Privacy Policy

1. Introduction

At GoTerapia, operated by Gonzalo Rojas, we take privacy very seriously, both of our users and of their patients' data. This Privacy Policy describes how we collect, use, store, and protect your information when you use our management platform for psychology and therapy practices.

GoTerapia acts exclusively as a technology provider. It is not a healthcare service provider. The therapeutic relationship is established directly between the mental health professional and their patients, with the professional being responsible for processing clinical data in accordance with applicable regulations in their jurisdiction.

2. Information We Collect

We collect information you provide to us when registering and using the Service: full name (obtained through your Google account), email address, name of your practice, country of residence, professional title, specialties, license or professional registration number, tax identification, phone, address, city, mode of care, languages, biography, and professional photo. The professional is solely responsible for the truthfulness and accuracy of this data. GoTerapia does not verify or validate the authenticity of the information provided.

We also automatically collect certain technical information: IP address (for country detection), browser type and device, and Service usage data for analytical purposes.

3. Patient Clinical Data

GoTerapia stores clinical data that you record about your patients, including: patient names and contact data, clinical records and session notes, appointment history, and any other information you enter on the platform.

This data is your exclusive property. GoTerapia acts solely as a data processor, providing the technological infrastructure for its secure storage. We do not access, read, analyze, or share your patients' clinical content under any circumstance. The AI-powered reports function processes data locally and does not store or transmit clinical information to third parties.

4. Use of Information

We use the collected information to: provide, maintain, and improve the Service; process transactions and send related notifications; send automatic reminders to your patients (via email or WhatsApp) according to your configuration; respond to inquiries and support requests; send communications about Service updates and news (with option to unsubscribe); and comply with applicable legal obligations.

5. Storage and Security

Your data is stored on secure servers provided by Supabase, with cloud infrastructure that complies with industry security standards. We implement technical and organizational measures, including: data encryption in transit (TLS/SSL) and at rest, secure authentication via Google OAuth, data isolation by practice (multi-tenancy), periodic backups, and continuous security monitoring.

6. Information Sharing

We do not sell, rent, or share your personal information or your patients' data with third parties for marketing purposes or any other commercial purpose. We may share information only with: essential service providers for operating the platform (hosting, payment processors) under confidentiality agreements; and legal authorities when required by law or legal process.

7. Use of Google Data

GoTerapia offers an optional Google integration that you activate manually from the Integrations page. When connecting your Google account, we request access to the following permissions (scopes): email sending (gmail.send) to send appointment notifications to patients from the professional's address; and calendar event management (calendar.events) to create events in Google Calendar with Google Meet links for online sessions.

GoTerapia accesses only the email address and name associated with your Google account to identify the integration. We do not read, store, or access the contents of your emails, contacts, Drive files, or any other data from your Google account beyond what is strictly necessary for the described functions.

GoTerapia does not share, transfer, or disclose data obtained from Google APIs to any third party under any circumstance. Access tokens are stored encrypted and used exclusively for the functions described above. You may disconnect the Google integration at any time from your settings panel, which revokes access and deletes stored tokens.

GoTerapia's use of information received from Google APIs complies with the Google API Services User Data Policy, including Limited Use requirements.

8. Data Retention

We retain your data while your account is active. If you cancel your subscription, data will be retained for 30 additional days to allow for reactivation. After that period, data will be permanently deleted from our servers. You may request a data export at any time from your control panel.

9. Your Rights

You have the right to: access your personal data; request correction of inaccurate data; request deletion of your account and data; export your data in standard formats; and revoke your consent at any time. To exercise these rights, contact us at soporte@goterapia.com.

10. Minors

GoTerapia is intended for mental health professionals who are adults. If a therapist records data about minor patients, they do so under their professional responsibility and in compliance with applicable child protection laws in their jurisdiction.

11. Changes to This Policy

We reserve the right to update this Privacy Policy. Significant changes will be notified by email with at least 30 days advance notice. We recommend that you review this policy periodically.

12. Contact

If you have questions about this Privacy Policy or about how we handle your data, you may contact us at: soporte@goterapia.com.