Privacy
Waitlist privacy notice
Last updated: 21 October 2026
Who is responsible
Northstack AS runs therapist.software and is responsible for the personal information described in this notice. Our organisation number is 819 138 052. Our registered address is Seterstøavegen 2C, 2150 Årnes, Norway. You can contact us about privacy at privacy@therapist.software.
This notice covers the public website and early-access waitlist. It does not cover client records or the use of therapist.software after an account is created.
What we collect
The short waitlist form asks for your email address. The longer form also asks for your name and collects the practice type, approximate number of clients per week and appointment setting selected on the form, together with any country or inviting member's name or email you enter. We record when your entry was created and updated.
Please do not enter client names, health information or other sensitive details. Only provide another person's name or email if they know you are sharing it. If someone identifies you as their inviting member, we receive that information from the person completing the form.
Network information, including your IP address, is also processed to deliver the website and protect the signup form from abuse.
How we use your information
We use waitlist details to manage early access, review requests, understand the kinds of practices interested in the service, and contact you about your request or an invitation. Inviter information is available to authorised administrators as context for the request. Entering it does not automatically create a referral reward.
We do not sell waitlist details or add you to a newsletter because you joined the list. We do not use a solely automated decision to decide whether to invite you. Joining is voluntary. Without an email address, we cannot register your request or contact you. The longer form also requires a name; the short form is available if you prefer to provide only an email address.
We rely on our legitimate interest in operating the requested early-access programme and protecting the website from abuse, under GDPR Article 6(1)(f). You can object to this use or ask to leave the list at any time.
Who can access it
Access is limited to authorised people running the service and providers that process necessary information for us, including Fly.io for hosting and our email-delivery provider when an invitation or waitlist message is sent. We may also disclose information when legally required.
Some providers are based outside the European Economic Area, including in the United States. Our signed Fly.io data-processing agreement includes standard contractual clauses for restricted international transfers. You can contact us for information about the applicable safeguards and request a copy. We do not promise that every operation or support access takes place within the EEA.
How long we keep it
Our policy is to remove waitlist entries 12 months after signup, or sooner following a valid removal request. If a valid invitation is still pending at that point, we keep the entry until the invitation expires or is resolved. Any account you create is then covered by the account's privacy information.
Deleted information can remain in restricted database backups until their retention period expires. Those copies are used for recovery, and completed deletions must be reapplied before restored data is put back into service. Limited records of how we handled a privacy request may be retained where necessary to demonstrate compliance or meet legal obligations.
Technical information is kept only while needed for rate limiting, investigating a security incident or meeting legal obligations. It is not added to your waitlist profile.
Browser storage
If you choose a light or dark theme, the website remembers that choice in your browser's local storage. The site's code does not send that preference to our servers. You can remove it by clearing the site's browser data.
Your rights
You can contact privacy@therapist.software to request access, correction or deletion, to object, or to ask us to restrict our use of your information. Data portability is available where the legal conditions apply. We may ask for proportionate information to verify a request.
You can complain to the Norwegian Data Protection Authority, Datatilsynet, at https://www.datatilsynet.no, or to the relevant authority where you live or work.
Changes
We will update this notice if our handling of information changes and will explain material changes before using your details for a new purpose.