MySBT LLC ("MySBT," "we," "us") builds software for behavior analysts. This policy explains what information we collect through mysbtapp.com and the MySBT application on iOS and the web (together, the "Service"), how we use it, and the choices you have.
It covers two different kinds of information:
- Information about you, our user or website visitor.
- Information you enter about the people you serve ("Client Records"). You decide what goes into Client Records, and you, or your organization, control them.
Who we are
MySBT LLC is a Massachusetts limited liability company, 82 Wendell Ave, Suite 100, Pittsfield, MA 01201. Questions about this policy: support@mysbtapp.com.
Pseudonyms and HIPAA
MySBT is designed to be used without identifying the people you serve. As our Disclaimer states, we strongly encourage you to use a pseudonym in place of a name and not to enter other identifying information. If you choose to enter identifying information, you are solely responsible for complying with the Health Insurance Portability and Accountability Act (HIPAA) and every other applicable privacy and health-data law.
We may enter into a Business Associate Agreement ("BAA") with organizations that need one, typically as part of an organization agreement. Unless a BAA signed by MySBT LLC is in place, MySBT is not your business associate, and you must not enter protected health information. Where a BAA is in place, it governs our handling of protected health information and prevails over this policy.
Information we collect about you
Account. Your name and email address. Passwords and two-factor sign-in are handled by our authentication provider; we never see your password.
Profile. Details you choose to provide, such as profession, certification, degree, country, language and age.
Agreement records. When you accept our Terms of Service or Disclaimer, we record the version, the date and time, your IP address, your device or browser type, and your app version, so we can show what was agreed and when.
Payments. Payments are handled by our payment processor (on the web) or by Apple (on the App Store). We never receive or store full card numbers. From our payment processor we receive your name, email, billing address and limited card details such as brand and last four digits. From Apple we receive only your subscription status.
Support and website forms. What you send us.
Technical information. Our servers log IP address, browser type, requests and errors, which we use for security, abuse prevention and troubleshooting. If you have opted in to sharing with developers through your Apple device settings, Apple provides us with crash reports.
What we don’t collect. We do not collect precise location, contacts, photos, or microphone or camera data. Face ID and Touch ID are handled entirely by your device; we never receive biometric data. We do not use analytics software, advertising trackers or marketing pixels, and we do not buy information from data brokers.
Client Records
We use Client Records to provide the Service to you.
We may also create de-identified and aggregated information from Client Records — information with identifiers removed, so that it cannot reasonably be used to identify an individual — and use it to analyze and improve our products, to conduct research, and to develop new features, including training artificial-intelligence and machine-learning models. We do not attempt to re-identify de-identified information, and we require anyone we share it with not to.
We do not sell Client Records or use them for advertising. Our personnel access Client Records only as needed to operate, secure and improve the Service, to create de-identified information as described above, to respond to a support request, or to comply with law.
- Sharing. When you share a learner with another MySBT user, that user can view and edit the learner’s records. The owner controls sharing.
- Emailing a graph. We send the graph to the address you enter. Email is not a secure channel, and you are responsible for the recipient and the content.
- AI analysis. When you use this feature, the selected session data is sent to a third-party AI service. That service processes it in the region where your account is hosted and is not permitted to use it to train its own models.
Requests from individuals about Client Records — access, correction, deletion — should go to the professional or organization that entered them. We will help you respond.
How we use information about you
- To provide, secure and support the Service
- To process payments and manage your subscription
- To keep records of what you agreed to
- To diagnose and fix problems
- To understand overall use of the product, in aggregate
- To send service, billing and security messages — you cannot opt out of these while you have an account
- To comply with law and enforce our Terms of Service
We make no automated decisions that produce legal or similarly significant effects. If you request early access or contact us, we may email you about MySBT; every such email includes an unsubscribe link.
Service providers and disclosures
We use service providers for cloud hosting and storage, authentication, email delivery, AI processing, payment processing (including Apple’s App Store), business email and customer support, and professional advice such as legal and accounting. Each may use information only to provide its service to us. A current list of our service providers is available on request from support@mysbtapp.com.
We do not sell personal information, and we do not share it for cross-context behavioral advertising, as those terms are defined under US state privacy laws.
We may disclose information if required by law, subpoena or valid legal process, or where necessary to protect the rights, safety or property of MySBT, our users or others. Where we are permitted to tell you, we will.
If MySBT is involved in a merger, acquisition or sale of assets, information may transfer as part of that transaction. We will give notice before your information becomes subject to a different privacy policy.
Retention
- Account information is kept while your account exists, and for a reasonable period afterwards to meet legal and operational needs.
- Agreement records and billing records are kept for as long as the law requires or as needed to establish what was agreed.
- Client Records are kept while your account exists — including after a subscription ends, when they stay readable and exportable — and are deleted when you delete them or your account, or ask us to.
- Inactive accounts. If an account has had no active subscription and no sign-in for 24 months, we may delete it and its Client Records after giving at least 60 days’ notice by email.
- De-identified data. Deleting your records or your account does not delete de-identified or aggregated data previously created from them, which cannot be linked back to you or the people you serve.
- Backups. Deleted data may remain in encrypted backups until those backups expire.
Security
We use encryption in transit and at rest, required two-factor sign-in, access controls and logging. No system is perfectly secure, and we don’t claim otherwise. If a breach affects your information, we will notify you and the authorities as the law requires.
Your rights
Depending on where you live, you may have the right to access, correct, delete or receive a copy of your personal information, and not to be discriminated against for exercising these rights. We do not sell or share personal information, so there is nothing to opt out of.
To make a request, or to delete your account, contact support@mysbtapp.com. Please don’t include information about the people you serve. We will verify your identity before acting and respond within the time the law allows. You may appeal a decision by replying to our response.
Children
Our website and marketing are directed to professionals, and we do not knowingly collect personal information directly from children. Information about the people you serve, who may be minors, reaches us only through you, and is handled as described in the “Pseudonyms and HIPAA” and “Client Records” sections above.
Cookies and browser storage
This website uses only cookies that are strictly necessary for it to work and to keep it secure. The MySBT web app stores your sign-in session and preferences in your browser’s local storage, which it needs in order to work. Our payment processor’s checkout pages set their own cookies to prevent fraud. We do not use analytics or advertising cookies.
If we ever introduce non-essential cookies, we will update this section and ask for consent where the law requires it.
Where information is stored
Your account and Client Records are stored and processed in the geographic region where your account is hosted. Accounts are currently hosted in the United States. Some service providers, such as payment and support providers, may process information about you (not Client Records) in other countries.
Changes
We may update this policy. We will email account holders and post a notice on this page at least 30 days before a material change takes effect. The effective date above always shows the current version.