Privacy Policy
How therapylist processes data for therapists, practices, and clients in Switzerland.
Last updated: 2026-02-07
Roles (Controller And Processor)
- For client intake and waitlist data, the therapist or practice is the controller. therapylist acts as a processor providing the tool.
- For therapist account, billing, and service operations, therapylist acts as a controller.
What We Process
- Therapist account data: email, practice name, settings, billing details.
- Client intake data: structured triage metadata and encrypted identity fields.
- Operational data: security logs, audit logs, usage counters, and error logs.
Why We Process Data
- Provide the service: intake forms, waitlist dashboard, exports.
- Security and fraud prevention: rate limiting, audit logging.
- Billing: invoices, reminders, and account status.
Security Measures
- Encryption in transit (TLS) and encrypted storage for sensitive fields.
- Access logging for personal data views, exports, and deletes.
- Optional Vault mode: identity can be encrypted in the browser and the server cannot decrypt it.
Retention
- Client intake records are configured to expire after 90 days by default.
- Billing and accounting records may be retained longer where required.
Your Rights
- Therapists can request access, export, correction, or deletion of their account data via support.
- Clients should contact their therapist or practice for requests related to their intake data.
Subprocessors
Third parties used to run the service. Some are optional and only used if enabled.
Infomaniak (hosting)
VPS and infrastructure hosting for the therapylist application and database.
Switzerland (expected)
Resend (email, optional)
Send account and billing emails when enabled.
Varies by provider configuration
SMTP provider (email, optional)
Send notifications via SMTP when configured.
Varies by provider configuration
Twilio (SMS, optional)
Send SMS messages if SMS sending is enabled by the therapist.
Varies (may include processing outside Switzerland)
Not legal advice. Review with Swiss counsel before relying on this policy in production.