Last updated: September 7, 2026
This Privacy Policy describes how Presto Service ("Presto", "we") collects, uses, discloses, and safeguards personal information in compliance with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and Quebec's Law 25 (modernizing personal information protection).
1. Privacy Officer (Law 25)
In accordance with section 2.1 of Law 25, Presto Service has designated a Privacy Officer responsible for compliance with and enforcement of our personal information protection framework. To exercise your rights, report an incident, or ask a question: privacy@prestoservice.ca — Presto Service, 1000 rue de la Gauchetière, Montreal, QC, Canada.
2. Information Collection
We collect information you provide directly to us, such as your name, email address, phone number, and other contact information when you create an account, book an appointment, or communicate with us. We also automatically collect certain information about your device and usage of our services. With your consent, we may collect and use your device's geolocation to sort nearby professionals and display approximate distances. When you use the voice assistant or AI advisor, we process your spoken or written queries (including transcribed audio) to generate responses. When an admin creates a professional profile from a website URL, we use a third-party AI service to extract publicly available information from that URL to pre-fill the profile. We limit collection to what is necessary for the identified purposes (PIPEDA limiting collection principle).
3. Purposes of Collection & Lawful Basis (PIPEDA Principle 2)
We clearly identify the purposes for which we collect your personal information before or at the time of collection. We process personal information on the basis of: (a) your consent (express or implied depending on data sensitivity), (b) performance of a contract (booking and service delivery), (c) our legal obligations (tax retention, fraud prevention), and (d) our legitimate interests in operating the platform, to the extent they do not override your rights. You may withdraw consent at any time, subject to the applicable commercial or legal consequences.
4. Use of Information
We use your information to: provide, maintain, and improve our services; process your bookings and payments; send you appointment confirmations and reminders; respond to your questions and requests; send you marketing communications (with your consent); power AI-assisted features such as the AI advisor and voice assistant (queries are processed by third-party LLM providers); and protect against fraudulent activity. We do not use your personal information for new purposes without obtaining fresh consent.
5. Information Sharing & Disclosure
We share your information with: professionals you book appointments with; payment service providers (Stripe) to process your transactions; calendar providers (Google Calendar, Outlook) when you enable calendar sync; and service providers who help us operate our platform, including third-party AI providers that power our AI advisor, voice assistant, and profile-enrichment features. We may also disclose information when required by law or to protect our rights. We never sell your personal information to third parties.
6. Cross-Border Transfers
Your personal information may be processed or stored by our service providers (for example, cloud infrastructure, AI providers) located outside Canada, including in the United States. Where such a cross-border transfer occurs, we ensure the recipient provides an equivalent level of protection, whether by contract or under the safeguards provided by applicable law, in accordance with Law 25.
7. Data Security (PIPEDA Principle 7)
We implement technical and organizational security measures appropriate to the sensitivity of the information to protect your personal information from unauthorized access, modification, disclosure, or destruction. This includes encryption of sensitive data in transit and at rest, role-based access controls, regular security audits, and staff training. Our subprocessors are bound by contractual data-protection obligations.
8. Confidentiality Incident Notification (Law 25, s. 3.1)
In accordance with Law 25, we document any confidentiality incident involving personal information that presents a risk of serious harm. Where such a risk is established, we notify the Commission d'accès à l'information (CAI) and the affected individual, unless an exception under the law applies. We retain a register of confidentiality incidents for at least five years.
9. Automated Decisions & Artificial Intelligence (Law 25, s. 12.1)
Presto uses artificial intelligence tools (AI advisor, voice assistant, profile enrichment) to generate responses and pre-fill data. These tools do not, at this stage, make a fully autonomous decision based exclusively on the automated processing of personal information that produces legal effects or significantly affects you. Should we do so in the future, we would inform you beforehand of the use of the personal information, the reasons, and the consequences, and you would have the right to submit observations and request a review of the decision.
10. Your Rights (PIPEDA Principle 9 & Law 25)
You have the right to: access the personal information we hold about you; obtain a copy of it; rectify inaccurate information; request its deletion; object to processing; request data portability; withdraw consent at any time; and obtain a description of the purposes of collection and the categories of information held. We respond to requests within 30 days of receipt. To exercise any of these rights, contact us at privacy@prestoservice.ca.
11. Data Retention (PIPEDA Principle 5)
We retain your personal information only as long as necessary to fulfill the identified purposes or to meet our legal obligations (including tax). When you delete your account, we delete or anonymize your data within 30 days, unless we are legally required to retain it. Specific retention periods are documented in our record of processing.
12. Cookies and Tracking Technologies
We use cookies and similar technologies to improve your experience, analyze usage of our platform, and personalize content. You can manage your cookie preferences through your browser settings or our consent banner. We do not use strictly-necessary cookies beyond what is required for the platform to function without your consent.
13. Children's Privacy
Our platform is not intended for children under 16, and we do not knowingly collect personal information from them. If you believe a minor has provided us with personal information, contact us at privacy@prestoservice.ca so we can delete it.
14. Complaints & Compliance (PIPEDA Principle 10)
If you believe we have not respected your rights or this policy, you may file a complaint with our Privacy Officer at privacy@prestoservice.ca. We will investigate and respond. You may also file a complaint with the Office of the Privacy Commissioner of Canada (OPC) or the Commission d'accès à l'information du Québec (CAI).
15. Changes to This Policy
We may update this privacy policy from time to time. We will notify you of any material changes via email or through a notice on our platform. The "last updated" date above indicates the current revision.
16. Contact Us
For questions about this privacy policy or our privacy practices, contact us at: privacy@prestoservice.ca or Presto Service, 1000 rue de la Gauchetière, Montreal, QC, Canada.