Privacy Policy

Therapify Technologies Private Limited · Last updated: 3 June 2026

This Privacy Policy explains how Therapify Technologies Private Limited ("Therapify", "we", "us", or "our") collects, uses, discloses, and safeguards information when you use the Therapify platform, websites, and related services (collectively, the "Platform"). We are committed to handling personal data in accordance with India's Digital Personal Data Protection Act, 2023 (the "DPDP Act"), the Information Technology Act, 2000 and applicable rules, and, where relevant, the EU General Data Protection Regulation (GDPR).

Who we are. Therapify operates strictly as a technology intermediary and software-as-a-service (SaaS) provider for independent mental health practitioners and clinics. We provide scheduling, record-keeping, communication, and payment-facilitation tools. We do not provide medical, clinical, diagnostic, or therapeutic services ourselves. Clinical care is delivered solely by the independent practitioners who use the Platform.

1. Information we collect

1.1 Information you provide

Account & identity data — name, email address, phone number, password, professional credentials (for practitioners), and clinic/organisation details.
Profile data — practitioner specialisations, languages, biography, public-profile content, and clinic branding.
Patient/client data entered by practitioners — appointment details, intake responses, clinical notes, treatment plans, and scored assessment results. This may include sensitive personal data and health information.
Payment data — billing information processed through our payment partner (see Section 4). We do not store full card or bank-credential details on our servers.
Communications — messages, support requests, and feedback you send us.

1.2 Information collected automatically

Device, browser, IP address, and approximate location.
Usage and log data — pages viewed, features used, timestamps, and error reports.
Cookies and similar technologies used to keep you signed in, remember preferences, and measure performance (see Section 7).

1.3 Information from linked third-party services

Google Calendar — when you connect your calendar, we access availability and event data needed for two-way scheduling sync.
Meta / Instagram — when a practitioner or clinic links a Meta Business or Instagram account through Meta OAuth, we access only the data and permissions required to compose, schedule, and publish posts you authorise. We do not read private messages or unrelated account data, and we use this access solely to deliver the social-media publishing feature you enabled.

Limited Use of Google user data. Therapify's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Specifically, data obtained through Google Calendar is used only to provide and improve the scheduling features you enable; it is not transferred to third parties except as necessary to provide those features, comply with law, or as part of a merger or acquisition; it is not used for advertising; and it is not read by humans except with your consent, for security purposes, or to comply with applicable law.

2. How we use information

To provide, operate, and maintain the Platform and its features.
To facilitate appointment scheduling, telehealth sessions, record-keeping, and assessments on behalf of practitioners.
To facilitate payments, payouts, refunds, and invoicing through our payment partner.
To publish social-media content you explicitly authorise to your linked accounts.
To send service communications, reminders, and security notices.
To provide support, prevent fraud and abuse, and ensure platform security.
To comply with legal, tax, and regulatory obligations.

3. Roles and responsibilities for clinical data

For patient/client clinical data entered by practitioners, the practitioner or clinic is the data fiduciary/controller and determines the purposes of processing. Therapify acts as a data processor, processing such data only on the documented instructions of the practitioner or clinic and as necessary to operate the Platform. Practitioners are responsible for obtaining any consent required from their patients/clients.

4. Payment processing

Payments on the Platform are processed by our third-party payment partner, Cashfree Payments, and/or other licensed payment service providers. When you make or receive a payment, the relevant payment and settlement information is shared with the payment partner, who processes it under its own terms and privacy policy. Therapify facilitates collection of session fees and onward settlement to the practitioner's or clinic's linked bank account, less the applicable platform fee and taxes. We do not store complete card numbers, CVV, or banking credentials.

5. How we share information

We do not sell your personal data. We share information only as follows:

With practitioners and clinics you interact with, to the extent necessary to deliver care and manage bookings.
With service providers — payment partners, cloud hosting, telehealth infrastructure (e.g. LiveKit), email/SMS delivery, and analytics — under contractual confidentiality and security obligations.
With platforms you link (e.g. Meta/Instagram, Google) only to perform the actions you authorise.
For legal reasons — to comply with applicable law, court orders, or lawful requests, and to protect the rights, safety, and property of users, the public, or Therapify.
In a business transfer — in connection with a merger, acquisition, or sale of assets, subject to this Policy.

6. Data security

We apply reasonable technical and organisational measures to protect personal data, including encryption in transit and at rest, access controls, role-based permissions, and audit logging. No method of transmission or storage is completely secure; we cannot guarantee absolute security but work continuously to protect your information.

7. Cookies

We use strictly necessary cookies to operate the Platform (such as authentication and security) and, with your consent where required, functional and analytics cookies. You can manage cookies through your browser settings; disabling essential cookies may affect functionality.

8. Data retention

We retain personal data for as long as your account is active or as needed to provide the Platform, and thereafter as required to comply with legal, tax, accounting, and regulatory obligations or to resolve disputes. Clinical records are retained according to the practitioner's or clinic's instructions and applicable record-keeping requirements.

9. Your rights

Subject to applicable law, you may have the right to access, correct, update, or erase your personal data, to withdraw consent, to nominate (under the DPDP Act), and to grievance redressal. To exercise these rights, contact our Grievance Officer (Section 12). If your data was entered by a practitioner or clinic, we may direct your request to them as the relevant data fiduciary.

9.1 Deleting your data

You can request deletion of your personal data at any time by emailing info@therapify.online from your registered email address with the subject line "Data Deletion Request". We will verify your request and delete the associated personal data within 30 days, except where we are required to retain certain records to comply with legal, tax, accounting, or regulatory obligations, or to resolve disputes.

To delete data obtained through a linked Meta / Instagram account, you can disconnect the integration from your Therapify account settings at any time, which revokes our access and removes the associated tokens and cached publishing data. You may also email the address above to request deletion of any Meta/Instagram-derived data we hold. To delete data obtained through Google Calendar, disconnect the Google integration in your settings or revoke access in your Google Account's security settings; this removes the calendar data we cache to provide scheduling sync.

10. Children

The Platform is intended for use by practitioners, clinics, and adult users. Where a practitioner provides care to a minor, the practitioner is responsible for obtaining verifiable consent from a parent or lawful guardian as required by the DPDP Act and applicable law.

11. International transfers

We primarily process and store data in India. Where data is processed by service providers located outside India, we take steps to ensure an appropriate level of protection consistent with applicable law.

12. Grievance Officer & contact

In accordance with the DPDP Act and the Information Technology Act, 2000, you may contact our Grievance Officer with any questions, requests, or complaints about this Policy or your data:

Grievance Officer: Anil Kinger
Therapify Technologies Private Limited
9D, Building 2, Arnav Apartment, City Light Road, Umra, Surat – 395007, Gujarat, India
Email: info@therapify.online
Phone: +91 92134 63392
Hours: Monday–Saturday, 10:00–18:00 IST
CIN: U62011GJ2026PTC178795

We aim to acknowledge grievances within 24 hours and resolve them within the timelines prescribed by applicable law.

13. Changes to this Policy

We may update this Policy from time to time. Material changes will be notified through the Platform or by email, and the "Last updated" date above will be revised.

© 2026 Therapify Technologies Private Limited. All rights reserved. Therapify is not an emergency service. If you or someone you know is in immediate danger, please contact your local emergency number.