Privacy policy

Website and waitlist · Version 1.0 · As of October 2026

This notice applies to the website psyclinicai.com and the UK pilot waitlist. We will publish a separate notice for the application itself. No health data is processed on this website.

1. Controller

Atilla İlhan, a natural person established in Türkiye, operating PsyClinicAI. Email for all data protection matters: support@psyclinicai.com.

We are not established in the UK and have not appointed a UK representative under Article 27 UK GDPR yet. We will appoint one, and name them here, before the application accepts real client data or any paid plan. We have not appointed a Data Protection Officer. Our servers are in Germany.

Pilot status: the UK pilot is free and accepts fictional or fully anonymised cases only.

2. Hosting and access data

The website and the waitlist run on servers of Hetzner Online GmbH in Germany, which processes data on our behalf. When you open a page, the web server records technical access data such as IP address, time and page. We delete these after seven days. The legal basis is our legitimate interest in running and securing the site (Article 6(1)(f) UK GDPR).

3. No cookies

We set no cookies, use no audience measurement and load no third-party content. Nothing is stored on your device.

4. Waitlist with double opt-in

Data: your email address; optionally practice type, main approach and whether you are willing to take part in a 15-minute conversation. As proof of consent we store the wording and version of the consent text, the time, and the IP address of your confirmation.

Process: after you submit the form we send a confirmation email. The sign-up counts once you open the link. Without confirmation we delete your details after 30 days.

Purpose: telling you when the pilot opens and inviting you. If you tick the separate marketing box, we may also send occasional marketing email about product updates, offers and events. That box is empty by default and is a separate consent.

Legal basis: your consent (Article 6(1)(a) UK GDPR) and, for email, PECR. Proof of consent rests on Article 6(1)(c).

Email delivery: we send email through Resend, Inc., USA, which processes it on our behalf. The transfer relies on the safeguards in Resend's data processing agreement: standard contractual clauses with the ICO's International Data Transfer Addendum, or the UK Extension to the EU-US Data Privacy Framework where Resend is certified for it. Resend receives your email address and the content of the email.

Withdrawal and deletion: you can withdraw at any time with the link in every email or by writing to support@psyclinicai.com. We then delete your optional details and IP addresses at once, and keep the email address, consent text and timestamps for three years as proof. On the unsubscribe page you can instead choose immediate, complete deletion.

5. Internal notification

When a sign-up is confirmed, we receive a push notification with the running total and the optional details you gave, never your email address.

6. Contact by email

If you write to us, we use your details to answer you (Article 6(1)(b) or (f)) and delete them two years after the matter is closed.

7. Your rights

You can ask for access, correction, erasure, restriction, portability, and you can object to processing based on legitimate interests. You can withdraw consent at any time. You can complain to the Information Commissioner's Office (ico.org.uk).

8. No automated decisions

We make no solely automated decisions. Your email address is required for the waitlist; everything else is optional.