Privacy Policy
Last Updated: September 1, 2026. Psychlinic is committed to protecting the privacy of mental health practitioners and their patients with transparency and rigorous architectural safeguards.
Our Core Healthcare Privacy Commitment
We believe that clinical confidentiality is the bedrock of mental healthcare. Psychlinic never sells your personal information, never uses your clinical progress notes or patient consultation transcripts to train commercial artificial intelligence models, and never injects marketing trackers into authenticated patient clinical spaces.
1. Information We Collect
We collect only the information necessary to provide our practice management and patient growth software:
- Account & Registration Data: Name, professional email address, phone number, clinic name, clinical specialization, and billing credentials.
- Practice Configuration: Appointment schedules, consulting fees, room availability, and custom intake questionnaire configurations.
- Practice Operational Data: Patient appointment records, attendance status, billing invoices, and payment receipts managed by the practitioner.
- Technical & Consent Logs: IP address, browser type, device information, and cookie consent records for security, abuse prevention, and platform reliability.
2. Clinical Notes & Protected Health Information (PHI)
As a practitioner using Psychlinic, you are the controller and owner of your clinical records. We act solely as a secure data processor:
Zero AI Training on Clinical Data
SOAP notes, intake tests (PHQ-9/GAD-7), and therapy records are never used to train third-party AI models.
End-to-End Encryption at Rest
All patient records are encrypted at rest using AES-256 and transmitted exclusively via TLS 1.3 channels.
3. Analytics, Cookies & Tracking Policy
On our public marketing website, we use privacy-friendly analytics to measure aggregate website traffic and campaign effectiveness. Analytics tracking adheres to strict rules:
- Explicit Consent Required: Analytics initializes only after you grant consent via our cookie banner.
- No Clinical or Health Data: Form submissions, health measures, diagnosis codes, and clinical notes are strictly barred from analytics events.
- Mixpanel EU & Google Analytics: Behavioral data is processed via EU data-residency endpoints and IP anonymization.
4. Third-Party Subprocessors
We partner only with audited infrastructure and service providers that maintain strict compliance standards:
5. Your Rights & Data Portability
Under GDPR, the Indian Digital Personal Data Protection (DPDP) Act, and applicable privacy regulations, you have full rights to:
- Access & Export: Export your practice records, patient profiles, and session notes in standardized JSON or PDF formats at any time.
- Rectification: Update or correct your professional information via your account dashboard.
- Deletion & Account Closure: Request complete permanent deletion of your practice database and records upon account closure.
6. Contact Data Protection Officer
If you have questions regarding this Privacy Policy, your data protection rights, or require a Data Processing Agreement (DPA), please contact our Data Protection Officer: