Compliance · Law 25
What happens to your data, checkable line by line.
A vendor cannot make you “Law 25 compliant”: compliance is your business’s obligation. What a vendor can do is give you everything you need to meet it. Here it is.
Privacy officer
Mathieu Payment
Owner, Zen Solutions — Laval, Québec
privacy@zen-solutions.net
Access, correction, deletion, complaint: write to this address.
Documents kept
- Privacy impact assessment (transfer outside Québec)
- Confidentiality incident register
- Data-protection agreement register for each subprocessor
Provided on request to a client or prospective client.
What we do not claim
The audio of a live call is processed in the United States, by the voice-model provider. Nobody in this market offers live voice processing in Canada, and we will not write that until it is true.
Our subprocessors and where they process data
Built from the platform’s code and from an analysis of real production requests, not from memory. Both AI providers contractually exclude your data from training their models.
| Subprocessor | Role | Data received | Region | When |
|---|---|---|---|---|
| Railway | Application and database hosting | Everything the platform stores | United States | Always |
| xAI | Speech-to-speech model of the phone agent | The audio of the live call | United States | During every call |
| Anthropic | Language model (chat, email, assistant) | The text of the messages processed | United States | When a text AI feature is used |
| Twilio | Telephony and SMS | Phone numbers, SMS content, call routing | United States | Always (voice agent) |
| Stripe | Payments and subscriptions | Name, email, payment data | United States and Ireland | On a payment |
| Calendar, sign-in and notifications | Identity, appointments, notification tokens | United States | If you connect Google | |
| Sentry | Technical error log | Error reports, scrubbed of personal information before sending | United States | On an error |
| Cloudflare (R2) | Database backups | Backups encrypted before upload — Cloudflare cannot read them | North America | Daily, erased after 30 days |
| Meta | Messenger and advertising | Messenger messages; on our pages, the pixel only after you agree | United States | If you connect Facebook |
| Microsoft | Outlook mailbox | The content of the connected mailbox | United States | If you connect Outlook |
| Komoot (Photon) | Address suggestions in the booking form | The address typed, relayed by our server (your IP address is not sent) | Germany | While an address is typed |
Protections in place
- Encryption in transit (TLS) on every connection.
- Tokens, keys and mailbox passwords encrypted at rest (AES-256-GCM), never exposed to the browser.
- Data isolated per business, with per-user access limits enforced on the server.
- No voice identification: the agent recognises a caller by number, and asks for it when withheld.
- We never sell your data or your customers’ data.
Need your data to stay in Canada? Say so before signing: it is a hosting decision we can discuss, not a surprise to discover later. Full policy: privacy. Live service status: /status.