Privacy policy.

Who is responsible

For the pilot, the person with the highest authority over its operation acts as privacy officer by default. The title and contact channel appear below. The operator’s full legal identity and business address remain mandatory before transactions.

Information collected

• Place search: searched text, selected place and geographic identifier; no real-time position or personal address is requested.
• Founding group: email, intended role, usual direction, frequency, language, date, source and consent version.
• Canada network: email, selected corridor or proposed cities, role, direction, language, date and consent to corridor updates.
• Driver draft check: irreversible email fingerprint, date, direction, time, DuoPoints, general purpose without a private narrative, seats, costs, contributions, attestations, result, blocking reasons and ruleset version.
• Future photos and reviews: profile photo, vehicle photos, rating, comment, related booking, reports, moderation decisions and appeals.
• Contact: email, topic, message and request follow-up.
• Security: IP address, user agent, timestamp and logs strictly needed for operation and abuse prevention.

The current photo picker creates only a local preview in your browser: no file is transmitted to or retained by DuoVoie. Media and reviews will be collected only with real accounts, secure storage, access controls and removal tools. We do not currently request identity documents, licence, payment, medical or real-time location data.

Purposes and access

Data is used to balance the pilot, send only consented news, answer requests, create aggregate statistics and protect the site. The driver log specifically recalculates caps, detects duplicates, applies the daily limit and routes unusual frequency to review.

An automated block only prevents acceptance of a pilot draft and is not a final legal, financial or eligibility decision. Data is not sold, rented or used for behavioural advertising. Access is restricted to people and providers who need it.

Consent and email

Marketing signup uses a separate, unchecked box. Consent records retain the date, source and version. Every future commercial message must identify the sender, provide contact details and include a working unsubscribe method.

Unsubscribe requests will be implemented within 10 business days. No promotional campaign will launch until this process and sender identity are operational.

Providers and processing outside Québec

The site and pilot database use Cloudflare cloud infrastructure. Place search queries Natural Resources Canada’s public geographical-names service through the DuoVoie server; useful official results may be retained in the DuoVoie catalogue. That service receives the searched text, but not your email or real-time position. Data may be processed in Canada or the United States. Before a new transactional system or disclosure outside Québec, DuoVoie must complete the required privacy impact assessment and bind providers by contract.

Retention and destruction

Signups are deleted no later than 24 months after the last interaction, earlier on request where law allows, or six months after the pilot is abandoned. Contact requests are kept up to 24 months. Pilot compliance logs are kept for no more than 12 months unless a documented abuse investigation, dispute or legal duty requires longer.

At the end of the period, information is securely destroyed, including through a reasonable backup cycle. Retention, access authorization and destruction form part of internal governance rules.

Security and incidents

Reasonable controls restrict access, but no system can promise absolute security. Incidents are assessed, entered in the required register and, when they present a risk of serious harm, reported to the CAI and affected people as required by law.

Your rights and response time

You may request access, correction, consent withdrawal, deletion where law allows, or disclosure in a structured and commonly used technological format where portability applies. A written decision on a formal access or correction request is provided within the 30-day statutory period.

For a complaint, choose “Privacy and my data,” describe the issue and desired outcome. The privacy officer acknowledges, reviews and decides the matter and explains available recourse. You may also complain to Québec’s Commission d’accès à l’information.

Cookies

No advertising or profiling cookies are planned during the pilot. Strictly necessary cookies may operate the site without tracking you elsewhere. If this changes, required notice and choices will appear before activation.