Privacy Policy

Canadian Healthcare AI is operated by Sympathetic Technology, a Vancouver-based AI studio. The site provides AI-assisted information tools focused on healthcare legislation, governance, and public understanding in British Columbia and across Canada.

Questions about this policy can be directed to hello@sympathetictechnology.com.

This site does not require account registration and does not collect names, emails, or personal profiles for general browsing.

When you use a protected tool such as the HPOA Comparison Tool, access sessions are logged for security, service integrity, abuse prevention, and rate limiting. Log records may include:

• Timestamp of the event
• Session identifier (an opaque random token, not linked to your identity)
• IP address
• User agent (browser and operating system)
• Prompt length (character count only)
• Success or failure status of the request
• Rate limit events

Full prompt text is not retained in logs. If you voluntarily provide an email address to receive a session summary, that email is used only to send the requested message and is not stored in a contact database or used for marketing.

Collected information is used for the following purposes:

• Operating and maintaining secure access to protected tools
• Enforcing per-session rate limits to ensure fair access
• Detecting and preventing abuse or unauthorized use
• Diagnosing technical issues and monitoring service health

Inputs submitted through tool interfaces are processed to generate responses but are not used to train public AI models and are not shared with third parties for advertising or profiling purposes.

This site uses third-party infrastructure to deliver its services. These providers may process data as part of their standard operations. Current providers include:

• Vercel: hosting and edge delivery
• Supabase: session storage and access logs
• Anthropic Claude: AI language model responses
• Voyage AI: semantic search and retrieval
• Resend: transactional email delivery

Each provider operates under its own privacy and data processing terms. We encourage you to review their policies if you have questions about how those services handle data.

This site is designed for general legislative and governance information. It is not intended to receive, store, or process personal health information.

Please do not submit:

• Patient names or identifiers
• Health card numbers or provincial health numbers
• Dates of birth
• Clinical notes, diagnoses, or treatment information
• Confidential client or patient records of any kind

If you inadvertently submit personal health information, please contact us at the address below so we can take appropriate steps.

Protected tools on this site implement multiple layers of access control. These include server-side session validation with a six-hour expiry, IP-based rate limiting on authentication attempts, per-session prompt rate limits, security response headers on all pages, and restricted database access enforced by row-level security policies.

No security system is perfect. We make reasonable efforts to protect the information we hold, but we cannot guarantee absolute security.

Access logs and session records are retained for a limited period for security and operational purposes. We do not retain full prompt text. Email addresses used to deliver session summaries are not stored beyond the delivery transaction.

We may update this policy from time to time. The date at the top of this page reflects when it was last revised. Continued use of the site after any update constitutes acceptance of the revised policy.

For questions about this policy or to report a privacy concern, please contact Sympathetic Technology at hello@sympathetictechnology.com.

See also our Terms of Use and Disclaimer.