Sign up

Privacy Policy

Last updated: October 22, 2026

SOSRendezVous.ca ("SOSRendezVous", also marketed in English as SOSAppointment; "we") is a Quebec appointment booking platform. We protect your personal information per Quebec Act 25 and the Canadian PIPEDA. This policy applies to patients, visitors and professionals who use the website, the mobile app and our services.

1. Information collected

  • Identification: first/last name, email, phone, city, postal code.
  • Account: bcrypt-hashed password, preferred language, subscription status, profiles of family members or pets you add to your account.
  • Appointments: clinic, service type, date/time, optional notes.
  • Intake form (health information): some clinics ask questions before the appointment (reason for visit, history, allergies, etc.). You choose what you answer; the answers are meant for the clinic and are sensitive information (see section 4).
  • Payment: no card data is stored on our servers. Payments are processed by Stripe or PayPal.
  • Text typed into our AI tools: the description of your need or symptoms in assisted search, triage or the booking assistant (see section 5).
  • Professional listing(professionals): business name, address, specialty, photos, diplomas and certificates you upload, and your team's practitioners.
  • Technical: IP address, access logs, device and browser, cookies (see the cookie policy).
  • Where your visit came from: if you create an account, we keep how you arrived (Google, an advertising campaign or an email, for example) and the pages viewed during that visit. Nothing is recorded on this point if you do not sign up.
  • Traffic measurement: searches made on the site (specialty, city) are used to measure demand; we exclude robots and only count visits where a real interaction is detected.

2. Purposes

  • Facilitate booking and management of appointments.
  • Send confirmations, reminders, waitlist offers and notifications, by email and text message.
  • Process payments and subscriptions.
  • Secure your account and prevent fraud and abuse.
  • Measure site usage and the effectiveness of our advertising (analytics, with your consent for cookies).
  • Contact you for support or to answer your requests.
  • Comply with our legal and tax obligations.

3. Legal basis and consent

Processing relies on your consent (registration, booking and intake forms, cookie banner), contract performance, and our legal obligations. You may withdraw your consent at any time, without retroactive effect. Health information is collected only with your express consent, when you fill in the form.

4. Sharing with third parties

We never sell your data. We share only with:

  • The clinic or professional you choose (name, email, phone, appointment reason and, where applicable, your intake form answers). The clinic is responsible for the information it receives and for its own records: see its policy.
  • Stripe and PayPal — payments and subscriptions.
  • Mailgun — service emails (confirmations, reminders, password reset).
  • Twilio — text messages and voice calls (reminders, waitlist offers, verification codes).
  • Artificial intelligence providers — Anthropic (Claude) and, as a fallback, OpenAI: they receive the text you type into our AI tools.
  • Google — Google Tag Manager and Google Analytics (with your consent), Google sign-in, and Google Calendar if a clinic connects it (see below).
  • Hosting and technical services — our hosting provider and rate-limiting service (IP address only), to run and protect the site.
  • Authorities — when required by law.

Some of these providers process data outside Quebec, and sometimes outside Canada (notably Stripe, PayPal, Twilio, Mailgun, Google and the AI providers). We send them only what their service needs and rely on their contractual privacy commitments.

Google Calendar (professionals)

A clinic may choose to connect its Google Calendar from its settings. We then request Google's "calendar.events" permission, and only that one. We use it to:

  • create an event on the clinic's primary calendar for each booked appointment (service, client name, practitioner) and delete it if the appointment is cancelled;
  • read upcoming events on that calendar to mark already-busy time slots as unavailable and prevent double bookings.

We do not read the content of your other events beyond their times, we do not share them with anyone, we do not use them for advertising or to train artificial intelligence models, and no human reads them except with your consent or for security or legal compliance. The clinic can disconnect at any time in its settings: access is then revoked at Google and our copies of the tokens are deleted. You can also remove access from your Google account (myaccount.google.com/permissions).

SOSRendezVous's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

5. Artificial intelligence tools

Assisted search, symptom triage and the booking assistant send the text you write to an AI provider to produce an answer. These tools only point you toward a specialty: they give no diagnosis and do not replace professional advice. Do not enter your name, health insurance number or detailed health information you do not need to share. These tools can be switched off without affecting appointment booking.

6. Business listings from public sources

To help patients find care, our directory shows business listings whose professional contact details (name, address, phone, website, public rating and reviews) come from public sources such as Google. Not all of these businesses have joined SOSRendezVous. A business can claim its listing, correct it or ask for its removal by writing to privacy@sosrendezvous.ca. We may also email a business's public professional address to introduce our services; every message includes an unsubscribe link, applied without delay, and the address is then added to an exclusion list we keep so as not to contact it again.

7. Retention

  • Active account: as long as your account exists.
  • Appointment history: 5 years (accounting obligations).
  • Audit logs: 12 months.
  • Prospecting email exclusion list: as long as needed to honour your unsubscribe.
  • Account deletion: erased within 30 days unless legal obligations require otherwise.

8. Your rights

  • Right of access.
  • Right of correction.
  • Right of deletion("right to be forgotten").
  • Right to portability (export your data from your account or on request).
  • Right to withdraw consent.

To exercise these rights: privacy@sosrendezvous.ca. We respond within 30 days.

9. Security and incidents

Bcrypt-hashed passwords (cost 12), encrypted HTTPS/TLS connections, restricted database access, audit logs for every sensitive action. If a privacy incident presents a risk of serious injury, we will notify the Commission d'accès à l'information and the people concerned, as the law requires.

10. Children

The site is intended for people aged 14 and over. For a child under 14, the account and consent are managed by the parent or guardian ("family" profile).

11. Privacy Officer

SOSRendezVous — Person in charge of the protection of personal information
Email: privacy@sosrendezvous.ca

12. Complaint to the CAI

If your rights are not respected, you may file a complaint with the Commission d'accès à l'information du Québec.

13. Changes

Any material change will be notified by email before taking effect. The date of the last update appears at the top of this page.