Privacy Policy

PsychDesk, operated by Ayrelune Credence Private Limited, respects the privacy of the therapists, clinics, and clients whose information passes through our platform. This policy explains what we collect, why we collect it, how we protect it, and what rights you have over it.

Who this policy applies to

This policy covers two categories of people. Practitioners are the therapists, psychologists, counsellors, and clinic staff who hold an account with PsychDesk. Clients are the individuals whose records a practitioner manages using PsychDesk, on the practitioner's behalf. PsychDesk acts as a data processor for client information entered by a practitioner, and as a data controller for the account information practitioners provide directly to us.

Information we collect

• From practitioners, we collect account information such as name, email, phone number, professional credentials, and billing details needed to operate a subscription.
• From practitioners on behalf of their clients, we store the records a practitioner chooses to enter, which may include client contact details, session notes, treatment plans, intake responses, and billing history. This data is used by PsychDesk only for storage and display to the practitioner; it is not used for product analytics, model training, or advertising.
• We also collect standard technical information automatically, such as device type, browser, IP address, and usage patterns within the product, used to operate and improve the service and to detect security issues.

How we use this information

We use practitioner account information to provide the service, process billing, and communicate with you about your account. We store client records solely so that the practitioner who entered them can access and manage them. We do not sell client data. PsychDesk does not use client clinical content for aggregated or de-identified product research; only non-clinical, practitioner-level account and usage data may be used in an aggregated form to understand broad service trends.

Data security

Data is encrypted in transit using TLS 1.2+ and at rest using AES-256. Internal access is role based, individually credentialed, and logged; no staff member has default access to client records. Backups are automated, encrypted, and retained on a rolling schedule. Access to production systems is restricted to authorised engineers under a least-privilege model, with audit trails for any access to account-level data. Account and client data is retained for as long as the account is active, plus a limited recovery window after cancellation, after which it is permanently deleted or anonymised subject to legal retention requirements.

Data storage location and the Digital Personal Data Protection Act

For practices based in India, PsychDesk processes personal data in accordance with the Digital Personal Data Protection Act, 2023. Client and account data is stored on secure cloud infrastructure located within India. Lawful basis for processing client data entered by practitioners is the practitioner's legitimate interest in managing their practice, carried out on the practitioner's instructions as a data processor, with practitioner consent obtained at account creation and withdrawable at any time by closing the account. Under the Act, PsychDesk as a data fiduciary must appoint a Grievance Officer to handle data principal complaints. Until the formal appointment is confirmed, complaints can be directed to info@psychdesk.in as a placeholder, to be replaced by the named Grievance Officer's direct contact once appointed.

Your rights

Practitioners can access, correct, export, or delete their account information and the client records they have entered, subject to any professional record-keeping obligations that may require retention for a minimum period. To exercise any of these rights, write to info@psychdesk.in from your registered email and we will respond within a reasonable period. Clients whose information is held by a practitioner through PsychDesk should direct requests about their own records to their practitioner directly, since the practitioner controls that relationship, but PsychDesk will support a practitioner in fulfilling such a request.

Third parties and sub-processors

The following third-party services may process PsychDesk data in the course of operating the platform:

• Cloud hosting and database infrastructure (cloud provider) for storing account and client records.
• A payment processor for handling subscription billing, which receives only billing details and transaction information, not client clinical data.
• Communication and email delivery services for transactional messages such as receipts and account notices.
• Calendar, video conferencing, and messaging integrations (Google Calendar, Google Meet, Gmail, and WhatsApp) that a practitioner connects voluntarily, where data is shared only as needed to perform the integration the practitioner enabled.

Each sub-processor is bound by confidentiality and data protection obligations. We do not share client clinical data with any party for advertising, analytics, or model training.

Children's privacy

PsychDesk is not directed at individuals under 18, and account holders must be adults. If a practitioner's caseload includes minors as clients, the practitioner is responsible for obtaining any required parental or guardian consent for the records they enter, as they would be outside the platform. PsychDesk stores such records on the practitioner's instructions and does not directly collect information from minors.

Changes to this policy

We may update this policy from time to time. Material changes will be notified to practitioners by email notice and posted on this page with an updated effective date at the top.

Contact us

Questions about this policy, or to exercise a data right described above, can be directed to info@psychdesk.in, or by phone at 9667006268. Once appointed, our Grievance Officer's name and direct contact will be listed here as required under the DPDP Act.

Ayrelune Credence Private Limited, C/O Snehlata, Kusmand Nagar, Ghatampur, Kanpur Nagar, Uttar Pradesh, 209206, India.