Privacy Policy

1. Information We Collect

We collect information that you provide directly to us:

• Account Information: Name, email address, password
• Counseling Sessions: Conversation history, session notes, topics discussed
• Payment Information: Processed securely through Stripe (we do not store credit card details)
• Usage Data: Log data, device information, IP address

2. How We Use Your Information

We use the information we collect to:

• Provide and improve our counseling services
• Process your subscription payments
• Send you service-related communications
• Respond to your support requests
• Monitor and analyze usage patterns
• Detect and prevent fraud or security issues

3. Information Sharing

We do NOT sell your personal information. We may share information with:

• Service Providers: AI providers (Anthropic/OpenAI), payment processor (Stripe), email service (Postmark)
• Legal Requirements: When required by law or to protect our rights
• Organization Counselors: If you're part of an organization, assigned counselors may access your session history

4. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you services. You may request deletion of your account and data at any time through the settings page.

5. Data Security

We implement security measures to protect your information:

• Encryption in transit (HTTPS/TLS)
• Encrypted password storage using bcrypt
• Secure authentication with JWT tokens
• Regular security audits and updates
• Rate limiting to prevent abuse

However, no system is completely secure. We cannot guarantee absolute security of your information.

6. Your Rights

You have the right to:

• Access your personal data
• Correct inaccurate data
• Request deletion of your data
• Export your conversation history
• Opt-out of marketing communications
• Withdraw consent for data processing

7. Cookies and Tracking

We use essential cookies for authentication and session management. We do not use third-party tracking cookies or sell your data to advertisers.

8. Children's Privacy

Our Service is not intended for users under 13 years of age. We do not knowingly collect personal information from children under 13.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. By using the Service, you consent to such transfers.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or through the Service.

11. Contact Us

For questions about this Privacy Policy or to exercise your privacy rights, please contact us through our support system.