Neuthinking may process the following personal data when you create an account, sign in, use the website, book or attend a session, make a payment, communicate with Neuthinking, or exercise a privacy right:
- Identity and contact information: first name, last name and email address. - Google account sign-in information: the name, email address and profile image made available by Google for authentication and account display. Neuthinking does not receive your Google password. - Authentication information: account status, Google account identifier, login timestamps and security-session information used to keep your account signed in and protected. - Adult-eligibility information: your date of birth is used temporarily to determine whether you are at least 18 years old and is not stored. Neuthinking stores only the eligibility result, the confirmation time and the declaration you accepted. - Booking and session-administration information: session type, booking date and time, time zone, booking status, booking source, calendar-event information, meeting link, cancellation information, refund information and related booking history. - Payment information: amount, currency, payment status, payment-provider references, discounts, fees and refund details. Neuthinking does not store your full debit-card, credit-card or bank-account details. - Session records: session notes and other session-related records created by the assigned specialist for providing and managing the service. Access to session notes is restricted to the assigned specialist. - Communications: booking-related emails, support messages, privacy requests, replies, delivery records and attachments that you or Neuthinking provide through the service. - Consent and privacy records: the Privacy Notice version shown to you, your acceptance, your communication choices, changes to those choices, privacy requests and nominee details. - Technical and security information: IP address, browser or device information, timestamps, security events, audit records and other information reasonably required to operate and protect the website.
Neuthinking processes personal data only for the following specified purposes:
- Creating, authenticating and managing your account, including allowing you to sign in with Google. - Confirming that the service is being used by an adult. - Allowing you to select, book, pay for, attend, cancel and review sessions. - Creating Google Calendar events and Google Meet links for scheduled online sessions. - Processing payments, discounts, fees, cancellations and refunds. - Sending essential service communications, including account, booking, payment, cancellation, refund, meeting-link, security and support communications. - Sending optional booking invitations, booking reminders or abandoned-booking emails only when you have granted the corresponding permission. - Maintaining session notes and related professional records used to provide and manage the service. - Responding to support tickets, privacy requests and grievances. - Maintaining records required for financial, legal, security, audit and dispute-resolution purposes. - Preventing misuse, investigating incidents, protecting accounts and maintaining the security and reliability of the service.
Neuthinking uses the following service providers and infrastructure only to the extent required for the stated purposes:
- Google Sign-In (Google Identity Services) for client authentication. Google may provide your name, email address and profile image after you choose to sign in with your Google Account. Neuthinking does not receive your Google password. - Google Calendar and Google Meet for creating and managing appointment calendar events and online-session meeting links. Relevant booking information may include the participant name or email address, appointment date and time, event details and meeting link. - Razorpay for checkout, payment processing, payment-status confirmation, fees and refunds. Razorpay directly processes payment-method information. Neuthinking receives transaction status and references needed to confirm and administer the booking, but does not store full card or bank-account details. - Resend for sending and receiving service emails. Information processed for this purpose may include names, email addresses, message subjects and bodies, attachments, delivery status and related email metadata. - Website hosting, application-database and encrypted-backup infrastructure used to operate, secure, store, back up and restore Neuthinking. The infrastructure provider may process account, booking, communication, technical and security information only as needed to provide those services.
Neuthinking does not currently use a separate third-party production monitoring or error-reporting service. Application, access, security and diagnostic logs are handled within Neuthinking and its hosting environment and are limited to information needed to operate, protect and troubleshoot the service.
Neuthinking shares only the personal data reasonably required for the service being performed. Service providers may process information under their own legal terms and privacy policies. Some providers may process personal data from locations outside India. Neuthinking will use such providers only where permitted by applicable law and will not transfer personal data to a country or territory restricted by the Central Government.
Personal data may also be disclosed when required by applicable law, a court order or a lawful request from an authorised government authority.
The permissions for booking invitations, booking reminders and abandoned-booking emails are separate and optional. They are not selected by default. You may grant or withdraw each permission independently from your client profile. Withdrawing a permission does not affect processing that lawfully occurred before withdrawal.
Essential account, booking, payment, cancellation, refund, meeting-link, security and support communications are not controlled by these optional communication permissions because they are necessary to provide or complete the service you requested or to meet applicable legal obligations.
A non-promotional reminder about an unfinished booking may be shown inside your client portal when you sign in. The abandoned-booking communication permission controls abandoned-booking emails; it does not control this in-portal service reminder.
Neuthinking retains personal data only for as long as it is needed for the stated purpose or as required by applicable law. When personal data is no longer required, it will be deleted or anonymised unless retention is necessary for a legal, financial, professional, security or dispute-resolution obligation.
Payment, refund and related financial records may be retained for the period required by applicable tax, accounting or other law. Security logs and related processing records will be retained for the period required by applicable data-protection rules or other law.
Subject to applicable law, you may:
- Request a summary of your personal data being processed and the processing activities performed. - Request information about other data fiduciaries or processors with whom your personal data has been shared, together with a description of the data shared. - Request correction, completion or updating of inaccurate, incomplete or outdated personal data. - Request account closure and erasure of personal data that is no longer required, subject to lawful retention requirements. - Review and withdraw communication permissions as easily as they were granted. - Raise a privacy grievance with Neuthinking. - Nominate another individual to exercise your rights in the event of your death or incapacity, subject to verification.
Use the following direct links while signed in to your Neuthinking client account:
Communication choices: Manage communication choices
Privacy requests: Submit a privacy request
Privacy grievance: Raise a privacy grievance
Neuthinking will respond to a privacy grievance within 90 days of receiving it. You must first use Neuthinking’s grievance mechanism before approaching the Data Protection Board of India.
Data Protection Board information: Official MeitY information
Dhannya Ittymathew
Privacy Contact
Email: support@neuthinking.in
Website: https://neuthinking.in