Privacy
What this site keeps about you
As little as it can, for as long as it needs, and only so that sessions can happen. Last updated 9 October 2026.
Who is responsible
This site is run by Nimisha Shrivastava, RCI-registered clinical psychologist (Reg. No. A114126), practising in Bengaluru and online. Questions about your information go to [email address].
What is collected, and why
- When you book: your name, email address and phone number, the session type, day and time, and anything you choose to write in the booking or intake form. This is what a session needs.
- When you pay: the amount, the date and a receipt number. Card and UPI details stay with Razorpay; this site never sees them.
- When you sign in: your email address and a one-time code. There are no passwords.
- Where you came from: if you arrive from a link with campaign tags, a small cookie remembers them for 30 days so the practice knows which writing or advertising brings people here.
- Visits: with your consent only, Google Analytics counts visits and which pages are read. IP addresses are shortened. You can decline this on the banner and nothing changes.
What stays private
What you write about what brings you here, and any notes made about sessions, are encrypted in the database and can be read only by Nimisha Shrivastava. They are never shared, sold or used for advertising. Nothing on this site asks for a diagnosis, medication or history.
Who else handles it
A small number of services keep the site running, each with its own safeguards: Supabase (the database and sign-in, hosted in Mumbai), Cal.com (scheduling and calendar invites), Razorpay (payments), Resend (email), Cloudflare (hosting) and, with consent, Google Analytics. Each receives only what it needs for its job.
How long it is kept
Booking and payment records are kept for as long as the law requires accounts to be kept. Notes are kept for as long as you are a client, and deleted on request. Analytics data is kept for 14 months.
Your choices
You can see and change your details in your client login. You can ask for a copy of what is held about you, ask for notes to be deleted, or ask for your account to be closed, by writing to [email address]. The crisis helplines named on every page are independent of this site.
Cookies
Three kinds: a sign-in cookie while you are signed in, the 30-day campaign cookie described above, and, only after you allow it, Google Analytics cookies. There are no advertising cookies.