Privacy Policy

This policy explains what information Therafind ("we," "us") collects when you use therafindutah.com, how we use it, and the choices you have. It applies to everyone who uses the site: people browsing for a therapist, therapists with listings, and members of the community forum.

The short version: we collect what we need to run a therapist directory and nothing more. We don't run advertising, we don't use third-party analytics or tracking cookies, and we never sell your information.

Browsing the directory requires no account and no personal information. What we collect depends on how you use the site:

• Account information — if you create an account (currently offered to therapists), we collect your email address and a password. Passwords are stored only as secure hashes by our authentication provider; we never see them.
• Therapist listing information — therapists provide the content of their public profile: name, credentials and license details, pronouns, photo(s), bio, specialties, treatment approaches, languages, insurance accepted, session fees, contact details (email, phone, website), and practice address. This information is collected specifically to be published.
• Community content — verified therapists can choose a display name and post to the forum. Posts, comments, votes, event RSVPs, and any reports you file are stored along with your account.
• Correspondence — if you email us, we keep the correspondence.

We keep automatic collection minimal:

• Cookies — we use only essential cookies: secure, HTTP-only session cookies that keep you signed in. We do not use advertising, analytics, or cross-site tracking cookies.
• Location for search — if you tap "use my location" when searching, your browser asks your permission and shares your coordinates so we can show nearby therapists. This is optional, used only to run that search, and not saved to any profile. ZIP codes you type into search are likewise used to filter results, not to build a profile of you.
• Server logs — like nearly every website, our hosting providers keep short-lived technical logs (such as IP address and pages requested) for security and debugging.

Therapist subscriptions are billed through Stripe. Card numbers go directly to Stripe and never touch our servers. We store only what we need to manage your subscription: a Stripe customer reference, your subscription's plan and status, and its renewal date. Stripe's handling of your payment details is governed by Stripe's own privacy policy.

We use the information above to:

• Operate the directory — publish therapist listings, run search, and show profiles and maps.
• Run accounts and the forum — sign you in, display your posts, and process reports and moderation.
• Verify therapist licenses against public licensing records.
• Bill subscriptions and send transactional email (confirmations, password resets, billing notices).
• Keep the site secure, prevent abuse, and comply with legal obligations.

Some information is public by design, and you should treat it that way:

• Published therapist profiles are visible to anyone on the internet, including name, photo, credentials, fees, contact details, and practice location shown on a map. Draft profiles are not public.
• Forum posts and comments are visible to other verified therapist members under your chosen display name. They are not visible to the general public.

We don't sell personal information, and we don't share it with advertisers. We share information only with:

• Service providers that run the site for us: Supabase (database, authentication, and file storage), Stripe (payments), and Netlify (hosting). Each receives only what it needs to do its job.
• Law enforcement or others when required by law, or when necessary to protect the rights, safety, or property of Therafind or others.
• A successor entity if Therafind is ever acquired or merged — your information would remain subject to this policy or one at least as protective.

Therafind is a directory, not a healthcare provider, and we are not a HIPAA covered entity. We do not ask for and do not want information about your mental health, diagnoses, or treatment. When you contact a therapist through their listed email or phone, that conversation happens outside our site — we don't see it or store it.

Please be aware that simply using a therapist directory is sensitive context. We minimize what we collect from visitors precisely for that reason: you can search the entire directory without an account, and searches are not tied to any identity.

Therapists in the community forum are prohibited from posting any information that could identify a client, as described in our Terms of Service.

We keep account and listing information for as long as your account is active. If you delete your account or ask us to, we delete your personal information within a reasonable period, except what we must keep for legal, billing, or security reasons (for example, records of past subscription payments). Forum moderation records may be retained in de-identified form.

We use industry-standard measures to protect your information: encrypted connections (HTTPS), hashed passwords, HTTP-only session cookies, and database access rules that restrict who can read what. No system is perfectly secure, but we design so that the sensitive surface stays small.

You can browse the directory without giving us any information at all. If you have an account, you can update your email, password, and profile from your account settings, and therapists can edit or unpublish their listing from the dashboard at any time.

You can also email us to request a copy of the personal information we hold about you, ask us to correct it, or ask us to delete it. Depending on where you live, you may have additional rights under laws such as the Utah Consumer Privacy Act, other U.S. state privacy laws, or the GDPR; we honor valid requests regardless of where you're writing from. We will never discriminate against you for exercising a privacy right.

The site is intended for adults. It is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us personal information, email us and we will delete it.

We may update this policy as the site evolves. If a change is material — especially any change to what we collect or share — we'll take reasonable steps to notify you before it takes effect, such as email to account holders or a notice on the site. The effective date above always reflects the current version.

Questions or requests about your data? Email us at support@therafindutah.com.