Trust

How we look after your clients' information

Client spaces, programs, communities and messages are where you work with your clients. Here's what we promise about what they share there, and how we keep it.

Our promise

What Thetsy promises

Your clients' information is encrypted and kept separate from every other practice's, and our team's admin tools need a second sign-in step. It's used only to run these features for you: never sold, never used for advertising, never used to train AI. If something ever did go wrong, you'd hear from us promptly, with what happened and what we're doing about it.

In writing

The business associate agreement

HIPAA, the US law that protects health information, says a company that holds protected health information for you must promise in writing to protect it. That promise is a business associate agreement, or BAA.

When you sign it

Before you add clients or share anything new with them in client spaces, programs, communities or messages. You sign once, for all four, and can download a copy anytime. If the agreement's wording ever changes, we ask you to sign the new version.

Reading it first

The whole agreement is shown in your account before you sign. To read it before you join, email privacy@thetsy.com and we'll send you a copy.

Day to day

How we keep it

  • Each practice's client information is kept separate from every other practice's.
  • Our team's admin tools need a second sign-in step.
  • Our logging and error tools never receive client information.
  • Only the companies on our subprocessors list handle client information for us, and each has agreed to protect it. Before we add or replace one, we email each practice's privacy and security contact at least 30 days ahead, unless an urgent security or continuity need prevents it, in which case we tell you as soon as we can.
  • If your practice leaves Thetsy, you have 30 days to download your clients' information, and then we delete it.

AI

Where AI fits

  • Your clients' information is never used to train AI.
  • We tell AI training crawlers to stay off your pages.
  • You can connect the AI assistant you already use to your Thetsy account. It works for you, under your own agreement with its provider. It never sees your clients' names, emails or messages. How it works.

Questions

Ask us anything

Our privacy contact is Chris Beck, at privacy@thetsy.com.

Build your practice on Thetsy

Publish what you know, work with clients in one place, and keep what you earn.

Apply as a Founding Member

Application required · Limited founding spots