This Privacy Policy describes how Cultivation Clinical Services PLLC ("we," "us," or "our") collects, uses, and protects information when you use Cultivar ("the Service"). By using the Service, you agree to the practices described here.
Cultivar is operated by Cultivation Clinical Services PLLC, a Texas professional limited liability company. Questions about this policy may be sent to admin@cultivationclinical.com.
Account information. When you create an account, we collect your email address and a hashed version of your password. We do not store your password in plain text.
Client profile data. You may create client profiles using opaque unique identifiers of your choosing (not patient names or other identifying information). We store these identifiers and any briefing cards you approve, associated with your account.
Usage data. We collect standard server logs including IP addresses, browser type, and pages accessed. This information is used to maintain and improve the Service and is not sold or shared for advertising purposes.
When you submit session notes for AI processing, the following occurs:
You are responsible for ensuring that any content you submit does not contain Protected Health Information (PHI) or other regulated personal data. See our Terms of Service for details.
We use the information we collect to:
We do not sell your personal information. We do not use your data for advertising or share it with third parties for their own marketing purposes.
We work with the following categories of third-party providers to operate the Service:
Each provider is bound by their own privacy practices and data processing agreements. We select providers with strong privacy and security commitments.
We retain your account information and approved briefing cards for as long as your account is active. If you delete your account, all associated data — including client profiles and briefing cards — is permanently erased. This action cannot be undone.
Anonymized or aggregated usage data that cannot be linked to any individual may be retained for analytical purposes.
We implement industry-standard security measures including encrypted data transmission (TLS), encrypted data storage, and access controls. Authentication is managed by Supabase with row-level security policies ensuring that users can only access their own data.
No method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security, and you use the Service at your own risk.
You may at any time:
The Service is intended for licensed or supervised mental health professionals and is not directed to individuals under the age of 18. We do not knowingly collect personal information from minors.
We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or by posting a notice in the Service. Your continued use of the Service after the effective date of any changes constitutes your acceptance of the revised policy.
If you have questions or concerns about this Privacy Policy or our data practices, please contact us at:
Cultivation Clinical Services PLLC
admin@cultivationclinical.com