Privacy Policy

Oramta (“we”) writes clinical documentation for psychotherapists from recorded sessions. This policy explains what we collect, where it is kept, how long we keep it, and the rights you have. It is written for the therapists who use Oramta and, where it concerns them, for their clients.

Who is responsible for what

For the therapist’s own account, Oramta decides how the data is used. For session content — recordings, transcripts, notes and analysis about a client — the therapist decides why it is collected, and Oramta processes it on the therapist’s behalf to provide the service. Under India’s Digital Personal Data Protection Act, 2023, that makes the therapist the data fiduciary for their clients’ data and Oramta the processor. The therapist is responsible for the client’s consent to the session being recorded and analysed.

What we collect

Your account: your email address and name, and your profile photo if you sign in with Google.
Session recordings: the audio you record or upload. It exists only until the analysis finishes (see below).
What the analysis produces: a de-identified transcript, the progress note, transference moments, reflection prompts and risk signals, and your corrections to the note.
What you enter: client labels, note templates, and a hash of your Reports PIN (never the PIN itself).
Security records: a log of sensitive actions, such as opening or deleting a session, with the time and the request’s IP address.
Forms on this website: what you send through the contact, Early Adopter and pilot forms, including the name, email and clinic you give us.

We do not use advertising or analytics trackers, and we do not set tracking cookies. Signing in keeps a token in your browser so that you stay signed in.

How a session is handled

Names, places, dates and contact details are replaced with placeholders during analysis, and a separate check re-reads the result for anything that looks like an identifier. Like any automatic process this reduces the risk rather than removing it, which is why a session where the check finds something is marked for you to review.
The recording is deleted as soon as the analysis finishes, including when it fails. If a deletion cannot be confirmed straight away, a scheduled sweep retries it, and the storage bucket deletes anything left after one day.
Corrections you type into a note are checked for identifying details in the same way, and what is found is replaced with placeholders before the note is saved.
Your sessions are private to your account. No other Oramta user can open them.
Your sessions are never used to train AI models.

Where it is kept

Recordings, transcripts, notes and your account record are stored in Google Cloud’s Mumbai region (asia-south1), and the AI analysis runs there too, so session content is processed in India. Everything is encrypted at rest and in transit. Google Cloud is our infrastructure provider, under a Business Associate Agreement.

Sign-in is provided by Google’s Firebase Authentication, which stores your email address and sign-in details and is not limited to India. If you connect Google Calendar, your events are read from Google each time you open the Calendar page; Oramta does not store them.

Who it is shared with

We do not sell personal data or share it for advertising. It is processed by Google Cloud and Firebase to run the service. When paid plans open, payments will be processed by Razorpay, who will receive what a payment needs; Oramta will not store card details. We disclose data to authorities only where the law requires it.

How long we keep it

Recordings: until the analysis finishes, as above.
Transcripts, notes and analysis: until you delete the session, which you can do from its page. Deleting a session also deletes what was derived from it, such as its entry in “similar sessions” and the client pattern summaries made since it.
Your account: until you ask us to close it. Copies in encrypted database backups are removed as those backups expire.
Form submissions: until you ask us to delete them, or we no longer need them to reply.

Your rights

You can ask to see the personal data we hold about you, to correct it, or to delete it, and you can withdraw consent you have given. A client who wants their data corrected or deleted should ask their therapist, who can delete sessions directly or ask us for help. To close your account or for any other request, write to support@oramta.com. If you are not satisfied with our answer, you can complain to the Data Protection Board of India.

Age

Oramta is for qualified professionals. It is not meant for anyone under 18.

Changes

If we change this policy we will update this page and the date at the top. We will not start using data already collected for a new purpose without asking.

Contact

Questions and requests: support@oramta.com. See also the Terms of Service.