Privacy Policy

At Spectrayan, we take the privacy and security of your personal and health-related information seriously. This Privacy Policy explains how we collect, use, store, and protect your information when you use our platform, including our web application, AI assistants, and related services.

By using Spectrayan, you agree to the practices described in this policy. If you do not agree, please do not use our services.

1. Information We Collect

We collect the following types of information to provide and improve our services:

Account Information: Name, email address, phone number, professional credentials, and role (provider, client, or administrator) provided during registration.

Client and Clinical Data: Information entered by providers or clients related to treatment plans, session notes, behavioral assessments, intake forms, goals, and progress tracking.

AI Interaction Data: Conversations and queries submitted to our AI assistants (ABA Support, CBT, Speech Therapy, and Occupational Therapy models). This data is used solely to generate responses during your session.

Usage Data: Browser type, device information, IP address, pages visited, and interaction patterns collected automatically to improve platform performance.

2. How We Use Your Information

We use your information to:

• Provide and maintain the Spectrayan platform and its features
• Facilitate communication between providers and clients
• Generate AI-powered responses and recommendations during active sessions
• Support treatment planning, scheduling, and progress tracking
• Send service-related notifications and updates
• Improve platform functionality, security, and user experience
• Comply with applicable legal and regulatory requirements

4. Data Security

We implement industry-standard security measures to protect your information:

• Encryption of data in transit (TLS/SSL) and at rest
• Role-based access controls ensuring only authorized users can access specific data
• Secure authentication with session management
• Regular security audits and vulnerability assessments
• Multi-tenant architecture with strict data isolation between organizations

5. Data Sharing and Disclosure

We do not sell your personal information. We may share data only in the following circumstances:

• With your consent: When you explicitly authorize sharing with a specific party
• Service providers: Trusted third-party services (e.g., cloud hosting, authentication) that help us operate the platform, bound by strict confidentiality agreements
• Legal requirements: When required by law, regulation, or valid legal process
• Safety: To protect the rights, safety, or property of Spectrayan, our users, or the public

6. Data Retention

We retain your personal and clinical data for as long as your account is active or as needed to provide services. If you request account deletion, we will remove your personal data within 30 days, except where retention is required by law or for legitimate business purposes (e.g., audit trails).

7. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate data
• Request deletion of your personal data
• Withdraw consent for data processing
• Export your data in a portable format
• Object to certain types of data processing

To exercise any of these rights, contact us at privacy@spectrayan.com.

8. Cookies

Cookies are small text files stored on your device when you visit our platform. We use cookies to ensure the platform functions correctly and to understand how it is used. When you first visit Spectrayan, you will be asked to accept or decline cookies via our consent banner.

Types of cookies we use

• Essential cookies: Required for core platform functionality such as authentication, session management, and security. These cannot be disabled without affecting your ability to use Spectrayan.
• Preference cookies: Store your settings and choices (e.g., theme preference, cookie consent status) so you don't have to re-enter them on each visit.
• Analytics cookies: Help us understand how users interact with the platform — which pages are visited, how long sessions last, and where users encounter issues. This data is aggregated and anonymized. We do not use analytics cookies to identify individual users.

Third-party cookies

We do not use advertising or tracking cookies. We do not allow third parties to place cookies on your device for ad targeting or cross-site tracking purposes.

Managing your cookie preferences

You can change your cookie preferences at any time through your browser settings. Most browsers allow you to block or delete cookies. Please note that disabling essential cookies may prevent you from using certain features of the platform.

If you previously accepted or declined cookies and wish to change your choice, clearing your browser's local storage for spectrayan.com will reset the consent banner on your next visit.

9. Children's Privacy

Spectrayan may process information about minors as part of clinical care managed by authorized providers and guardians. We do not knowingly collect personal information directly from children under 13 without parental or guardian consent. All minor-related data is managed through authorized adult accounts.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we make significant changes, we will notify you via email or through a notice on the platform. The latest version will always be available on this page.

11. Contact Us

If you have questions about this Privacy Policy or how we handle your data, please contact us at privacy@spectrayan.com.