Privacy Policy

1. Introduction

Tamloot ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered session documentation service for therapists, coaches, and wellness professionals.

By using Tamloot, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Information from Google Sign-In

When you sign in using Google, we receive and store the following information from your Google account:

• Email address — Used to identify your account and send service-related communications
• Full name — Used to personalize your experience
• Profile picture — Used to display your avatar in the application

We only request the minimum permissions necessary to provide our service. We do not access your Google contacts, calendar, or any other Google services beyond basic profile information.

2.2 Account Information

Information you provide when creating or updating your account, including your name, email address, and professional details.

2.3 Client Data

Information about your clients that you enter into the platform:

• Client names
• Contact information (email, phone)
• Session notes and observations

2.4 Session Data

Information related to your sessions with clients:

• Session recordings (audio/video via Zoom integration)
• Transcripts generated from recordings
• AI-generated session summaries and notes
• Session dates, times, and duration

2.5 Usage Data

We automatically collect certain information when you use our service, including your IP address, browser type, device information, pages visited, and actions taken within the application.

2.6 Payment Information

Payment processing is handled entirely by Lemon Squeezy, our Merchant of Record. We do not store your credit card numbers or payment details. Please refer to Lemon Squeezy's Privacy Policy for information about how they handle payment data.

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our services
• Process session recordings and generate AI-powered notes and summaries
• Authenticate your identity and manage your account
• Send you service-related communications (account notifications, updates, security alerts)
• Respond to your inquiries and provide customer support
• Analyze usage patterns to improve our platform
• Comply with legal obligations

4. How We Do NOT Use Your Information

We are committed to protecting your data. We do NOT:

• Sell your data — We will never sell your personal information or your clients' data to third parties
• Use your data for advertising — We do not use your information for targeted advertising, retargeting, or interest-based advertising
• Share data with data brokers — We do not transfer your information to data brokers or advertising platforms
• Use Google data beyond stated purposes — Information received from Google Sign-In is only used for authentication and account personalization

5. Data Sharing and Third Parties

We share your information only with the following third parties, solely to provide our services:

5.1 Service Providers

• Supabase — Database hosting and authentication infrastructure. Privacy Policy
• Lemon Squeezy — Payment processing (Merchant of Record). Privacy Policy
• Zoom — Video conferencing and recording integration. Privacy Policy
• AI Service Providers — For transcript generation and AI-powered summaries. Data is processed according to our data processing agreements.

5.2 Legal Requirements

We may disclose your information if required by law, court order, or governmental authority, or when we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

6. Data Security

We implement appropriate technical and organizational measures to protect your personal information:

• Encryption in transit — All data transmitted to and from our servers is encrypted using TLS/SSL
• Encryption at rest — Data stored in our databases is encrypted
• Access controls — We use role-based access controls and Row Level Security to ensure you can only access your own data
• Secure infrastructure — Our services are hosted on industry-leading cloud infrastructure with robust security practices

While we strive to protect your information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

7. Data Retention

We retain your information as follows:

• Account data — Retained while your account is active and for 30 days after account deletion to allow for recovery
• Client and session data — Retained until you delete it or close your account
• Session recordings — Retained according to your account settings or until you delete them
• Usage logs — Retained for up to 12 months for security and analytics purposes

After the retention period, your data will be securely deleted from our systems.

8. Your Rights

Depending on your location, you may have the following rights regarding your personal information:

• Access — Request a copy of the personal information we hold about you
• Correction — Request correction of inaccurate or incomplete information
• Deletion — Request deletion of your personal information
• Data portability — Request an export of your data in a machine-readable format
• Withdraw consent — Withdraw your consent for data processing at any time
• Object to processing — Object to certain types of data processing

To exercise any of these rights, please contact us at contact@tamloot.cc.

9. Children's Privacy

Our service is intended for professional wellness providers and is not directed at individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence, including the United States, where our service providers are located. These countries may have different data protection laws than your country. By using our service, you consent to such transfers. We ensure appropriate safeguards are in place to protect your information in accordance with this Privacy Policy.

11. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or by posting a notice on our website prior to the change becoming effective. We encourage you to review this Privacy Policy periodically for any changes. Your continued use of our service after changes are posted constitutes your acceptance of the updated policy.

12. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us at:

Email: contact@tamloot.cc

Governing Law: This Privacy Policy is governed by the laws of the State of Israel.