, Synaptiqc — Sole Proprietorship
Email: confidentialite@synaptiqc.com
Form: synaptiqc.com/contact
2. Personal Information Collected
We collect the following information, only with your manifest, free and informed consent:
- Full name (via the contact form)
- Email address (via the contact form)
- Company name (if voluntarily provided)
- Professional situation description (if voluntarily provided)
- Conversations with our automated assistant (with your consent)
- Appointment booking data (name, email, date/time)
3. Purposes of Collection
Your personal information is collected for the following purposes:
- To contact you regarding your request
- To offer you a personalized and relevant service
- To improve the quality of our services
- To comply with our legal obligations
No personal information is sold, rented or shared with third parties for marketing or profiling purposes.
4. Means of Collection
- Contact form on the website
- Automated conversational assistant (chatbot)
- Appointment booking via our scheduling tool
Each collection point requires your explicit consent before transmitting your personal information.
5. Conversational Assistant (Chatbot)
Our site uses an automated conversational assistant to answer your questions and guide you to the appropriate services.
In accordance with article 12.1 of the Act respecting the protection of personal information in the private sector, we inform you that you are interacting with an automated system, not a person.
Conversations are recorded only with your consent. No personal data is collected via the chatbot without your prior explicit agreement.
If an automated decision concerns you, you have the right to know its general logic and request a human review.
6. Data Hosting and Location
Your data is hosted in Canada, on servers located in Quebec (OVH Beauharnois). No personal data is permanently stored outside of Canada.
Infrastructure
- Database: Self-hosted Supabase on Canadian VPS (OVH Beauharnois, Quebec)
- Encryption: TLS 1.3 in transit, encryption at rest
- Backups: daily, 30-day retention, stored in Canada
- Frontend: Vercel (website hosting only — no personal data)
7. Cross-Border Transfers
Certain automated processing requests transit through servers located in the United States for linguistic processing only. These transfers are documented as processing transits without persistence — no personal data is stored by these providers.
- Anthropic (Claude API) — zero input data retention policy
- OpenAI API — training option disabled, no persistence
These transfers are authorized under our data processing agreement and documented in compliance with Law 25 requirements for cross-jurisdictional transfers.
8. Retention Period
- Contact form: 12 months after last exchange
- Chatbot conversations: 90 days after last interaction
- Appointment data: 12 months after the appointment
After these periods, your data is securely and irreversibly deleted.
9. Your Rights
In accordance with Law 25, you have the right to:
- Access your personal information that we hold
- Request correction of inaccurate information
- Request deletion of your information
- Withdraw your consent at any time
- Obtain your data in a structured, machine-readable format (right to portability)
- Be informed of the logic behind automated decisions concerning you and request a human review
- File a complaint with the Commission d'accès à l'information du Québec (CAI)
To exercise any of these rights, contact our personal information protection officer at confidentialite@synaptiqc.com or via the contact form. We respond within 30 days.
10. Cookies
Our site uses cookies strictly necessary for the site to function. Analytics and marketing cookies are disabled by default and are only activated with your explicit consent. No response equals refusal.
You can manage your preferences at any time via the "Manage my preferences" link available in the footer. Control is granular: necessary, analytics and marketing.
11. Third Parties Involved
- OVH Canada — Data hosting (Beauharnois, Quebec)
- Anthropic — Linguistic processing in transit (United States, zero retention)
- OpenAI — Linguistic processing in transit (United States, training disabled)
- Vercel — Website hosting (no personal data stored)
No personal information is sold, rented or shared with third parties for marketing purposes. Synaptiqc may change its providers provided that the service level, Canadian location and security standards are maintained.
12. Protection of Minors' Data
Our services are exclusively intended for businesses and professionals. We do not knowingly collect personal information from minors (under 14 years old in Quebec).
If we discover that data from a minor has been inadvertently collected, it will be immediately deleted.
13. Changes to This Policy
This policy may be updated periodically. In case of significant changes, we will inform you via the site. The date of the last update is indicated at the top of this page.
14. Right to Complain
If you believe your rights have not been respected, you may file a complaint with the:
Commission d'accès à l'information du Québec (CAI)