Privacy Policy

Reframe Practice ("we," "us," or "our") is a Canadian software company that provides AI-powered tools for mental health professionals. Our primary service helps therapists create personalized therapeutic worksheets and session guides.

We are based in Ontario, Canada, and operate under Canadian privacy laws including PIPEDA (Personal Information Protection and Electronic Documents Act).

We collect the minimum information necessary to provide our services:

Account Information

• Email address - for account access, password resets, and important service notifications
• Name and credentials - your professional name and credentials (optional, for worksheet branding)
• Practice information - practice name and branding preferences (optional)

Usage Information

• Generation counts - how many worksheets you have created (for subscription limits)
• Feature usage - which tools you use (to improve the product)
• Subscription status - your current plan and billing cycle

Payment Information

• Billing details - processed securely by Stripe. We do not store your full credit card number.

We use Google Cloud Vertex AI to generate therapeutic worksheets and session guides. Here is what you should know:

• HIPAA-eligible infrastructure - Google Cloud is HIPAA-eligible and we have a signed Business Associate Agreement (BAA) in place.
• No model training - Your content is NOT used to train Google's AI models. This is explicitly prohibited under our agreement.
• Ephemeral processing - Data is processed in memory and immediately discarded after the response is generated.
• US data centers - Processing occurs in Google Cloud's US data centers.

For our Profile Optimizer tool (which helps you write your Psychology Today profile), we use a separate AI service. This tool only processes your own professional bio text, not client information.

Best practice: While our architecture is designed to handle clinical content safely, we recommend using de-identified descriptions when possible (e.g., "35yo professional with anxiety" rather than full names).

We use the following categories of service providers:

Important: None of these services (except Google Cloud for AI processing) receive client descriptions or worksheet content. That data stays local to your browser or is processed ephemerally.

Reframe Practice is a Canadian company, but some of our service providers are based in the United States. When you use our AI generation features, your data is processed in the United States.

For Canadian users: By using our services, you consent to the transfer of your information to the United States for processing. We ensure a comparable level of protection through contractual safeguards (Data Processing Agreements) with our service providers, as required by PIPEDA.

For US users: Your data is processed domestically within the United States.

Note: Data processed in the United States may be accessible to US courts, law enforcement, or national security authorities under applicable US laws. Our zero-retention architecture minimizes this risk, as we do not maintain persistent records of client information.

We use analytics tools to understand how our product is used and to improve it:

• Google Analytics 4 - Tracks page views, feature usage, and conversion events. Configured with Restricted Data Processing to limit data sharing.
• Microsoft Clarity - Session replay tool to understand user experience. Configured with strict content masking to prevent capture of any text you enter.
• Ahrefs - SEO analytics tool that helps us understand how people find our website through search engines. Tracks publicly available search metrics only.

These tools use cookies and similar technologies. They help us understand which features are popular and where users encounter difficulties. They do NOT capture the content of your worksheets or client descriptions.

You can opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on.

You have the following rights regarding your personal information:

• Access - You can request a copy of the personal information we hold about you.
• Correction - You can update your account information at any time through your settings.
• Deletion - You can request deletion of your account and associated data.
• Data Portability - You can export your locally-stored worksheets at any time.

To exercise these rights, contact us at privacy@reframepractice.com.

For California residents: Under the CCPA, you have additional rights including the right to know what personal information we collect and the right to opt out of the sale of personal information. We do not sell your personal information.

• Account information - Retained while your account is active. Deleted within 30 days of account deletion request.
• Payment records - Retained as required by tax and accounting regulations (typically 7 years).
• Client descriptions - Not retained. Processed ephemerally and immediately discarded.
• Generated worksheets - Stored locally on your device. We have no access or retention of this data.

Reframe Practice is a business tool for licensed mental health professionals. We do not knowingly collect personal information from children under 13. If you are a therapist working with minor clients, you are responsible for ensuring you have appropriate parental consent for any information you input into our system, as required by your professional obligations and applicable laws including COPPA.

We may update this Privacy Policy from time to time. We will notify you of material changes by email or through a prominent notice on our service at least 30 days before they take effect. Your continued use of the service after the effective date constitutes acceptance of the updated policy.