← Back to Home
Privacy Policy

Last Updated: January 30, 2025

Introduction

Welcome to INSIGHT. We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our online counseling platform.

Information We Collect

Personal Information:

  • Name, email address, and contact information
  • Professional registration number for MHP accounts, or education, enrollment and supervisor details for Trainee MHP accounts
  • Profile information (qualifications, specialization, experience)
  • Profile photos for Mental Health Professionals

Session Data:

  • Analysis responses (5-phase structured qualitative interpretative summary)
  • Consultation requests and appointment information
  • Questions and answers between clients and psychologists
  • Feedback and ratings
  • Generated Analysis

Video Consultation Metadata:

  • What we store: Consultation ID, participant IDs (NOT names), timestamps, call duration, consent records
  • What we DO NOT store: Video recordings, audio recordings, call content, transcripts, or chat messages
  • Privacy protection: Participant names are NOT stored in video call records (anonymous mode)
  • Purpose: Consent verification, billing, quality assurance, compliance with Telemedicine Practice Guidelines 2020
  • Retention: Automatically deleted after 5 years (you can request earlier deletion)
  • Encryption: End-to-end encrypted video calls via Jitsi Meet - we cannot access call content

Note: Video call metadata is required for legal compliance (DPDPA 2023 and Indian Telemedicine Practice Guidelines 2020). We store the MINIMUM data necessary and protect your privacy through anonymous storage and automatic deletion.

Voice Input (Speech-to-Text):

  • Your voice is processed on your device to create text. No audio is recorded or stored.
  • Speech recognition uses your browser's built-in Web Speech API — audio never leaves your device
  • Only the transcribed text of your responses is saved as your session data (with the same protections as typed answers)
  • You can switch to typing at any point and voice mode is fully optional

Technical Information:

  • IP address and browser information
  • Session timestamps and activity logs
  • Device information

How We Use Your Information

  • To provide and maintain our counseling platform
  • To match clients with appropriate mental health professionals
  • To facilitate communication between clients and mental health professionals
  • To generate structured qualitative interpretative summary and Analysis
  • To improve our services and user experience
  • To send notifications about appointments and platform updates
  • To comply with legal obligations
  • To detect and prevent fraud or abuse

Data Security

We implement appropriate technical and organizational measures to protect your personal information:

  • Password encryption using industry-standard bcrypt hashing
  • Secure authentication using JWT tokens
  • HTTPS encryption for all data transmission
  • Role-based access control
  • Regular security audits and updates
  • Secure database storage

Your Rights

Under data protection laws (GDPR/DPDPA), you have the following rights:

  • Right to Access: You can download all your personal data at any time from your account settings
  • Right to Rectification: You can update your profile information through your account settings
  • Right to Erasure: You can delete your account and request anonymization of your data
  • Right to Data Portability: You can export your data in JSON format
  • Right to Object: You can object to certain data processing activities
  • Right to Withdraw Consent: You can withdraw your consent at any time

Data Retention

We retain your personal data for as long as your account is active or as needed to provide you services. When you delete your account, we anonymize your personal information while retaining anonymized data for analytics and legal compliance purposes. Analysis data is deleted immediately upon account deletion.

Specific Retention Periods:

  • User Profile Data: Retained while account is active; anonymized upon deletion
  • Session & Analysis Data: Retained for 3 years or until account deletion
  • Video Call Metadata: Automatically deleted after 5 years (or earlier upon request)
  • Consent Records: Retained for 5 years for legal compliance
  • Audit Logs: Retained for 3 years for security and compliance

Your Control: You can request deletion of your video call history at any time from your dashboard. The system also automatically deletes video call records older than 5 years as part of our data minimization policy.

Data Sharing

We do not sell your personal information. We may share your information only in the following circumstances:

  • With Psychologists: Your analysis data is shared with your chosen psychologist
  • With Service Providers: We use third-party services (OpenAI, Google Gemini) for AI-powered features
  • For Legal Requirements: If required by law or to protect our rights
  • With Your Consent: Any other sharing will be done only with your explicit consent

Third-Party Services

We use the following third-party services:

  • OpenAI: For AI-powered Analysis generation
  • Google Gemini: For AI-powered features
  • MongoDB: For secure database storage
  • Emergent Platform: For hosting and infrastructure

Cookies and Tracking

We use cookies and similar tracking technologies to maintain your session and improve user experience. We use JWT tokens stored in sessionStorage for authentication. You can control cookies through your browser settings.

Children's Privacy

Our service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date.

Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at:

Email: privacy@insight-platform.com
Address: INSIGHT Platform, India

DPDPA (India) Compliance

This platform complies with the Digital Personal Data Protection Act, 2023 (DPDPA) of India. Your data is processed lawfully and with your consent. You have the right to:

  • Access your personal data
  • Correct inaccurate personal data
  • Request erasure of personal data
  • Nominate another person to exercise your rights
  • File a complaint with the Data Protection Board of India