Privacy policy
Who does what. Sondagix lets organizations (“survey owners”) collect responses. The survey owner decides which questions to ask and why: they are responsible for the personal information they collect from you. Sondagix, the tool, stores it on their behalf, only to hand it over to them.
What is stored
Your responses, the date you submitted them and, depending on the survey, your name and email (an “identified” survey) or no information that identifies you (an “anonymous” survey). Your IP address is never saved with your response. It is used in clear only very briefly (one hour at most) to limit abuse, then erased. A survey may place a technical cookie in your browser to prevent multiple submissions (“one submission per device”). If you attach a file, it is stored securely, outside the server’s public folder.
Consent
When a survey asks for your consent, you must tick the box before submitting. Your acceptance is recorded with your response.
Hosting and security
Connections use HTTPS, passwords are protected by an irreversible method (hashing), API keys are stored in a protected way, and pages use no external scripts, fonts or analytics services. The support team never has access to the content of surveys or responses; every time support looks at an account, it is logged.
Your rights (Quebec Law 25, PIPEDA)
You can ask the survey owner for access to your responses, or for them to be corrected or deleted. Sondagix gives the owner tools to export or delete, in a single step, the data associated with your email. Anonymous responses cannot be traced back to you, since they contain nothing that identifies you.
Retention
The professional who created the survey decides how long data is kept (5 years by default, adjustable; not a legal requirement, to be confirmed with their professional body). They can delete a response, a survey or their account at any time, except what they must keep: that is then held read-only until the deadline and destroyed automatically. Account deletion becomes final after 30 days. You can also remove your identity from a response or delete it yourself using the “Withdraw my responses” link at the bottom of the survey; the professional replies to your request within 30 days.
Signing in with Google or Facebook
If you sign in with Google or Facebook, that provider sends us only your name and email (and an account identifier on their side), after you authorize it. We use them only to sign you in or to link that sign-in method to your account: they are not sold, not used for advertising and not disclosed for other purposes. Nothing is published on your behalf.
Our use of information received from Google is limited to that purpose and follows the Google API Services “Limited Use” policy. You can unlink this account in your settings, remove access in your Google or Facebook account, and ask for your data to be deleted: see the data deletion instructions.
Questions: first contact the organization that sent you the survey, then the operator of the Sondagix service that provides them with access.
Service operator
Sondagix is operated by:
- Legal name
- Exode Immigration Canada
- Person in charge of the protection of personal information
- Agnes Takoukam
- Contact e-mail of that person
- confidentialite@sondagix.com
- Mailing address
- Terrebonne (Québec) J7M 2H8
- General e-mail
- info@sondagix.com
Remedies
If you believe your personal information is not handled in accordance with the law, first contact the person in charge named above, then, if needed, file a complaint with the Commission d’accès à l’information du Québec (cai.gouv.qc.ca).
Roles and data processing
For the information that the account holder (professional or organization) collects from its clients or from the people who fill in its surveys, the account holder is responsible; Sondagix acts as a processor, on its instructions. For account and billing information, the operator named above is responsible. A data processing agreement is available on request.
Payments
Paid subscriptions are processed by Stripe. We do not keep your card numbers: Stripe only sends us the subscription status and a customer identifier.
Cookies
We only use cookies needed to operate the account: login session, protection against forged submissions and language memory. Public survey pages set no cookie and no advertising or third-party tracking cookies are used.
Hosting location
We choose providers that offer adequate safeguards; the hosting location is specified on request: write to confidentialite@sondagix.com. Some providers (payment, email, Google or Facebook sign-in) may process information outside Québec.
Privacy incidents
If a privacy incident presents a risk of serious harm, we will promptly notify the Commission d’accès à l’information and the people concerned, and take reasonable measures to reduce the risk. Where an incident affects information for which an account holder is responsible, we notify that account holder without delay so that it can meet its own obligations. To report an incident, write to the person responsible named above.
Deleting your data
Instructions for having your data deleted, including if you signed in with Google or Facebook, are public: Data deletion · Contact us