1. Who we are
AITicketInfo, operating AITicketInfo.com, is a Quebec company offering an AI traffic-ticket scanner specialized in traffic law and a referral system to partner lawyers.
2. Personal information collected
2.1 When you use the service
- Information voluntarily provided: name, email, phone, postal code.
- Statement-of-offence data: HSC section, municipal court, amount, date.
- Technical data: IP address, browser, pages visited.
- Photos/scans of the statement and, if provided, the police report.
2.2 Anonymized data for statistics
We compile aggregated statistics from public judgments. For these statistics, no individual name is retained (judges, prosecutors, police officers, defendants). Fictitious identifiers (e.g., Judge #M-042) replace real identities.
3. Purposes of collection
- Analyze your statement of offence and generate a statistical report.
- Refer you to a partner lawyer in your area (with your consent).
- Improve the accuracy of our tools (anonymized data only).
- Comply with our legal obligations (recordkeeping, regulatory responses).
4. Consent
Your consent is obtained in a granular and revocable way:
- Basic use of the service: required for operation.
- Referral to a partner lawyer: optional, opt-in checkbox.
- Anonymized use to improve our models: optional, opt-in checkbox.
- You may withdraw your consent at any time: confidentialite@aiticketinfo.com
5. Hosting and security
Primary data residency in Quebec. Our main servers (client database, files, case law) are located in Quebec (OVH Beauharnois).
Security measures: at-rest (AES-256) and in-transit (TLS 1.3) encryption, restricted access through multi-factor authentication (TOTP 2FA), access logging, immutable backups, periodic penetration tests.
5bis. Subprocessors and transfers outside Quebec (Law 25 §17)
Some automated processing (optical character recognition OCR, AI-model analysis) is delegated to subprocessors whose servers may be located outside Quebec. List of subprocessors and purposes:
- Google Cloud Document AI (United States) — OCR of ticket photos. Data transmitted: ticket photo only. Subprocessor retention: 0 days (no-retention mode enabled).
- Anthropic (Claude API) (United States) — ad-hoc legal analysis on request. Data transmitted: text extracted from the ticket + context. Retention: 30 days maximum.
- Fireworks AI (United States) — open-source language-model hosting. Data transmitted: anonymized RAG queries. Retention: ephemeral logs.
- OCR.space (United States) — backup OCR service used only if Google Document AI fails. Data transmitted: ticket photo. Retention: none (real-time processing).
- Tesseract OCR (local, Quebec) — last-resort OCR engine, executed on our Quebec servers without transfer outside Quebec. No data transmitted to third parties.
Consent by use — using these subprocessors is required for the scanner's operation. By uploading a ticket photo on our site, you consent to these automated processings and to the temporary transfer of your image to these subprocessors located in the United States. You may withdraw this consent at any time by ceasing to use the service. For prior opt-out or deferred manual analysis: contact confidentialite@aiticketinfo.com.
PIA — a Privacy Impact Assessment (Law 25 §63.5) has been documented for these transfers. Available on request to regulators and on written user request.
6. Your rights (Law 25)
Under Law 25, you have the right to:
- Access: obtain a copy of your personal information.
- Rectification: correct inaccurate information.
- Withdraw consent: at any time, free of charge.
- Data portability: obtain your data in a structured format.
- Be forgotten: deletion of your information after the legal retention period.
- Complain to the Commission d'accès à l'information du Québec: cai.gouv.qc.ca
To exercise your rights: confidentialite@aiticketinfo.com. Response time: 30 days.
7. Retention period
- Statement-of-offence photos: 24 months after case closure, then secure destruction (automatic rotation).
- Case metadata (HSC section, score, arguments, no personal identifiers): for the duration of the relationship + 7 years (tax and professional obligations).
- Identification data (name, email, phone): for the duration of the relationship + 7 years, then anonymization.
- Anonymized statistical data (no link to you): indefinitely.
- Upon deletion request: 30 days to execute (certain accounting records remain mandatory for 7 years by law).
8. Sharing with third parties
We never sell your personal information. It may be shared:
- With the partner lawyer you have chosen, to handle your case (with consent).
- With technology subprocessors (hosting, payment) bound by confidentiality agreements.
- If required by law (court order, investigation).
9. Cookies
We use cookies essential to operation (session, security) and optional ones (analytics, aggregates only). You can disable them through your browser settings.
10. Data breaches
In case of a confidentiality incident presenting a serious risk of harm, we will inform you and notify the Commission d'accès à l'information du Québec as soon as possible, in compliance with Law 25.
11. Privacy Impact Assessment (PIA)
A PIA has been completed for our main system. It is reviewed annually and on any major change. Available on request to regulatory authorities.
12. Changes to this policy
Any material change will be notified by email to active users at least 30 days before it takes effect. The latest update date is indicated below.
13. Contact us
Last updated: April 17, 2026
Version 1.0 — © 2026 AITicketInfo