Privacy Policy

1. Introduction

Tandem Alliance is committed to protecting privacy. This policy explains how we handle information for two groups: (a) licensed therapists who create accounts (“Members”); and (b) members of the public who use the public directory or submit an introduction request (“Prospective Clients”). It covers the website, dashboard, referral board, public directory, and guided intake and introduction request form.

2. Information We Collect

Account information (name, email, encrypted password), professional information (license, credentials, specialties, education, bio), practice information (session formats, rates, insurance, languages, location, availability), profile media (headshot), communications (change requests, board posts, support inquiries), and payment information if applicable.

We automatically collect device/browser information, IP address, usage data, and cookies.

We do NOT intentionally collect PHI about your clients.

3. How We Use Your Information

To manage your account, verify credentials, display your directory profile, facilitate the Referral Board, process change requests, communicate with you, improve and secure the Platform, enforce Terms, and comply with legal obligations. We do not sell your information or use it for targeted advertising.

4. How We Share Your Information

Public directory: name, credentials, photo, specialties, bio, session formats, location, insurance status, and availability are publicly visible. Email and phone are NOT public.

Referral Board: posts visible to approved Members. Anonymous posts hide your name from Members but not from Tandem Alliance.

Service Providers: Supabase (database/auth), Netlify (hosting), email providers, payment processors — all contractually obligated to protect your data.

Legal: we may disclose information if required by law.

5. Data Security

We use TLS/SSL encryption, secure password hashing, role-based access controls, and regular security reviews. No system is 100% secure.

6. Data Retention

We retain data while your account is active. Upon termination or deletion request, we delete or anonymize within 30 days except where legally required.

7. Cookies

Used for authentication, security, and analytics. No advertising cookies. You may configure your browser to reject cookies.

8. Your Rights

You may request access, correction, deletion, or portability of your data by contacting privacy@tandemalliance.com. We respond within 30 days.

8.1 State-Specific Privacy Rights

Depending on your state of residence, you may have additional rights under state consumer privacy laws. Tandem Alliance complies with all applicable state privacy regulations, including but not limited to: California (CCPA/CPRA) — right to know, delete, correct, and opt out of sale; Virginia (VCDPA) — right to access, correct, delete, and obtain portable copy; Colorado (CPA) — right to access, correct, delete, and opt out of targeted advertising; Connecticut (CTDPA) — right to access, correct, delete, obtain portable copy, and opt out of sale; Utah (UCPA), Texas (TDPSA), Oregon (OCPA), Montana (MCDPA), and other states with enacted consumer privacy laws — applicable rights as defined under each state's law.

We do not sell personal information. To exercise state-specific rights, contact privacy@tandemalliance.com. We respond within the timeframe required by your state's law (typically 30–45 days). If we deny a request, you may appeal at the same address.

9. Information from Prospective Clients (Introduction Requests)

This section applies to members of the public who use the public directory or submit an introduction request (“Prospective Clients”). It is separate from the Member (therapist) information described above.

9.1 What We Collect

Browsing the directory and using the guided intake to filter results does not require you to provide any personal information. The criteria you select in the intake (such as area of concern, secondary preferences, session format, language, therapist gender, ethnicity, and affirming-care preferences) are used in your browser to filter the directory and display your results; these selections are not transmitted to or stored by Tandem Alliance unless included in an introduction request as described below. If you choose to request an introduction to a therapist, we collect: your name, email address, and (optionally) phone number; your state; your payment preference and, if provided, your insurance provider and plan; your primary area of concern, session format, and therapy type; and the therapist you selected. We also automatically collect device/browser information, IP address, and usage data as described in Section 7. Some of this information may be sensitive. Please share only what you are comfortable providing.

9.2 How We Use It

We use this information to facilitate the introduction you request with the therapist you select, to contact you about your request, and to maintain and improve the directory. We do not sell this information and do not use it for targeted advertising.

9.3 How We Share It

When you request an introduction to a therapist, we share the relevant details of your request with that therapist (and, where applicable, their practice) so they can follow up with you. We also share information with the service providers listed in Section 4, and may disclose information where required by law. We are a directory and referral service, not your healthcare provider; once your information is shared with a therapist, that therapist is responsible for their own handling of it.

9.4 Contact Consent

If you provide a phone number, you consent to be contacted about your request by email, phone call, or text message at the contact information you provide. Message and data rates may apply. You may opt out at any time by replying STOP to a text, using any unsubscribe link, or contacting privacy@tandemalliance.com.

9.5 Retention and Your Rights

We retain introduction-request information for up to 60 days after your introduction is completed or your request is closed, after which we delete or anonymize it, except where a longer period is required by law. Aggregate statistics that cannot identify you (for example, the number of introductions made in a given month) may be retained. You may request access to, correction of, or deletion of your information, and you have the state-specific rights described in Section 8.1, by contacting privacy@tandemalliance.com.

9.6 Age

You must be 18 or older to submit an introduction request. Where a request concerns a minor, it must be submitted by the minor’s parent or legal guardian.

10. Children’s Privacy

Member accounts are for professionals 18 or older, and introduction requests must be submitted by adults 18 or older. Where an introduction request concerns a minor, it must be submitted by the minor’s parent or legal guardian. We do not knowingly collect personal information directly from children under 18.

11. Changes

We notify of material changes 15 days in advance via email or Platform notification.

12. Contact

Privacy: privacy@tandemalliance.com — General: info@tandemalliance.com — www.tandemalliance.com