Terms of Service
These terms set out how our platform works and what you can expect from us. By using Therasee, you agree to the terms below.
Agreement to Terms
Account Creation
Account Usage
Fees and Billing
Payment Processing and Billing Services
Service Modifications
Service Interruptions
Third-Party Websites
Personal Information Management
Data Processing
As the data controller, you are responsible for ensuring that you have a lawful basis for collecting and processing personal data through the platform, including any special category data such as health and mental health information. You are also responsible for providing appropriate privacy notices to your clients and for obtaining any necessary consents.
In these Terms you are referred to as the Account Owner. In the Data Processing Agreement, the same party is referred to as the Controller. These terms refer to the same entity.
The DPA sets out:
- The subject matter, nature, and purpose of the processing.
- The types of personal data processed and the categories of data subjects.
- Therasee’s obligations as a data processor, including security measures, confidentiality, breach notification, and sub-processor management.
- Your rights in relation to audits, data subject requests, and data portability.
- Provisions for the deletion or return of personal data on termination.
A copy of the DPA is available on request by contacting privacy@therasee.com.
Where there is any conflict or inconsistency between these Terms and the DPA in relation to the processing of personal data, the DPA prevails. Changes to the DPA are subject to the notice provisions set out in the DPA, which may require advance notice before material changes take effect.
We will give you at least 30 days' notice before engaging any new sub-processor, or before making any change that materially alters the location of, or the level of protection applied to, personal data. Where we reallocate processing activities between sub-processors already listed in the DPA, without materially changing the location of or level of protection applied to personal data, we may do so on shorter notice and will update the sub-processor list accordingly. If you object to a change on reasonable data protection grounds, we will work with you in good faith to address your concerns. If we cannot resolve the objection, you may terminate your account on written notice.
Where you use the AI form building features:
- No personally identifiable client information is shared with the AI service. Client data variables (such as names, dates of birth, and contact details) are masked before any content is sent to Google Cloud for processing.
- All AI processing takes place on European servers (EU, Netherlands) under enterprise-tier agreements and is fully compliant with UK GDPR and EU GDPR.
- Data is processed transiently and is not retained by Google beyond the individual request. No data is used to train or improve AI models.
- AI is used solely as an assistive tool. No clinical decisions are made by AI, and all AI-generated content is presented to you for review and approval before being saved or used.
- As a matter of best practice, we recommend using blank or template versions of documents when uploading for conversion, rather than documents containing completed client information.
Speech-to-text functionality within the AI assistant is delivered via Microsoft Azure, hosted on UK-based servers, with no logging and no data retention. Full details of all AI-related processing are set out in our Privacy Policy.
AI-generated content is provided on an “as-is” basis and may contain inaccuracies or omissions. Therasee does not warrant the accuracy, completeness, or clinical suitability of any AI-generated output. It is the practitioner's sole responsibility to review, verify, and approve all AI-generated content before use, and to ensure it meets their professional standards, regulatory obligations, and clinical governance requirements. Therasee accepts no liability for any loss, harm, or claim arising from a practitioner's use of or reliance on AI-generated content without appropriate professional review.
Where you enable the Google Calendar integration, we take a data minimisation approach. When appointments are scheduled in Therasee, only the minimum information necessary is sent to your connected Google Calendar account, specifically appointment dates, times, session type, and client initials. No full client names, email addresses, or other personally identifiable client information is exchanged with Google. Where two-way synchronisation is enabled, your Google Calendar events are read through the Google Calendar API to display your availability within Therasee; this event data is processed transiently and is not retained or stored by Therasee.
This integration operates through your own connected Google account and is governed by your own relationship with Google, rather than by the DPA. You authorise the connection and remain in control of what is synchronised.
- Transfers to the European Union are covered by the UK’s adequacy regulations recognising the EU as providing an adequate level of data protection.
- Transfers to other jurisdictions (such as the United States) are governed by Standard Contractual Clauses or other approved transfer mechanisms.
Full details of international transfers, including a list of sub-processors and their locations, are set out in the DPA and our Privacy Policy.
Data Retention and Deletion
User Data Ownership and Responsibility
User Data Licensing
Aggregated and Anonymised Data Usage
User Data and Account Ownership Transfer
Therasee's Intellectual Property Rights
Warranty Disclaimer
Limitation of Liability
Indemnification
Account Termination and Suspension
Post-Termination
Outstanding Fees
Survival of Provisions
Dispute Resolution
General Terms
Updates and Changes to Terms
Contact Us
For questions or concerns about our Terms of Service or the use of your personal information, you can contact us via either of the methods below:
Address
Therasee Ltd, 1 St. Andrews Road, Studio 8,
Montpelier, Bristol, BS6 5EH, United Kingdom