Privacy policy

Allo Clinique (the “Service”) is an artificial-intelligence voice receptionist for health clinics in Quebec (all disciplines), operated by Lotfi Hichem Boutalbi (the “Provider”), based in Quebec, Canada.

For any question about this policy, or to exercise your rights, contact us at contact@allo-clinique.com.

To provide the Service, we process three categories of data:

• Client clinic data: clinic name, address, time zone, opening hours, average value of a visit, email and phone number of the person in charge, access token to the practice-management software if an optional synchronisation is enabled.
• Data about patients who call (collected on behalf of the client clinic): phone number, first name, last name, reason for the call, text transcript of the call, appointments requested or changed. The client clinic is the controller of this data; we act as a processor.
• Technical data: IP address, browser type, error logs (through Sentry), phone-call metadata (duration, timestamp, status, cost).

• Running the voice agent and appointment booking (basis: performance of the contract).
• Sending SMS confirmations and reminders to patients (basis: performance of the contract with the clinic).
• Improving service quality (aggregated, anonymised analysis).
• Meeting our legal obligations (invoicing, accounting).

We never use patient transcripts to train third-party AI models. The content stays confidential.

The primary storage of your data (records, appointments, transcripts) is located in Canada, on Supabase infrastructure (ca-central-1 region, Montreal). Some technical processors nonetheless handle data in the United States during the call: Vapi (voice orchestration) and Deepgram (transcription) may temporarily keep copies of the audio or the transcript on American servers. We are working to reduce those copies; the full list appears below.

Our main processors and the jurisdictions involved:

• Supabase — database (Canada)
• Vercel — application hosting (United States, data in transit)
• Twilio — phone and SMS gateway (United States)
• Vapi — AI voice engine (United States)
• Anthropic — Claude language model (United States)
• ElevenLabs — voice synthesis (the assistant’s voice) (United States)
• Microsoft Azure — fallback fr-CA voice synthesis (United States)
• Deepgram — real-time transcription (United States)
• Stripe — payments (United States)
• Sentry — error logging (United States)

Transfers to those jurisdictions outside Quebec rely on the data-processing terms published by those providers; formal data processing agreements (DPAs) with each of them are being put in place and are the subject of a privacy impact assessment (PIA).

As a person whose data is processed, you have the right to:

• Access: obtain a copy of the data concerning you.
• Rectification: correct inaccurate data.
• Erasure: ask for your data to be deleted (right to be forgotten).
• Portability: receive your data in a structured, readable format.
• Objection: object to the processing of your data.
• De-indexing: have your data removed from search results.

To exercise these rights, write to contact@allo-clinique.com. We answer within 30 days.

• Clinic account data: term of the contract + 7 years (accounting obligations).
• Call transcripts: 12 months, then automatic daily deletion. The content of text messages follows the same period.
• Messages from the public-site chat, demo call-back requests and pilot program applications: 90 days, then automatic deletion. Where an application led to an account being opened, we keep only the record of the link to the program (status and date), with no contact details.
• Patient data (name, phone, appointments): kept for the term of the contract with the client clinic, which is the controller. No automatic deletion by age is applied to it today. It is erased at the request of the clinic or of the person concerned (section 5), a request we handle within 30 days. The end of the contract does not on its own trigger that erasure: the data stays in place until such a request, which the clinic can send us when it leaves.
• Audio recordings: there is no more recording. Since August 3, 2026, no recording of your call is created, neither by us nor by the voice platform that handles the call (section 4): of your conversation, only the text transcript exists, kept for the periods above. Calls before that date may still have a recording at that provider, under its own retention policy, which we do not control — write to us to ask for its deletion and we will claim it from them.
• Technical logs (Sentry): 90 days.

Phone calls to clinics using the Service are answered by an automated voice agent (artificial intelligence) and are transcribed to text, kept for the periods in section 6. The agent identifies itself as a virtual assistant. If you would rather speak to a human, simply say so during the call: the agent will transfer you to the front desk or take a message so that someone calls you back.

In the event of a confidentiality incident involving personal information, we undertake to: keep a register of incidents; assess the risk of serious injury; notify the Commission d’accès à l’information (CAI) and the persons concerned where the law requires it; and assist client clinics (controllers under Law 25) with their own notification obligations.

Our site uses a small number of cookies. Here they all are:

• Supabase session cookies: to keep you signed in to the dashboard. Necessary for the Service to work.
• Stripe cookies: only if you start a payment. Necessary for the payment.
• allo_pending_checkout: set when you click “Get started” from the pricing page. It sets your order aside (plan, number of phone numbers, add-ons) while you sign in, so you do not have to enter everything again. Duration: 30 minutes.
• allo_ref: set only if you arrive through a referral link (address of the form allo-clinique.com/r/CODE). It contains nothing but the code of the clinic that recommended the Service, so that the referral can be credited if you sign up — no identifier about you. Duration: 30 days. This is the only one of our cookies that is not strictly necessary: if you refuse or delete it, the site works normally, only the referral credit is lost.
• _fbp and _fbc (Meta pixel): only if you clicked “Accept” in the banner. They measure our advertising campaigns on Facebook and Instagram: your visit and, where applicable, your click on our phone number are sent to Meta Platforms, which can match them to your account. This is an advertising cookie, it allows profiling and cross-site tracking, and it is set by a third party located outside Quebec. As long as you have not accepted, this pixel is not loaded: no request is sent to Meta and none of these cookies is set. If you refuse, the site works normally. You can change your mind by clearing the site data in your browser: the banner will appear again.

allo_pending_checkout and allo_ref are set by allo-clinique.com, are unreadable by scripts on the page (httpOnly flag) and are sent over an encrypted connection only; neither serves advertising and neither follows you across other sites. Our audience measurement (Vercel Web Analytics) is anonymous and cookie-free: page views and aggregated events, with no individual identifier. The Meta pixel is the only device on this page that belongs to advertising — and it depends on your consent.

All data in transit is encrypted with TLS 1.2+. Data at rest is encrypted by default on the Supabase side. Access to patient data is restricted to the owning clinic account through PostgreSQL Row-Level Security. Access tokens to third-party software (optional synchronisations) are encrypted and reachable only by our backend service.

We will publish any significant change to this policy on this page with a new update date. For substantial changes, we will notify client clinics by email at least 30 days in advance.

Person in charge of the protection of personal information: Lotfi Hichem Boutalbi — contact@allo-clinique.com.

If you believe your rights are not being respected, you can file a complaint with the Commission d’accès à l’information du Québec: cai.gouv.qc.ca.