Your data, our practices
How our privacy policy applies to the service, including the limits of the tools we use.
Data to respond to your request
We collect contact details supplied through forms, assessment and calculator answers, and information needed for appointments and follow-up. These answers are also used to calculate an internal score that helps us prioritize follow-up. We do not sell or rent that information or build advertising profiles.
Where data is processed
The Supabase database is currently hosted in the United States. Application processing (Vercel) runs in Montréal. Stripe processes payments, Resend delivers email and Anthropic writes reports. The Grok Bot (xAI) business assistant may access necessary records through dedicated, revocable permissions. Several of these services process data outside Québec and Canada, notably in the United States.
The role of AI
Reports are written by Claude (Anthropic). If the daily cap is reached or the generated text fails our checks, a standard template without AI is used. These are opportunities to assess, not a guarantee of results. Free text entered in public forms is not sent to the AI that writes the report.
Limited access
Payment and database credentials stay on the server. The administrative workspace requires an owner session; the portal restricts access to the client’s record. The assistant can prepare drafts, but publication and message sending require an owner action. These controls are not a security certification.
Your rights and who to contact
You may request access, correction, consent withdrawal or de-indexing of your information. Email confidentialite@lucarne.ca; we respond within 30 days.
Contact the privacy officer