Compliance at TheraTreat

• Consent-based processing with clear lawful purposes.
• Purpose limitation, minimisation, and retention periods set out in the Privacy Policy.
• Your rights: access, correction, erasure and grievance redressal — and you can nominate someone to exercise them for you.
• A Data Protection Officer for requests and oversight.

See our Privacy Policy and Data Security Policy for implementation details.

• Before a therapist is listed: an identity check (PAN), a check of the bank account they are paid into, and a review of the licence or registration documents they upload.
• We do not run criminal background checks, and we don't claim to.
• AI drafts of session notes are proposals until the therapist reviews, edits and signs them; supervised notes can be co-signed.
• Clear escalation paths for complaints and grievances: Report an Issue, the grievance form, and disputes@theratreat.in.

• Role-based access, phone verification for therapist and clinic sign-ups, and a second sign-in step for our admin team.
• Service providers receive personal data only for the purposes set out in the Privacy Policy.
• If a breach affects your data, we tell you and notify the Data Protection Board of India as the law requires.

Technical controls are summarised in the Data Security Policy.

• Errors and unusual activity are monitored and alert our team.
• Data exports and refunds are recorded in audit logs.
• Every grievance gets a reference number and stays open until it is resolved.

For compliance queries or reports, please contact our DPO at dpo@theratreat.in.

Related: Privacy Policy · Data Security Policy · Accessibility · Refund & Cancellation