Privacy

Privacy & Data Protection

PsyTech is built with privacy-by-design principles for sensitive psychological assessment workflows.

Designed with GDPR principles in mindData minimizationRole-based access

What we may collect

Data depends on configuration and use case

Exact fields vary by deployment and agreement. In general, PsyTech may process the following types of data:

Account and contact information

Name, email, organization, role — used for authentication, communication, and access control.

Assessment responses

Answers provided during structured assessments, used to generate summaries and insights.

Generated reports and summaries

AI-assisted structured outputs intended for review by qualified professionals.

Session information

Usage context (anonymous visitor/session identifiers, language, device type) used to operate the platform.

Technical and security logs

Operational logs used to maintain platform reliability and security.

Contact form information

Details submitted via the website contact or pilot inquiry forms.

Why we use it

Purposes we consider appropriate

Provide digital assessments

Delivering the core assessment experience to users and professionals.

Generate structured insights

Organizing responses into professional-review-friendly summaries.

Support users and professionals

Helping users navigate the platform and professionals review cases.

Manage demo and contact requests

Responding to inquiries, pilot proposals, and partnership discussions.

Improve platform functionality

Understanding operational patterns without relying on intrusive tracking.

Maintain security

Detecting abuse, protecting data, and preserving service integrity.

How we protect it

Technical and organizational measures

Encrypted connections

TLS for data in transit across the platform.

Access controls

Authentication, session management, and JWT-based admin access.

Role-based permissions

Scoped access so users only see what their role requires.

Secure storage practices

Modern database hosting with controlled access and audit trails.

Privacy-conscious analytics

Cookie-less first-party web analytics; no raw IP addresses retained.

Ongoing review

Security is treated as a continuous discipline, not a one-time audit.

Who may access data

Access is scoped by role and necessity

The user

Users can view their own interactions, where the deployment supports it.

Authorized professionals or organizations

Professionals reviewing a case, within the organization they serve.

Authorized administrators

Designated admins within a deployment, with scoped permissions.

PsyTech support staff

Only when necessary for technical or security support, and under appropriate controls.

Processors and service providers

Infrastructure providers (hosting, email, analytics) acting under appropriate safeguards.

Your rights

Rights under data protection law

Subject to applicable law, individuals may have the following rights. Contact the PsyTech team to make a privacy request.

Access your personal data

Correct inaccurate data

Request deletion

Restrict processing

Object to processing

Data portability where applicable

Data retention

Only as long as appropriate

Retention periods may depend on the organization, the agreement in place, and legal requirements. PsyTech aims to avoid unnecessary data retention and to honour deletion requests where appropriate.

This page is a general privacy overview and does not replace the official legal Privacy Policy or Data Processing Agreement that applies to your specific deployment.

Contact us about data protection

For privacy questions, data requests, or to review documentation before a pilot, reach out to the PsyTech team.

Contact PsyTech Read about responsible AI

Data controller

PsyTech B.V.

Registered in the Netherlands

KVK (Dutch Chamber of Commerce): 42048210

Contact: info@psy-tech.nl

Where PsyTech B.V. acts as a processor on behalf of a clinic, university, or employer, that organization is the data controller for its own users and PsyTech B.V. processes personal data strictly on their instructions under a Data Processing Agreement.

Important: PsyTech provides digital assessment support and educational information only. It does not provide diagnosis, treatment, medication advice, or emergency support. AI-generated insights should be reviewed by qualified professionals before clinical use.