Introduction

BestPractice ("we," "us," or "our") is committed to protecting the privacy and security of therapists and their patients. As a platform that handles sensitive therapeutic data, including session transcripts and clinical notes, we implement rigorous security measures to protect your information. While we are actively pursuing formal certifications, we currently implement industry best practices for healthcare data security and privacy protection.

Information We Collect

Therapist Information

We collect information from healthcare providers, including:

• Professional credentials and licensing information
• Contact information (name, email, phone number)
• Practice information
• Account login credentials
• Payment information

Patient Data

Through our service, we process and store:

• Session recordings and transcripts
• Clinical notes and documentation
• Patient identification information
• Treatment-related information

Usage Information

We automatically collect:

• Device information (type, operating system, browser)
• IP address
• Usage patterns and preferences
• System logs

Data Security Measures

Our security infrastructure includes:

• End-to-end encryption for all patient data
• Secure cloud storage with regular backups
• Multi-factor authentication
• Regular security audits and monitoring
• Strict access controls and user permissions
• Automated session timeouts
• Data deletion protocols upon request

Data Retention and Deletion

We retain patient data only for as long as necessary to provide our services or as required by law. Upon request, we will securely delete patient data following industry-standard data removal procedures. Therapists can request data deletion through their account settings or by contacting our support team.

Data Access and Control

Therapists have the right to:

• Access and export their practice data
• Request deletion of patient records
• Modify or update information
• Control patient data sharing settings
• Receive notifications of security events

Contact Us

For privacy concerns or data requests, please contact us at:

Security Status Disclosure

While we are actively pursuing formal security certifications, we maintain strict security protocols aligned with healthcare industry standards. Our security measures are regularly reviewed and updated to ensure the protection of sensitive therapeutic data. We will update this policy as we obtain formal certifications.