Privacy Policy

1. Who we are

SafeStories provides workplace mental health and wellbeing services to employees through programmes arranged with their employer. When we say “SafeStories”, “we”, or “us”, we mean SafeStories and the team operating this platform at b2b.safestories.in.

2. Who this policy applies to

This policy applies if you use SafeStories as:

• an employee participant in a company programme;
• an HR or wellbeing contact viewing company reporting;
• a counsellor or therapist delivering sessions through SafeStories; or
• a SafeStories administrator supporting programme operations.

3. Information we collect

Depending on how you use the platform, we may process:

• Account and profile information, such as your name, work email address, employer, role, and login details.
• Programme activity, such as therapy session bookings, reschedules, cancellations, workshop registrations, check-ins, screenings, and related timestamps.
• Communications and support, such as messages you send to us and operational notifications related to your account or sessions.
• Technical information, such as device/browser type, IP address, and logs used for security, troubleshooting, and service reliability.
• Counsellor professional details, such as display name, languages, and availability, where relevant to delivering the service.

Therapy session content itself is handled according to professional confidentiality standards and your employer's programme agreement. This policy focuses on platform account and operational data.

4. How we use information

We use personal information to:

• provide access to the platform and authenticate users;
• schedule and manage therapy sessions, workshops, and related reminders;
• operate counsellor availability and assignment workflows;
• provide HR reporting where your employer has purchased that capability;
• maintain security, prevent misuse, and improve reliability; and
• respond to support requests and legal or safety obligations where required.

5. Optional Google Calendar sync (counsellors only)

Counsellors may optionally connect a Google Calendar account so booked SafeStories sessions appear as calendar events. This feature is voluntary and can be disconnected at any time from the counsellor profile settings.

• Events are created with the title “SafeStories Session” at the booked start and end time.
• We do not send employee names, client identities, session notes, or other participant personal information to Google as part of this sync.
• To provide the sync, we store Google OAuth tokens securely on our servers and use them only to create, update, or remove the relevant calendar events for that counsellor.
• Disconnecting Google Calendar stops future sync. Events already created in Google Calendar are not automatically deleted when you disconnect.

Google's handling of calendar data is governed by Google's Privacy Policy.

6. How we share information

We do not sell personal information. We may share information:

• with your employer or its authorised HR/wellbeing contacts, according to programme settings and privacy thresholds for reporting;
• with counsellors and operational staff who need access to deliver or support the service;
• with service providers that host, secure, or operate parts of the platform (for example cloud infrastructure, email, messaging, or video session providers), under appropriate safeguards; and
• where required by law or to protect safety.

HR reporting is designed to use aggregated or thresholded views where possible so that individual participation cannot be inferred in small groups.

7. Retention and security

We retain information for as long as needed to operate the programme, meet contractual obligations with your employer, resolve disputes, and comply with law. We use access controls, encryption in transit, and other reasonable technical and organisational measures to protect information. No online service can guarantee absolute security.

8. Your choices and rights

Depending on your role and location, you may have rights to access, correct, or delete certain information, or to object to some processing. Many employee accounts are managed through your employer's programme. If you have a privacy request, contact us using the details below and we will route it appropriately.

9. Contact us

For privacy questions or requests, email support@safestories.in.

10. Changes to this policy

We may update this interim policy as the platform evolves or when counsel-approved text becomes available. The “Last updated” date below will change when we do.