Privacy and personal data

1. Scope and roles

The document applies to PsyFlowOS, user accounts, public profiles and client materials. In relation to customer records, the specialist or his organization usually determines the purposes of the processing and is responsible for the lawfulness of data collection, and the platform processes the data to provide the service. For registration, security, billing and operation of the service, the platform operator independently determines the necessary processing purposes.

2. What data is processed

• Account details: name, email, role, language and settings.
• Professional settings and specialist methodology.
• Client cards, questionnaires, session notes, check-ins, tasks and documents.
• Consents, technical security logs, and feature usage information.
• Payment and subscription statuses; the full bank card data is processed by the payment provider, if connected.

3. Purposes and grounds of processing

The data is used to create and secure your account, provide platform functionality, store professional content, perform selected AI tasks, support, payment, prevent abuse, and comply with the law. The basis may be a contract, consent, a legitimate interest in the security and development of the service, or a legal obligation - depending on the data, the role of the parties and the applicable law.

4. Sensitive data

Materials from psychological practice may contain information about health, relationships and other private circumstances. The user is obliged to have a legal basis for such processing, limit the volume of data, maintain professional confidentiality and not upload information that is not necessary for work.

5. AI processing

AI is triggered by user action and generates a draft for verification by a specialist. To fulfill the request, the necessary context can be passed to the connected AI provider. Do not use AI features without required consent and do not include unnecessary identifiers. AI result may not be accurate and is not an automatic professional decision.

6. Recipients and suppliers

Access is granted to authorized account users and providers required for selected functions: hosting, database, AI, authentication, payments and communications. The specific set depends on the included integrations. Only the necessary amount of data is transferred to suppliers within the scope of their function and contractual obligations.

7. International transfer

Infrastructure providers may be located in other countries. Where applicable, cross-border transfers must be based on a recognized protective mechanism, contractual guarantees or other legal basis. The user is also responsible for the legality of the transfer of client data in accordance with his jurisdiction.

8. Storage period and disposal

Data is retained as long as the account is active and needed for its stated purposes, and then deleted or anonymized based on backup, security, and legal requirements. The user must delete client data that is no longer needed for a professional purpose.

9. Data protection

The platform applies access control, secure connections, password hashing, security logs and backups. No storage method guarantees absolute safety; The user is responsible for protecting the device, password, public links, and employee access.

10. Human rights

Depending on the applicable law, a person may request information, access, correction, deletion, restriction, data portability, withdraw consent or object to processing. The client should first contact his professional or organization regarding his professional record. According to the account data, the user contacts through the official contact channel specified in the interface, agreement or payment documents.

11. Cookies and technical data

The service uses the necessary session and form protection cookies, without which login and security do not work. Additional analytics or marketing features should only be included with proper notice and consent, if applicable.

12. Minors

The platform is intended for professional users. The processing of minor client data is permitted only with the authorization, necessary consents and special protection measures in accordance with applicable law and professional standards.

13. Changes and appeals

The document may be updated as functions or legal requirements change. The current edition is published on this page. Questions about customer data are directed to the specialist or administrator of the appropriate organization; questions about the account and the operation of the platform - through the official PsyFlowOS channel specified in the interface, agreement or payment documents.