Effective 6 September 2026
Privacy Notice
Psychobabble Sessions is a self-hosted booking service operated by Hannah Spier under the name Psychobabble with Spier. It is used to request, review, pay for and arrange private one-to-one online sessions.
Who controls your information
Hannah Spier is the controller of information processed through this service. Privacy questions, access requests and deletion requests can be sent to [email protected].
Information collected from booking clients
When you request a session, we collect the name, email address, optional telephone number, timezone, requested time and the description you submit. We also retain booking status, payment status, operational messages and an audit history needed to administer the request. Card details are entered directly into Stripe and are not received or stored by this application.
Please do not submit medical records, diagnoses, reports or other sensitive medical information through this service.
How the information is used
The information is used only to review and administer session requests, prevent scheduling conflicts, collect an approved payment, communicate about the session, create a calendar invitation and Google Meet link, send reminders, handle rescheduling or cancellation, secure the service and resolve operational problems.
Google Calendar data
Only the service administrator connects a Google account. Booking clients are not asked to connect or authorize their Google accounts. Hannah shares free/busy access to her selected Google Calendar with that administrator account. The service receives only busy time ranges from the shared calendar—not event titles, descriptions, attendees or locations—and uses those ranges to avoid offering conflicting appointment times.
The service creates, updates and deletes confirmed-session events on the dedicated administrator calendar, adds the booking client as an attendee and requests a unique Google Meet conference for each confirmed booking. It stores an encrypted Google OAuth refresh token, an encrypted short-lived access token when supplied, calendar identifiers, token expiry information, granted scopes, the Google event identifier and the resulting Meet URL.
Google information is not sold, used for advertising or used to build profiles. It is not shared with third parties except the infrastructure providers required to operate this booking workflow and as required by law. Psychobabble Sessions’ use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Service providers
The service uses Stripe for payments, Google Calendar and Google Meet for scheduling and video meetings, Resend for transactional email, and Cloudflare for secure routing and administrator access. Application records are stored in a self-hosted PostgreSQL database on infrastructure controlled by the operator. These providers process only the information needed to provide their respective functions and are subject to their own privacy and security terms.
Security and retention
Traffic is encrypted in transit using HTTPS. Administrator pages require Cloudflare Access authentication. Reusable Google credentials and private booking-management tokens are encrypted at rest, and database access is not exposed publicly.
Booking records are normally retained for up to one year after the relevant activity unless a shorter deletion request can be honored or a longer period is needed for payment, legal, fraud-prevention or administrative obligations. Google OAuth credentials are retained only while the Calendar integration remains connected. The administrator can revoke the application from the connected Google Account, Hannah can remove the calendar sharing permission, and either may request removal of the stored connection from the operator.
Your choices
You may request access to, correction of or deletion of your booking information by contacting the address above. Some payment or transaction records may need to be retained where required by law. You can also choose not to submit a booking request.
International processing and changes
This service is operated from Switzerland. The providers listed above may process information in other countries under their applicable safeguards. Material changes to this notice will be published on this page with a revised effective date.