Privacy policy
Agent Santé is built to keep as little data as possible, for as short a time as possible. Here is what happens to your messages.
In short
- No account, no upload, no tracking or analytics cookies.
- The conversation stays in the memory of this window. If you reload or close it, it ends.
- Your messages are deleted about 10 minutes after the conversation ends.
- Messages that contain personal information are blocked before they reach the language models.
Where your messages go
1. Your browser sends the message to the Agent Santé server, hosted by Cloudflare.
2. The server first replaces a postal code with its area (see below). It then looks for numbers, emails and dates of birth. Next, Decision-machine-1, a CloudRaker model hosted in Montréal, looks for other personal information, such as a name or an address. If personal information is found, the message is blocked.
3. If the message passes the filter, it goes to the CloudRaker Run agents. The language models run on servers in Canada and the United States, and can read the text of your messages.
4. Decision-machine-1 checks the agent reply before it shows, to remove any personal medical advice.
A voice message takes one more step first: your browser sends the recording to our server, which has rakeaudio, the CloudRaker transcription model, transcribe it in Montréal. The text comes back to your browser, then follows steps 1 to 4 like a typed message. If the filter blocks it, the text goes back to the message box so that you can correct it.
Your postal code
The postal code is the only personal information we accept, and only to find a service or an appointment near you. Give it only if you want to.
Our server takes the postal code out of your message before any other step. The filter and the AI model see only your area (the first 3 characters, for example H2X), and the name of your municipality and of your CLSC territory.
The server finds the position of the code in the open data of the Institut de la statistique du Québec. It does not keep the code: it keeps only this position and your area during your conversation, then it deletes them (at most 15 minutes after your last message).
To look for places, the server sends a position rounded to about 100 m to the health resources directory. The Clic Santé link uses the same rounded position, never your postal code. The map (Apple Maps) gets only the positions of the places.
Agent Santé never books an appointment for you. You book on Clic Santé yourself.
How long
Your session lasts 10 minutes after your last message. The conversation ends when you select End, when you close or reload the tab, or after 10 minutes with no activity. It is then cancelled at CloudRaker Run. Your messages are deleted about 10 minutes after the conversation ends.
The Agent Santé server does not keep the text of your messages. Its logs contain only request numbers, status codes and durations, never the content.
Voice messages, recap and statistics
The microphone button records a voice message. Your browser asks for permission to use the microphone the first time you select it, never before. A recording lasts one minute at most.
The sound goes only to our server, then to rakeaudio, the CloudRaker transcription model, in Montréal. Neither our server nor rakeaudio keeps the sound or the text. Our logs contain only the size, the length and the processing time. The sound never goes to the language models: only the transcribed text goes on, and it goes through the personal information filter like a typed message.
The Transparency and Costs pages show totals only, such as the number of blocked messages. No text is kept there.
PDF recap: only if you ask for it, the agent writes a summary of the conversation, checked like its other replies. Our server has it laid out by markdowntopdf.dev, a CloudRaker service that keeps nothing, then the PDF goes only to your browser. It is saved nowhere else.
Protection against robots and abuse
A Cloudflare check confirms that you are not a robot before the conversation. Your IP address is used to limit the number of requests, to protect the service. Agent Santé does not keep it.
Your choices
Your browser keeps only your language and display preferences, for your next visits. You can delete them in its settings.
For a question about this policy, write to us on GitHub.
Last updated : October 25, 2026