How we handle your
health information.

01Overview

Surforme organizes the health information you upload into one structured Portrait. This policy explains what personal information we collect, why, how it is protected, and the rights you have over it.

02Information we collect

Today, the email you provide to join the waitlist or to contact us, with any name and message you add. When the platform opens: the account details you provide, the health sources you upload, the Portraits generated from them, and the basic usage and device data needed to run and secure the service.

03How we use your information

To generate and maintain your Portrait, to operate and secure your account, and to provide support. We do not sell your personal information.

04Where your data is stored

Your health data is stored at rest in Canada, on infrastructure based in Québec. Hosting is configured to stay in a Canadian region.

05Cross-border processing

To generate a Portrait, document text is processed transiently by an AI provider under a data-processing agreement. Any cross-border processing is disclosed and consented before it occurs. It is never ongoing storage outside Canada.

06Sharing and consent

Nothing in your Portrait reaches a practitioner unless you turn on sharing for that specific person. Sharing is read-only, you can withdraw it at any time, and every consent is recorded. Letting a practitioner send documents into your account is a separate permission you control the same way.

07Your rights

Under Québec Law 25 and Canadian PIPEDA you may access your information, correct it, delete it, withdraw consent, and request portability, subject to the limits the law allows.

08Data retention

We keep your information while your account is active and for as long as we need it to provide the service and meet our legal obligations.

Deleting a document removes the file and its extracted results from your record and your trends. Portraits already delivered to you are kept as delivered, including content drawn from that document. Deleting your account removes those too.

09Security

Your records sit behind strict access controls, including data isolation, and access to sensitive data is limited to the processing that needs it. No method of storage or transmission is completely secure.

10Cookies

Surforme uses only the cookies needed to operate the site and to remember your language preference. We do not use advertising cookies.

11Changes to this policy

We may update this policy. When we do, we will revise the effective date above and communicate any material change.

12Contact and Privacy Officer

For privacy questions or requests, including access, correction, or withdrawal of consent, reach us through our Contact page. Your request goes to the person responsible for protecting your personal information.