Privacy Policy
How we collect, use, and protect your personal information
At Pneumapsyche, we understand the sensitive nature of mental health information. We are committed to protecting your privacy and handling your personal information with the utmost care and transparency.
Introduction
Pneumapsyche ("we," "us," "our") operates the Pneumapsyche website and community platform (the "Services"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Services.
By using our Services, you consent to the data practices described in this policy. If you do not agree with this policy, please do not use our Services.
Information We Collect
2.1 Information You Provide
We collect information you voluntarily provide when using our Services:
- Account Information: Name, email address, username, password, and member type
- Profile Information: Bio, profile photo, interests, and member type designation
- Content: Posts, comments, messages, and shared experiences you contribute
- Communications: Messages sent through our platform or to our support team
- Survey Responses: Information provided in surveys or feedback forms
2.2 Automatically Collected Information
When you access our Services, we automatically collect:
- Device Information: IP address, browser type, operating system, device identifiers
- Usage Data: Pages visited, time spent, click patterns, referring URLs
- Location Data: General geographic location based on IP address
- Cookies and Tracking: See our Cookie Policy for details
2.3 Sensitive Information
Given the nature of our mental health advocacy platform, you may choose to share information about your mental health experiences. This is considered "special category" or "sensitive" data under many privacy laws. We only process such information with your explicit consent and handle it with enhanced security measures.
How We Use Your Information
We use collected information for the following purposes:
- To provide, maintain, and improve our Services
- To create and manage your account
- To facilitate community interactions and peer support
- To send administrative notifications and updates
- To respond to your inquiries and support requests
- To monitor and analyze usage patterns and trends
- To detect, prevent, and address security issues and fraud
- To comply with legal obligations
- To enforce our Terms of Service and Community Guidelines
Legal Basis for Processing (GDPR)
For users in the European Economic Area, we process data based on:
- Consent: For sensitive mental health information and marketing
- Contract: To provide Services you've requested
- Legitimate Interests: For security, fraud prevention, and service improvement
- Legal Obligation: To comply with applicable laws
Information Sharing and Disclosure
We do not sell your personal information. We may share information in these circumstances:
4.1 With Your Consent
We share information when you give explicit consent, such as posting public content or connecting with other members.
4.2 Service Providers
We work with trusted third-party service providers who assist with:
- Hosting and cloud infrastructure
- Email delivery services
- Analytics and performance monitoring
- Customer support tools
- Security and fraud prevention
These providers are bound by confidentiality obligations and may only use your information as instructed by us.
4.3 Legal Requirements
We may disclose information if required by law or in response to valid legal process, such as court orders or subpoenas. See our Law Enforcement Guidelines for more details.
4.4 Safety and Protection
We may share information if we believe it's necessary to:
- Prevent imminent harm to individuals
- Protect against fraud or abuse
- Enforce our policies and agreements
- Protect our rights and property
Data Security
We implement comprehensive security measures to protect your information:
- Encryption: Data is encrypted in transit (TLS/SSL) and at rest (AES-256)
- Access Controls: Strict access limitations and role-based permissions
- Security Monitoring: Continuous monitoring for unauthorized access
- Regular Audits: Periodic security assessments and vulnerability testing
- Employee Training: Staff receive privacy and security training
While we strive to protect your information, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.
Data Retention
We retain your information for as long as necessary to:
- Provide our Services to you
- Comply with legal obligations
- Resolve disputes and enforce agreements
- Maintain business records for legitimate purposes
When you delete your account:
- Your profile and personal data are deleted within 30 days
- Public content may be anonymized rather than deleted
- Backup copies may persist for up to 90 days
- Some data may be retained for legal compliance
Your Privacy Rights
Depending on your location, you may have the following rights:
| Right | Description |
|---|---|
| Access | Request a copy of your personal data |
| Rectification | Correct inaccurate or incomplete data |
| Erasure | Request deletion of your data ("right to be forgotten") |
| Restriction | Limit how we process your data |
| Portability | Receive your data in a portable format |
| Objection | Object to certain processing activities |
| Withdraw Consent | Withdraw previously given consent |
Exercising Your Rights
To exercise these rights, use the form below or contact privacy@pneumapsyche.com. We will respond within 30 days (or as required by applicable law).
Data Rights Request
Submit a request to exercise your privacy rights
California Residents (CCPA)
California residents have additional rights under the California Consumer Privacy Act (CCPA):
- Right to know what personal information is collected and how it's used
- Right to delete personal information
- Right to opt-out of the sale of personal information (we do not sell your data)
- Right to non-discrimination for exercising your rights
International Data Transfers
Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place, including:
- Standard Contractual Clauses approved by the European Commission
- Privacy Shield certification (where applicable)
- Adequacy decisions for certain countries
Children's Privacy
Our Services are not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If we learn we have collected information from a child, we will promptly delete it.
If you believe a child has provided us with personal information, please contact privacy@pneumapsyche.com.
Changes to This Policy
We may update this Privacy Policy periodically. We will notify you of material changes by:
- Posting a notice on our website
- Sending an email to registered users
- Updating the "Effective Date" at the top of this policy
Your continued use of our Services after changes constitutes acceptance of the updated policy.
Contact Us
For privacy-related questions or concerns, please contact us:
Mailing Address:
P.O. Box 46
San Andreas, CA 95249