Privacy Policy

Information we collect

You can browse and use every worksheet and assessment without an account or any personal information. If you create an account, we collect what you provide at registration: your name and email address. If you sign in with Google, Google sends us only your name, email address and an account ID, which we use to sign you in and nothing else. If you subscribe, our payment processor handles your card details; we never see or store the full card number. You can delete your account and everything saved in it at any time from the bottom of your dashboard; past invoices stay with our payment processor for tax records.

Content you save

If you fill in and save a worksheet, mood tracker, safety plan, or thought record, that content is stored on your account so you can return to it. It is kept until you delete it or close your account. We do not read, monitor, sell, or use the content of what you save; we recommend not entering a client’s full name or other directly identifying details. Drafts in the client-document tools (the intake builder, progress notes, treatment plans, releases of information, and closure letters) are an exception: they are saved only in the browser on the device you use and are never sent to our servers. Drafts saved before this change move into your browser the next time you open them, and any left on our servers are deleted 14 days after their last save. Clearing your browser data erases them, and some browsers erase a site’s data after about a week without a visit. Print or export those documents for your own records.

Share links

When you share a worksheet with a client, we create a temporary link that expires and is permanently deleted within 14 days. The optional reference label you can attach to a link is saved only in your own browser; it is never sent to or stored on our servers, so it does not follow you to another device and is gone if you clear site data. Even so, we ask that you not use names, initials, diagnoses, or appointment times as labels; use a code that means something only to you and keep the key in your own records. The person you send the link to does not need an account to view it. E-signatures happen in session: with you and your client each on your own device, the document goes from one browser to the other encrypted, and nothing about it is stored on our servers, so print or save the signed copy right away. Signing links sent before we moved to in-session signing keep working until they expire; their document snapshot and signature record (the typed name, the time of signing, and technical details of the signing device) are permanently deleted 14 days after signing, or at expiry if never signed.

Client links (a Clinician Pro feature) work the same way. A link holds a random token, the list of tools and worksheets the clinician chose, and a count of opens per day for each of them. It does not hold a name, an answer, a score, an IP address, or a device identifier. The clinician's reference label lives only in their browser. Anything typed into a worksheet opened from a client link is saved only in that browser. Revoked links and their counts are deleted within 14 days.

Practice accounts

A practice account holds the practice's name, letterhead and billing status, each member's role and the contact line printed on their documents, pending invites (an email address and a role), and the practice's published form templates and library. None of it holds client information.

Supervision records hold no client information either. A co-signature request holds the document type (progress note or treatment plan), the document's fingerprint, its status and dates. The fingerprint is a one-way code computed in the supervisee's browser; the document itself never reaches us. Once co-signed, the request also holds the supervisor's typed name and credentials, their account, the time, a fingerprint of the co-signature, and the IP address it was signed from. When a supervisor opens a note in the app, it goes from the supervisee's browser to theirs encrypted; we hold only the supervisor's temporary public key, for two minutes, and record whether the note was viewed in the app. The IP address is deleted after 90 days. The rest is kept until the practice account closes or the supervisee deletes their account. An hours entry holds the date, the minutes, individual or group, in person or telehealth, and who confirmed it and when. Neither has a notes field.

Who processes your data

We use a small set of established service providers to run the site, covering hosting and analytics, our database, payment processing, and transactional email. Each processes only what its function requires. We do not sell, rent, or trade your information, and it is never shared with advertisers or data brokers.

Cookies

We use essential cookies to keep you signed in and remember preferences such as your selected theme. Our analytics are cookieless and do not track you across other websites, and we use no advertising cookies.

Along with page views, our analytics count eight actions so we can see which parts of the site get used: finishing an assessment (which one), making a worksheet PDF (which sheet), clicking a pricing button (which plan), starting sign-up, completing sign-up, starting checkout, creating a client link, and creating a share link. For Pro members we also count opening a practice form (which form), opening a Pro tool such as the thought record or client scores (which tool), and completing an e-signature. These counts never include scores, answers, anything you type, who signed, names, email addresses or account details. When a page opened from a therapist’s private link is counted, the private part of its address is removed first.

To offer a first-month discount to people who come back and use the site, your browser keeps a small visit counter (visits, page views and minutes of activity) in its own local storage. It never leaves your device. When the discount unlocks, we set one cookie that holds only the time it unlocked, so our server can apply the discount at checkout; it expires after seven days. Pages a client opens from a therapist’s link are never counted.

We also set one cookie on your first visit that holds the page you landed on and the website that sent you there, and add both to your subscription’s billing record if you subscribe, so we can see which pages lead to paid plans. It expires after 90 days.

Contact

If you have questions about this privacy policy or how your data is handled, please reach out at hello@therapyresource.net.