Privacy Statement

OVERVIEW

This Privacy Policy outlines what information we collect, how we use it, your rights, and our practices around that information.

The Information We Collect, and How We Use It  All of the information we collect is in one of three varieties.

1.1 User Account Information  This is the information for identifying users within our system: users who sign up, the clients they add to the system, and the other users who are added to any given Teams account.

The information collected is, at minimum, name, username, email address, and a password.

Additional user account information that CAN be optionally entered and stored include:

• Address

• Telephone number(s)

• Time zone

• Avatar image

• Gender

1.2 How We Use Account Information  All user information is used exclusively for delivery the Practice.do application user experience. Specifically, this includes:

• Proper identification and authentication to access the system based on login credentials (username and password).

• In-app display of user activity.

• Sending emails (including system-generated notifications, messages to and from system users, and messages from Practice.do to system users).

• Sending system-generated text messages to users with cell phone numbers in select countries.

• Conversion of times (e.g. "Sent on:" dates) to a user's time zone.

• The Company’s staff to identify users when assisting with support requests.

• Management and processing of subscription payments for the Company’s service.

1.3 Usage Data  This is automatically collected log information, including AND limited to:

• Records of log in activity (who logged in, when, which browser, and from what IP address)

• Records of in-app activity (who issued what request to the server in the course of using the application, when, and the CPU run time of processing the request)

1.4 How We Use Usage Data  This information is used exclusively by Practice.do’s staff and exclusively for the purposes of aiding in support, troubleshooting, debugging, and performance tuning.

1.5 User Data  This pertains to the content that are created between users and their clients. "User Data" encompasses anything that the user can set up in the course of using Practice.do to support, document, or communicate within a client relationship, including but not limited to:

• To-do items

• Services items

• Forms

• Session Notes

• File uploads, links and embedded media

• Appointments and calendar data feeds

• Other in-app settings

• Data from connected 3rd party apps

1.6 How We Use User Data  The Company captures and stores User Data, as entered by users and clients, for the purpose of making it accessible to authorized users, including but not limited to:

• Data that can be accessed in app by the user who entered it.

• Data that can be accessed in app by other users who should see it.

• Data delivered by email to other parties as initiated by user action.

• Appointment data privately made available for calendar system interchange.

• In-app data is retained until deleted. 3rd party app data is retained until the respective app is disconnected. Both in-app and 3rd party app data are subject to deletion for expired accounts, due to payment failure, cancellation, or expiration of trial period.

YOUR RIGHTS

You have the right to be forgotten by Practice.do.    This applies to both users and clients.  A user is able to delete any and all client data within the system at any time.  Upon request Practice.do will be happy to delete user accounts, provided the request comes from a suitably authorized party and the request doesn&aops;t clash with the rights of others.

You have the right to correct your data stored within Practice.do.  From the "Settings" page a user is free to update whatever account information.  Users and clients are jointly empowered to rectify any user data.

You have the right to know what data is processed about you by Practice.do.  Reading this very privacy policy amounts to you exercising this right.

You have the right of portability of your data stored by Practice.do.  If you want to get your data out of the platform, you have options.  Downloadable reports and the raw dump of all account data in JSON each allow you to get your data out.

DATA STORAGE AND SECURITY

Practice.do owns the code, databases, and all rights to the application. You retain all rights to your data. We use third-party vendors to provide hosting, necessary hardware, software, financial processing, networking, storage, and related technology.

To protect the security of personal information submitted to us, we follow generally accepted industry standards both during transmission and after the information is received. All information you provide to us is stored on secure servers. All exchanges between you and the application via the internet are encrypted using TLS encryption.

Where you have chosen a password that enables you to access your account within the application you are responsible for keeping this password confidential. If you choose to share your password, i.e. with a virtual assistant, you do so at your own risk. You may change your password at any time by going to your Settings page.

No method of transmission over the Internet, or method of electronic storage, is 100% secure. We strive to use rigorously secure means to protect your personal information. However, we cannot guarantee its absolute security. Practice.do has no liability for disclosure of your information, whether due to errors, unauthorized and improper acts, or otherwise.

If a security breach causes an unauthorized intrusion into our system that materially affects you or your clients, then we will notify you as soon as possible and later report the action we took in response.

DATA SHARING WITH SERVICE PROVIDERS

While we are the primary custodian and caretaker for your data, there are a few companies who will be handling certain parts of your data as a matter of course for us to provide the service.  These companies are authorized to use your personal information only as necessary to provide these services to us, to which these services may include:

• Providing our hosting server infrastructure

• Payment processing

• Providing customer service

• Providing website visitor analytics

• Sending email & SMS communications

These third-party companies are subject to strict data processing terms and are prohibited from using you data for any purpose other than as they have been specifically contracted for.

We do not sell your data. We do not sell/rent/give your email to other parties for marketing purposes.

CHILDREN

The Services are not directed to children under the age of 13, and Practice.do does not knowingly collect or use any information from children under the age of 13.

Users who are working with clients under the age of 13 (or otherwise under the age of consent as defined by the client's residential jurisdiction) are responsible for obtaining suitable parental or guardian consent.

CHANGES TO THIS POLICY

Practice.do reserves the right to modify or update this Policy at any time. If we make significant changes to this Policy, we will notify you via email, at least 30 days prior to the implementation of the changes.

CONTACT US

If you have any questions, concerns, or complaints about our Privacy Policy, please email us at  support@practice.do.