VerifyTherapist

KVKK · GDPR · CCPA

Verify TherapistPrivacy Notice & Privacy Policy

Contents

  1. 1. Data Controller and Our Purpose
  2. 2. The Data We Collect and Why We Process It
  3. 3. The Pre-Session Guest Form
  4. 4. Profile Views by Hotels
  5. 5. Employer References
  6. 6. Push Notifications
  7. 7. The Commission Index
  8. 8. Data Retention and Deletion
  9. 9. Data Sharing and the “Global Showcase” (B2B) System
  10. 10. Data Security, International Transfers, and Your Rights

1.Data Controller and Our Purpose

VerifyTherapist is operated by Aşur Deniz, an individual developer based in Türkiye, who is the data controller for the personal data described here ("we", "us"). The security of your personal data is our highest priority. This notice has been prepared in accordance with international standards, in particular the EU General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and the Turkish Personal Data Protection Law (KVKK). You can contact us at any time regarding your privacy requests: info@verifytherapist.com

2.The Data We Collect and Why We Process It

When you use our platform, we process the data strictly necessary to provide the service to you (first and last name, email address, profile photo, areas of expertise, and guest rating scores). This data is processed to keep your account secure, to prevent unfair complaints, and to present the quality of your work to you as a digital CV, on the legal basis of the performance of the Terms of Use you have accepted.

3.The Pre-Session Guest Form

Therapists may choose to turn on an optional pre-session form. The guest taps their preferred pressure, health notes (for example pregnancy or a recent surgery) and areas not to be touched, and the therapist sees them as short warnings in their own language. These answers are not linked to the guest's name, stay only in the memory of the therapist's phone, are never sent to our servers, and are deleted when the session ends. The form is the guest's own statement and is not a medical assessment.

4.Profile Views by Hotels

When your Global Showcase is on and a registered hotel account opens your profile page, we record that the hotel viewed it (at most once per hotel per day). You only see how many hotels viewed your profile; hotel names are never shown to you, and your viewing statistics are never shown to hotels. In weeks when at least one hotel viewed your profile, we may send you a short summary e-mail. You can stop it with the link in the e-mail or in the app. View records are deleted after 120 days.

5.Employer References

A therapist can ask a former manager to confirm that they worked at a hotel in certain years. The therapist enters the hotel name, the years and the manager's work e-mail address; personal mailboxes are not accepted. Before the first request to a new e-mail domain is sent, we check that the domain belongs to a hotel. The manager receives one e-mail and answers only yes or no to a fixed sentence; no comments or ratings are collected. A confirmed reference shows the hotel name, the years and the e-mail domain on the therapist's profile and PDF CV. The manager's name and full e-mail address are never shown. The therapist can hide or remove a reference at any time, and we remove references confirmed through a domain that turns out not to belong to a hotel.

6.Push Notifications

If you allow notifications on your phone, the app stores a device token issued by Google Firebase Cloud Messaging, linked to your account and app language. We use it only to tell you about new messages and job offers from hotels, confirmed employer references, new verified guest ratings, the weekly count of hotels that viewed your profile, and an "Available" signal that is about to end. Notifications never contain guest comments or health answers. The notification text passes through Google to reach your phone. You can switch notifications off in your profile or in your phone's settings at any time; the token is deleted when you sign out, when the app is uninstalled, or when you delete your account.

7.The Commission Index

Therapists can compare the commission they set for a standard treatment with other therapists in their city. The index is built every night from the service lists of therapists with at least one verified guest review, grouped by city, treatment and duration. A group is shown only when it contains data from at least five therapists working at three or more different hotels. Only the middle value and the usual range are shown, rounded to whole euros; no individual therapist's commission, name or hotel is ever shown. The index is visible to therapists only, not to hotels, and no estimated or invented data is added.

8.Data Retention and Deletion

You can delete your account yourself at any time: in the app, open "Profile" (spa desk staff: the "Desk" tab) and tap "Delete account" at the bottom. If you cannot open the app, email info@verifytherapist.com from the address you signed up with. Deletion is immediate and covers your profile, photo, services, sessions, guest ratings and score, ranking, CV, references, messages, notification tokens and spa desk links. Bookings a spa desk sold stay with that desk without your name. When you exercise your "Right to be Forgotten" this way, everything except the minimum log records we are legally required to keep is permanently and irreversibly deleted; backup copies expire within 30 days.

9.Data Sharing and the “Global Showcase” (B2B) System

We do not sell your personal data to any advertising company or data broker. However, if you choose, of your own free will, to activate the "Global Showcase" feature we built to support your career, your verified track record becomes accessible only to approved hotel and spa managers (HR departments) on our platform. You can withdraw this consent and hide your profile instantly, at any time, with a single tap from the "Profile" tab in the app.

10.Data Security, International Transfers, and Your Rights

Your data is encrypted to industry standards and stored on secure cloud infrastructure located abroad (AWS/Supabase). Wherever you are in the world, you have the right to access and correct your data, to request its deletion, and to revoke your consent to international transfer and your B2B consents with a single tap, without facing any penalty.

Questions? info@verifytherapist.com