GESTÃO PSI

1. Introduction

This Privacy Policy describes how personal data is collected, used, stored, shared, and protected when using the Gestão Psi platform.

Gestão Psi is an online platform operated by:

The company operates in compliance with the General Data Protection Law (Law No. 13,709/2018 - LGPD). By using the platform, the user declares to be aware of the practices described in this Policy.

2. About Us

Gestão Psi is a platform designed to assist healthcare professionals (mainly mental health professionals), clinics, and practices in the administrative management of appointments, patients, schedules, medical records, and other information related to professional practice.

For the purposes of this Policy, "Gestão Psi" refers to the company DATASCIENCER INOVA SIMPLES (I.S.).

3. Data Processing Roles

The mental health professional, clinic, or practice using the system is considered the CONTROLLER of such data under the LGPD. Patient data may include sensitive personal data related to health, which receives special protection under current legislation.

4. Data Collected

5. Purposes of Processing

Personal data may be used to:

• Provide and operate the platform;
• Manage user accounts;
• Perform authentication and access control;
• Provide technical support;
• Ensure system security;
• Comply with legal and regulatory obligations;
• Prevent fraud and unauthorized access;
• Improve platform features and performance;
• Send administrative communications related to the service.

6. Legal Bases

Data processing may occur based on the following legal bases provided for under the LGPD:

7. Data Sharing

Data may be shared:

• With hosting, infrastructure, and technology providers necessary to operate the service;
• With service providers contracted for platform support and maintenance;
• By court order or request from competent authorities;
• When required by legal or regulatory obligation.

8. Information Security

Gestão Psi adopts technical and organizational measures compatible with industry best practices to protect personal data, including:

• Password encryption
• Use of secure connections (HTTPS)
• Access control via authentication
• Logging of events and relevant activities
• Backup routines
• Security monitoring
• Measures to prevent unauthorized access, alteration, disclosure, or destruction of data

Despite our best efforts, no system is entirely immune to risks, which is why absolute security cannot be guaranteed.

9. Data Retention

Data will be retained:

• As long as the account remains active;
• For the period necessary to render the services;
• To comply with legal and regulatory obligations;
• For the regular exercise of rights in administrative or judicial proceedings.

Once the processing need ends, data may be deleted, anonymized, or retained as permitted by law.

10. Rights of Data Subjects

Under the LGPD, data subjects may request:

• Confirmation of the existence of processing
• Access to personal data
• Correction of incomplete, inaccurate, or outdated data
• Anonymization, blocking, or elimination of data
• Data portability, where applicable
• Information on data sharing
• Revocation of consent
• Deletion of data processed based on consent

Requests may be submitted through the contact channels provided in this Policy.

11. Cookies & Similar Technologies

Gestão Psi uses cookies and similar technologies to:

• Maintain user sessions;
• Provide authentication;
• Maintain platform security;
• Store preferences;
• Improve the browsing experience.

Users can configure their browser according to their preference, subject to limitations arising from disabling these technologies.

12. International Data Transfers

Some vendors used by Gestão Psi may process or store information on servers located outside of Brazil. In such cases, appropriate measures will be taken to ensure the level of protection required by the LGPD.

13. Changes to This Privacy Policy

This Policy may be updated periodically to reflect legal, regulatory, or operational changes. The most recent version will always be available on the platform.