SessionBridge Privacy Policy

Introduction

SessionBridge ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered mental health companion service.

Information We Collect

Conversation Data

• All messages you send to and receive from our AI companion
• Conversation timestamps and frequency
• Topics discussed and emotional patterns identified by our AI
• Coping strategies you engage with and their effectiveness

Account Information

• Email address (for account creation and communication)
• Age verification (to ensure 18+ usage)
• Preferred name and any profile information you provide
• Therapist practice information (if referred by a mental health professional)

Usage Data

• How you interact with SessionBridge features
• Time spent using the service
• Device information (type, operating system, app version)
• IP address and general location (city/state level)

Mental Health Context

• Information you share about your therapy sessions, goals, and progress
• Self-reported mood, emotional state, and mental health journey
• Preferences for coping strategies and communication style
• Any crisis or safety concerns you express

Technical Data

• App performance and error logs
• Feature usage analytics
• Connection quality and service reliability metrics

How We Use Your Information

To Provide Our Service

• Generate AI responses tailored to your conversations and emotional needs
• Remember your preferences, goals, and ongoing mental health context
• Provide continuity across conversations and sessions
• Suggest appropriate coping strategies and mental health resources

For Safety and Crisis Prevention

• Monitor conversations for potential safety concerns or crisis indicators
• Provide appropriate crisis resources and emergency contact information
• Alert you to seek professional help when AI limitations are reached

To Improve Our AI

• Use anonymized conversation data to refine our AI features and response quality
• Analyze conversation patterns to improve relevance and support
• Research mental health AI effectiveness (using anonymized data)
• Develop new features and coping strategy recommendations

For Communication

• Send important service updates and safety reminders
• Provide account and billing information
• Respond to your support requests and feedback

Legal Compliance

• Comply with applicable laws and regulations
• Respond to legal requests from law enforcement or courts
• Protect our legal rights and those of our users

Information Sharing and Disclosure

We DO NOT Sell Your Data

We will never sell, rent, or trade your personal information or conversation data to third parties for marketing purposes.

When We May Share Information

• With Your Therapist (If Applicable): If you're using SessionBridge through a therapy practice, your therapist may have access to conversation summaries and mental health insights. This sharing supports your overall mental health treatment. You'll be explicitly informed if this applies to your usage.
• AI Model Providers: We send conversation content to our AI providers (currently OpenAI, L.L.C. and Anthropic PBC) to generate responses. These providers may temporarily retain data for abuse prevention (up to 30 days) but do not use it to train public models. See their privacy policies: OpenAI, Anthropic.
• Service Providers: Cloud hosting providers (encrypted data storage), analytics services, and customer support platforms. All service providers are bound by confidentiality obligations.
• For Safety and Legal Reasons: If we believe someone is in immediate danger of self-harm or harm to others; to comply with valid legal requests; to protect our legal rights or those of other users; as required by law or regulation.
• Business Transfers: If SessionBridge is acquired or merged, your data may transfer to the new entity. You'll be notified of any such changes and your rights regarding your data.
• Anonymized Research: We may use anonymized, aggregated data for mental health research. This data cannot be traced back to individual users.

Data Security

How We Protect Your Information

• Encryption: Data is encrypted in transit (TLS) and at rest (AES-256).
• Access Controls: End-user data is protected with Row-Level Security. Authorized administrators may access data when necessary for troubleshooting, abuse prevention, or legal compliance. All such access is logged.
• Security Monitoring: We monitor systems for unusual activity and conduct periodic security assessments.

Important Limitations

• No system is 100% secure - we cannot guarantee absolute security
• AI conversations do not have the same legal protections as therapy sessions
• If you're concerned about sensitive information, consider what you share with our AI

Your Privacy Rights

Access and Control

• View Your Data: Access all conversation history and personal information
• Download Your Data: Export your conversations and account information
• Delete Your Data: Remove personal information from our primary systems; residual copies may remain in backups for up to 30 days before being purged
• Correct Your Data: Update or correct any inaccurate information

Communication Preferences

• Opt out of non-essential communications
• Choose how and when we contact you
• Control marketing and research communications

Data Retention Control

• Set preferences for how long we retain your conversation history
• Request immediate deletion of specific conversations or topics
• Control what information is shared with therapy providers (if applicable)

For California Residents (CCPA Rights)

• Right to know what information we collect and how it's used
• Right to delete personal information
• Right to opt out of sale (note: we don't sell data)
• Right to non-discrimination for exercising these rights

For EU Residents (GDPR Rights)

• Right to access, rectify, erase, restrict, or port your data
• Right to object to processing or withdraw consent
• Right to lodge complaints with data protection authorities

Data Retention

How Long We Keep Your Data

• Active Conversations: Retained while your account is active
• Account Closure: Most data deleted within 30 days of account deletion
• Legal Requirements: Some data may be retained longer if required by law
• Anonymized Data: May be retained indefinitely for research purposes

Automatic Deletion

• Conversations older than [X years] may be automatically archived or deleted
• You can set shorter retention periods in your account settings
• Crisis-related conversations may be retained longer for safety purposes

Children's Privacy

SessionBridge is designed for users 18 years and older. We do not knowingly collect information from children under 18. If we discover we have collected information from a minor, we will delete it immediately.

Users 16-17 may use SessionBridge only with explicit parental consent AND under the supervision of a licensed mental health professional.

International Data Transfers

Your information may be processed and stored in the United States or other countries where our service providers operate. These countries may have different data protection laws than your country of residence. We ensure appropriate safeguards are in place for international transfers.

Changes to This Privacy Policy

• We'll notify you via email and in-app notifications
• We'll update the "Last Updated" date at the top of this policy
• Major changes may require your explicit consent to continue using the service
• You can always access previous versions at sessionbridge.ai/privacy-archive