Privacy Policy

At Therapal, we take your privacy and the privacy of your clients seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform.

Information We Collect

Account Information: When you create an account, we collect your name, email address, professional credentials, and practice information.

Client Data: As a practice management platform, we store information about your clients that you enter into the system, including names, contact information, session notes, and treatment plans.

Usage Data: We collect information about how you use Therapal, including features used, pages visited, and actions taken.

Device Information: We collect information about the devices you use to access Therapal, including IP address, browser type, and operating system.

How We Use Your Information

We use the information we collect to:

- Provide, maintain, and improve our services
- Process transactions and send related information
- Send technical notices and support messages
- Respond to your comments and questions
- Analyze usage patterns to improve user experience
- Detect, investigate, and prevent fraudulent or unauthorized activity

We never use your client data to train AI models. All AI processing uses anonymized, de-identified data only.

HIPAA Compliance

Therapal is designed to be HIPAA compliant. We:

- Sign Business Associate Agreements (BAAs) with all covered entity customers
- Encrypt all protected health information (PHI) in transit and at rest
- Maintain audit logs of all access to PHI
- Implement administrative, physical, and technical safeguards
- Conduct regular security assessments
- Train all employees on HIPAA requirements

Data Sharing

We do not sell your personal information or your clients' information.

We may share information with:

- Service providers who help us operate our platform (hosting, payment processing)
- Legal authorities when required by law or to protect our rights
- Business transfers in connection with a merger, acquisition, or sale of assets

All service providers are bound by confidentiality agreements and are required to protect your data.

Data Security

We implement industry-standard security measures including:

- AES-256 encryption for data at rest
- TLS 1.3 encryption for data in transit
- Multi-factor authentication options
- Regular penetration testing
- SOC 2 Type II compliance
- 24/7 security monitoring

Data Retention

We retain your data for as long as your account is active or as needed to provide services. If you close your account, we will delete your data within 90 days, unless we are required to retain it for legal purposes.

You can request deletion of your data at any time by contacting support@therapal.io.

Your Rights

You have the right to:

- Access your personal information
- Correct inaccurate information
- Delete your information
- Export your data
- Opt out of marketing communications

To exercise these rights, contact us at privacy@therapal.io.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email and by posting the new policy on our website.

Contact Us

If you have questions about this Privacy Policy, please contact us at:

Email: privacy@therapal.io
Address: 123 Innovation Way, Suite 400, San Francisco, CA 94102