Privacy Policy — AITicketInfo (Quebec Law 25 compliant)

Personal Information Protection Officer
Michael Perron — confidentialite@aiticketinfo.com

1. Who we are

AITicketInfo, operating AITicketInfo.com, is a Quebec company offering an AI traffic-ticket scanner specialized in traffic law and a referral system to partner lawyers.

2. Personal information collected

2.1 When you use the service

Information voluntarily provided: name, email, phone, postal code.
Statement-of-offence data: HSC section, municipal court, amount, date.
Technical data: IP address, browser, pages visited.
Photos/scans of the statement and, if provided, the police report.

2.2 Aggregated data for statistics

We compile aggregated statistics from public judicial decisions. In public statistical views and APIs, no individual profile, name, or pseudonym is displayed.

Names already published in judicial decisions may remain in the source corpus and may be consulted only in the authenticated professional area when necessary to prepare a case. Access is controlled and logged; no named list is published through public pages or APIs.

3. Purposes of collection

Analyze your statement of offence and generate a statistical report.
Refer you to a partner lawyer in your area (with your consent).
Improve the accuracy of our tools (anonymized data only).
Comply with our legal obligations (recordkeeping, regulatory responses).

4. Consent

Your consent is obtained in a granular and revocable way:

Basic use of the service: required for operation.
Referral to a partner lawyer: optional, opt-in checkbox.
Anonymized use to improve our models: optional, opt-in checkbox.
You may withdraw your consent at any time: confidentialite@aiticketinfo.com

5. Hosting and security

Primary data residency in Quebec. Our main servers (client database, files, case law) are located in Quebec (OVH Beauharnois).

Documented security measures: HTTPS for public exchanges, access controls for professional features, and logging of sensitive consultations. Technical details are periodically reassessed; this policy does not claim an independent security certification.

5bis. Subprocessors and transfers outside Quebec (Law 25 §17)

Some automated processing (optical character recognition OCR, AI-model analysis) may be delegated to subprocessors whose servers may be located outside Quebec. The technical inventory observed on August 26, 2026 includes:

Google Cloud Document AI — ticket-photo OCR; an image and the data required for OCR may be transmitted when this engine is used.
Anthropic (Claude API) — model-assisted analysis and OCR functions; submitted content and necessary context may be transmitted for the requested function.
Fireworks AI — model and embedding functions; queries required for those functions may be transmitted.
OCR.space — fallback OCR engine; an image may be transmitted if this fallback route is used.
Tesseract OCR (local, Quebec) — last-resort OCR engine, executed on our Quebec servers without transfer outside Quebec. No data transmitted to third parties.

Notice before upload — before sending a photo, the user must be informed of the requested processing and possible transfers. Where consent is the selected legal basis, it must be express, free and informed; merely ceasing to use the service is not a substitute for a withdrawal or deletion request. To request another processing route, withdraw consent, or request deletion: confidentialite@aiticketinfo.com.

PIA and transfers — section 17 of Quebec's private-sector privacy legislation requires a privacy impact assessment before communicating personal information outside Quebec. An initial technical assessment dated August 26, 2026 documents data flows and risks; evidence of contractual terms, processing locations, provider retention periods, and formal approval must be maintained by the privacy officer. No independent legal certification is claimed.

6. Your rights (Law 25)

Under Law 25, you have the right to:

Access: obtain a copy of your personal information.
Rectification: correct inaccurate information.
Withdraw consent: at any time, free of charge.
Data portability: obtain your data in a structured format.
Cessation of dissemination, de-indexing, or deletion where the legal conditions apply, subject to mandatory retention obligations.
Complain to the Commission d'accès à l'information du Québec: cai.gouv.qc.ca

To exercise your rights: confidentialite@aiticketinfo.com. Response time: 30 days.

7. Retention period

Public OCR preview: the temporary file is destroyed at the end of the request; extracted text is returned to the browser and is not presented as legal analysis.
Former public chat: new conversations and evidence uploads are disabled. Messages or files submitted before closure may remain until manual deletion or an approved formal schedule is applied; no automatic 24-hour purge is claimed. Use the address below to request deletion.
Authenticated cases, Bailey, and lawyer CRM: documents, notes, and identification data are kept until deletion by an authorized user or administrator, subject to an applicable legal duty. The privacy officer must approve a formal schedule by data category before a uniform period is claimed.
Anonymized statistical data (no link to you): indefinitely.
Access, correction, or deletion requests: handled within the applicable legal period; data subject to a retention duty may be isolated instead of deleted.

8. Sharing with third parties

We never sell your personal information. It may be shared:

With the partner lawyer you have chosen, to handle your case (with consent).
With technology subprocessors (hosting, payment) bound by confidentiality agreements.
If required by law (court order, investigation).

9. Cookies

We use cookies essential to operation (session, security) and optional ones (analytics, aggregates only). You can disable them through your browser settings.

10. Data breaches

In case of a confidentiality incident presenting a serious risk of harm, we will inform you and notify the Commission d'accès à l'information du Québec as soon as possible, in compliance with Law 25.

11. Privacy Impact Assessment (PIA)

An initial technical privacy-impact analysis was documented on August 26, 2026. It is neither legal advice nor an independent certification. The privacy officer must complete and approve the formal PIA, attach relevant contractual evidence, and review it before any new personal-information flow or major change.

12. Changes to this policy

Any material change adverse to individuals' rights will be notified by email to active users at least 30 days before it takes effect. A change that strengthens security, shortens retention or implements a legal obligation may take effect immediately; it is documented and dated below.

13. Contact us

Personal Information Protection Officer:

Michael Perron
AITicketInfo
Email: confidentialite@aiticketinfo.com
General support: contact@aiticketinfo.com