Compliance & Data Residency

Privacy Policy

Effective Date: June 1, 2026

At Floapi (floapi.ca), based in Montreal, Quebec, Canada, we are dedicated to protecting the privacy and confidentiality of the personal information entrusted to us by P&C insurance brokerages and their clients. We align our data management practices strictly with Quebec's **Law 25 (Loi 25)**, the federal **PIPEDA** (Personal Information Protection and Electronic Documents Act), and provincial insurance regulations (AMF, RIBO).

1. Transit-Only Infrastructure (No PII Retention)

Floapi provides AI-powered automation middleware that integrates with Broker Management Systems (BMS) such as Applied Epic. Our systems are engineered with security and data minimization at their core:

🔒 Zero Retention Principle

Floapi's automation model operates on a transit-only basis. We do not store or keep personal information (PII) of your policyholders. We temporarily retrieve data from your BMS, perform the automated workflow (e.g. generating commercial invoices, preparing requoting data, transcribing notes), write the results back into your BMS, and instantly purge the transmission data. Your BMS remains the sole custodian of your client data.

2. Data Residency and Canadian Infrastructure

All data processed by Floapi is handled entirely within Canadian territory. We host our infrastructure exclusively on local Canadian cloud infrastructure in Montreal, Quebec, Canada. Under no circumstances is data routed, processed, or backed up in US-based cloud regions, ensuring complete immunity from cross-border jurisdiction and foreign statutes (such as the Patriot Act or CLOUD Act).

3. Cookie Policy & Consent

We use essential cookies to keep our website running securely and smoothly. In compliance with Law 25, non-essential cookies are only loaded after you give your explicit consent via our cookie banner:

  • Essential Cookies: Used strictly for navigation, security settings, and language localization preferences.
  • Third-Party Widgets (Calendly): We embed Calendly to allow you to book live automation audits. Calendly may set functional cookies (such as session or security tokens) when you interact with the scheduler. We do not load tracking pixels or ad trackers.
  • Analytics: Any performance tracking on our website is fully anonymized, capturing structural data (such as pages visited) without recording IP addresses or identifying users.

4. Data Protection Officer (DPO)

Under Quebec's Law 25, we have appointed a Privacy Officer responsible for overseeing compliance. If you have any questions, concerns, or requests regarding your data, you can reach us at:

Privacy Compliance Officer
Floapi Inc.
6795 rue Marconi, Montreal, QC H2S 3J9, Canada
Email: info@floapi.ca

5. Updates to this Policy

We review and update this Privacy Policy periodically to reflect changes in our workflows or regulatory landscapes. Any updates will be posted directly to this page with an updated effective date.