1. Scope and PsiSerenity's role
PsiSerenity operates a multi-company SaaS platform for organizational wellbeing monitoring, psychometric campaigns, participation, alerts, and aggregate reporting. This policy applies to the use of PsiSerenity by customer organizations, authorized administrators, and provisioned users.
In a B2B context, the customer organization usually determines which users participate, which campaigns are configured, and which data is entered into the service. PsiSerenity processes that information to provide, secure, maintain, and improve the platform.
2. Information we may process
- Account and identity data, such as name, email, role, permissions, invitation status, and authentication provider.
- Organization data, such as company, departments, segmentation, settings, time zone, branding, and administrative contacts.
- Operational campaign, assessment, assignment, response, score, risk indicator, alert, and report data.
- Uploaded media and files, such as company logos, profile photos, or other resources permitted by the platform.
- Technical data, such as session records, security events, device or browser information, network addresses, errors, and telemetry needed to operate the service.
3. Purposes of processing
We use information to operate PsiSerenity, authenticate users, enforce permissions, isolate data by organization, execute campaigns, calculate metrics, generate aggregate reports, provide support, prevent abuse, maintain auditability, and meet applicable obligations.
We may also use technical and aggregate information to improve reliability, security, product experience, and operational performance, without attempting to improperly identify individual participants.
4. Employee and participant privacy
PsiSerenity is designed to prioritize organizational insight over individual surveillance. Administrators of an organization must use the platform according to their internal responsibilities, applicable notices, and granted permissions.
Employees or participants who want to exercise rights, correct information, or question a campaign should contact their organization when it acts as the primary party responsible for the employment or administrative relationship. They may also contact PsiSerenity at the address listed in this policy for service-related privacy questions.
5. Aggregation, minimization, and access
PsiSerenity applies controls intended to limit identifiable exposure. Clinical reports favor aggregate metrics, trends, and organizational signals without raw answers or emails, and without a minimum group-size threshold. Individual detail requires clinical permissions.
Access to data is limited by role, permissions, and organization membership. Tenant-aware queries, views, and operations must respect multi-company isolation to prevent cross-customer exposure.
6. Retention and traceability
We retain information for as long as reasonably necessary to operate the platform, support aggregate reporting, maintain traceability, investigate incidents, meet contractual obligations, and preserve audit records for sensitive operations.
Some resources may be hidden or deactivated in user interfaces without immediately deleting historical records needed for privacy review, security, metric integrity, or compliance.
7. Cookies and similar technologies
PsiSerenity may use cookies, local storage, or similar technologies for authentication, session continuity, security, preferences, diagnostics, and essential service operation. If non-essential analytics or marketing technologies are introduced, PsiSerenity should document them appropriately before use.
8. Security and providers
PsiSerenity uses reasonable technical and organizational controls to protect information, including authentication, permissions, organization segregation, monitoring, audit logs, and infrastructure controls.
We may use infrastructure, authentication, storage, monitoring, or support providers that process data only to provide services to PsiSerenity and under appropriate contractual obligations.
9. Questions and updates
For privacy questions, contact [email protected]. PsiSerenity may update this policy to reflect operational, legal, or product changes. The published version will indicate the applicable effective date.