Privacy Policy

Who we are

CPTeaching provides an online platform used by therapists and clinical practitioners to manage client records, assessments, and related educational and clinical content. We are the data controller responsible for the personal information processed through the platform.

Information we collect

We collect and process the following categories of information:

• Account information: your name, email address, preferred language, time zone, and login credentials, provided when you accept an invitation and create an account.
• Client and assessment data: the client records, assessments, notes, and related information you create and manage within the platform. This may include sensitive personal information about the individuals you work with.
• Uploaded files: documents, images, and video you upload as part of your work on the platform.
• Technical and usage data: information generated automatically when you use the platform, such as log data, device and browser information, and authentication events, used to operate, secure, and support the service.

How we use your information

We use your information for one purpose only: so that you can use this platform. That includes providing and maintaining the service, authenticating your account, storing and displaying the records you create, delivering optional features you choose to use, and supporting and securing the platform.

We never sell your data, never share it with third parties for their own use, and never use it for anything beyond running and supporting the service. Your data is not used to train AI models, and it is not used in research studies. From time to time we may invite users to take part in a research study. Participation is always opt-in and completely optional, and no data of yours is ever included unless you explicitly choose to take part.

Your data belongs to you

The client records and assessments you create are yours. We store them so that you can use the platform, and you stay in control of that data for as long as you use the service. You can delete client data yourself, directly in the platform, whenever you choose.

If you ever want to leave entirely, email us at admin@cpteaching.com and we will close your account and permanently destroy all data we hold for you.

Where your data lives and how it's protected

Your data is hosted on Amazon Web Services (AWS) in Sydney, Australia, using the same enterprise-grade cloud infrastructure trusted by banks and government agencies. In practical terms:

• Everything is encrypted, both in transit (every connection to the platform uses HTTPS) and at rest (the database and its backups are stored in encrypted form).
• The database sits on a private network with no public internet access; only our application servers are able to connect to it.
• Uploaded files are kept in private storage that can only be reached through the platform using signed, time-limited access keys. There are no public links to your files.
• Sign-in is handled by Auth0, a dedicated identity and login specialist. Your password is never seen or stored by our servers.
• Automatic daily backups mean your data can be recovered in the unlikely event of a failure.

Our infrastructure is managed, patched, and monitored 24 hours a day, 7 days a week by Just After Midnight, an AWS Advanced Consulting Partner whose cloud and security engineers watch over the platform around the clock and respond to issues at any hour.

Service providers we use

We rely on a small number of carefully chosen service providers to operate the platform. These providers process personal information only on our behalf and only to provide their service to us:

• Amazon Web Services (AWS): cloud hosting, database, file storage, and content delivery. Data is hosted in the AWS Asia Pacific (Sydney) region.
• Auth0 (by Okta): authentication and identity management, including secure storage of login credentials.
• Resend: delivery of transactional and notification emails, such as account invitations and system notifications.
• Anthropic: processing of content for optional AI features (see below).
• Just After Midnight: 24/7 infrastructure management, monitoring, and security operations.
• Google Analytics: website usage statistics for our public website only, and only if you accept analytics cookies (see "Cookies and similar technologies" below). We do not use Google Analytics or any other third party tracking system for our clinical tools.

AI features are optional and consent-based

Some parts of the platform offer optional AI assistance, such as generating a clinical summary from an assessment. These features never run in the background: each one asks for your explicit consent first and shows you exactly what information will be sent before anything happens. When you do choose to use them, the data is processed by Anthropic (the makers of Claude) under commercial terms that do not permit it to be used for training AI models.

International data transfers

Your data is primarily stored in Australia. Some of our service providers may process limited data (such as authentication events or email delivery) in other countries. Where data is transferred internationally, we rely on our providers' contractual safeguards to ensure it continues to receive an appropriate level of protection.

Data retention

We retain your data for as long as your account is active and you use the platform. When you delete data within the platform, or when you close your account, that data is deleted from our active systems and removed from backups in the ordinary course of our backup rotation.

Your rights

Depending on where you live, you may have rights over your personal information, including the right to access, correct, export, or delete it, and to object to or restrict certain processing. You can manage and delete much of your data directly in the platform. To exercise any other right, contact us at admin@cpteaching.com and we will respond within the time required by applicable law.

Cookies and similar technologies

The platform uses the cookies and local storage necessary to keep you securely signed in and to remember basic preferences such as your chosen language.

On our public website (cpteaching.com), and only if you accept analytics cookies, we also use Google Analytics to understand how visitors use the site, such as which pages are viewed, how visitors arrive, and the type of device and approximate location they visit from. If you are signed in, we share your CPTeaching account ID with Google Analytics so that visits can be linked to an account; we never share your name or email address. If you decline, Google Analytics sets no cookies and receives only anonymous, cookieless signals. You can change your choice at any time using the "Cookie settings" link in the website footer.

We do not use advertising cookies.

Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date above and, where appropriate, notify you within the platform.

Contact us

If you have any questions or concerns about how your data is handled, email us at admin@cpteaching.com. We're always happy to talk it through.