Privacy Policy

This Privacy Policy explains how [LEGAL ENTITY NAME], doing business as Thriving Mind Marketing (“TMM,” “we,” “us”), collects, uses, and protects your personal information when you use our websites, the TMM client portal, the Therapy Website Builder (“TWB”) product, and our booking and marketing pages (together, the “Services”).

We provide marketing services to mental-health professionals. If you have questions about this policy, contact us at [privacy@thrivingmindmarketing.com].

We collect the following categories of information:

• Account & contact details — name, email address, phone number, and password, when you create an account, book a call, or sign up for a product.
• Payment information — processed by our payment provider (Stripe). We do not store full card numbers on our servers.
• Booking information — the details you provide when scheduling a call (name, email, phone, and any notes).
• Client intake & project data — information you submit during onboarding and throughout an engagement (business details, documents, messages, and content).
• Usage & device data — IP address, browser type, pages viewed, and similar technical data collected automatically to operate and secure the Services.
• Marketing data — email address and related details when you download a resource or opt into communications.

• To provide, maintain, and improve the Services.
• To create and manage your account and process payments.
• To schedule and confirm calls, and send service-related emails.
• To deliver the marketing and website services you engage us for.
• To secure the Services, prevent abuse, and comply with law.
• To send marketing communications where you have opted in (you can unsubscribe at any time).

Where the EU/UK GDPR applies, we process personal data on the basis of: performance of a contract (to deliver the Services you request); our legitimate interests (to operate, secure, and improve the Services); your consent (for marketing); and compliance with legal obligations.

We do not sell your personal information. We share it only with the service providers (subprocessors) that help us run the Services, each bound to protect it:

• Supabase — database, authentication, and file storage (hosted in the United States).
• Stripe — payment processing and billing.
• Vercel — application hosting, content delivery, and firewall.
• Google — calendar scheduling, Search Console data, and email delivery (Google Workspace).
• Anthropic (Claude) — AI features that assist with content and support.
• Voyage AI — text embeddings used for knowledge retrieval.
• Duda — website hosting and provisioning for the TWB product.
• Inngest — background job processing.

We may also disclose information to comply with law, enforce our terms, or protect the rights and safety of our users. Confirm and complete this list before publishing — [verify all subprocessors].

We keep personal information for as long as your account is active or as needed to provide the Services, then for the period required to meet legal, tax, and accounting obligations, after which it is deleted or anonymized. [Specify retention periods.]

Our infrastructure is hosted in the United States. If you access the Services from outside the U.S., your information will be transferred to and processed in the U.S. Where required, we rely on appropriate safeguards for international transfers.

Depending on where you live, you may have the right to access, correct, delete, or port your personal information, and to object to or restrict certain processing. California residents(CCPA/CPRA) have the right to know, delete, correct, and opt out of the “sale” or “sharing” of personal information — we do not sell or share personal information as those terms are defined. To exercise any right, contact [privacy@thrivingmindmarketing.com]. We will not discriminate against you for exercising your rights.

We use cookies and similar technologies that are necessary to operate the Services (for example, to keep you signed in) and, where applicable, to understand usage. [Add cookie/analytics detail and a consent banner if you deploy non-essential cookies.]

We protect your information with measures including encryption in transit, row-level database access controls, authentication safeguards, and a web application firewall. No method of transmission or storage is 100% secure, but we work to protect your information and review our practices regularly.

The Services are intended for businesses and adults. We do not knowingly collect personal information from children under 13 (or the minimum age in your jurisdiction).

We may update this policy from time to time. We will post the updated version here and revise the “Last updated” date above.

[LEGAL ENTITY NAME] (Thriving Mind Marketing)
[BUSINESS MAILING ADDRESS]
[privacy@thrivingmindmarketing.com]