EMDR Online

EMDR Online

Privacy Policy

Effective Date: 07/18/2025

1. Introduction

EMDR Online ("we", "our", or "us") respects your privacy. This Privacy Policy explains how we handle information collected through our service at https://emdronline.vercel.app ("Site").

2. What We Collect

We collect the bare minimum information necessary to operate the service.

a) For All Users (Free & Paid)

  • Session ID: A randomly generated identifier used to connect therapists and clients during a session.
  • WebSocket ID and Connection Data: Temporarily stored in memory for routing data between users during a session.
  • Connected User Count: Only for session functionality.
  • Name: Only for session functionality.
  • Role: Therapist or Client, only for session functionality.

This data is not stored permanently and is erased after the session ends.

b) For Paid Users

  • Basic account data (email, password [hashed], and plan tier) — when accounts are implemented.
  • Payment information will be handled via a 3rd-party provider Stripe and is never stored on our servers.

3. What We Don't Collect

  • No personal health information (PHI)
  • No session content (audio, video, messages)
  • No identifiable client data
  • No behavioral or tracking cookies for clients

4. How We Use the Data

We use the limited technical data we collect only for:

  • Connecting participants in real-time
  • Diagnosing technical issues
  • Improving service performance

5. Data Storage & Retention

  • Session data is ephemeral and stored in memory only during the session.
  • Any analytics used will be anonymized and never linked to client sessions.

6. Security

  • All sessions are encrypted using TLS (HTTPS + WSS).
  • WebSockets are authenticated only by session token — no personal data is passed or stored.
  • No session recordings are made.

7. Children's Privacy

This service is intended for therapists and their clients. We do not knowingly collect data from children under 13.

8. Your Rights

If you are a registered (paid) user, you can request deletion of your account or any stored data by contacting us from our contact page.

9. Contact

Questions? Reach out at our contact page.