Data Processing Addendum
Last updated 6 October 2026
Parties and roles
This addendum is between the clinic or practice that creates a Bliss workspace and Round Robin Solutions LLP, 3rd Floor, E-189, Sarita Vihar, New Delhi 110076. For the personal data of the clinic's clients, the clinic is the data fiduciary under India's Digital Personal Data Protection Act, 2023, and Bliss is its data processor.
Instructions
Bliss processes client data only on the clinic's instructions, which are the clinic's use of Bliss and its settings, and only to provide the service.
The clinic's duties
The clinic has a lawful basis and any consent needed for the data it enters, including a parent's or guardian's consent for children, and answers its clients' requests about their records.
Confidentiality and security
Only people who need access to run Bliss can reach client data, and they are bound to keep it confidential. Data is encrypted in transit, each clinic's data is kept separate, staff access follows their roles, and documents are kept in private storage and opened only through short-lived links that expire within minutes. When Bliss support opens a clinic's workspace to help, it is recorded, and a support session is never given the permission to read every client's session notes, diagnoses and treatment plans.
The clinic decides which roles its team members hold, and so who can read clinical records. By default, session notes, diagnoses and treatment plans can be read by a client's therapists and their supervisors and by the clinic's owners and admins. On plans with custom roles, the clinic can also let another role read every client's clinical records.
Other processors
Bliss uses these providers to run the service, and will tell clinics before adding a new one that receives client data:
| Provider | What they do for Bliss |
|---|---|
| Oracle Cloud | Hosting, the database and private document storage |
| Cloudflare | DNS, secure connections, network protection and bot checks on public forms |
| Resend | Sending email |
| Cashfree Payments | Plan payments, client invoice payments and clinic payout onboarding |
| Google sign-in; Google Calendar and Meet when a therapist connects them, including reading the titles and times of events in the therapist's own calendar to show when they are busy; exporting a clinic's analytics, which can include client names, to the clinic's own Google Sheets; website analytics after you accept it | |
| Zoom | Video sessions for clinics that connect Zoom |
| Browser push services (Google, Apple, Mozilla) | Delivering the notifications you turn on; the message is encrypted |
| Sentry | Error reports, with personal and health data removed before they are sent |
Breaches
If Bliss becomes aware of a personal data breach affecting the clinic's data, it will tell the clinic without undue delay and give the information the clinic needs to notify the Data Protection Board and the people affected.
Helping with requests
Bliss gives clinics tools to answer their clients' requests: archive a client, erase an archived client permanently, and export the clinic's records. Bliss records who used them. Erasing deletes the client's fee reviews and keeps invoices and payments, including fees the clinic confirmed, with the client's name removed, for at least 8 years, as tax law requires. It also keeps notes on group sessions, which belong to the other clients' records too.
Calendar and Meet events that Bliss created in a therapist's own Google account belong to that account. Bliss no longer adds session notes to Google Calendar events. If a therapist sees notes in an older event, they can delete them from their calendar or ask support to help. Erasing a client does not change them, so the client's email address stays on earlier Meet events until the therapist removes it in Google.
Monthly reports and logos
Each month, Bliss emails the clinic's owners PDF reports on the previous month's sessions, billing and payouts, unless an owner turns this off in the clinic's settings. The reports can include client and therapist names and amounts, never clinical records or contact details, and Bliss does not keep the PDFs. A logo the clinic adds to its branding is public, because it is shown in emails and on public forms.
Changes
Bliss will email clinic owners about significant changes to this addendum, the Privacy Policy, the Terms of Service or the Refund and Cancellation Policy before they apply, and owners are asked in the app to accept each new version of this addendum.
End of service
A clinic owner can export the clinic's records at any time: clients, sessions, notes, diagnoses, treatment plans, forms and answers, documents and their files, invoices, payments, wallet entries, schedules, move requests, cancellation and no-show records, fee reviews, the clinic's policies and the rules Bliss recorded with each booking, roles, team members' and clients' names, email addresses and contact phone numbers, settings, notification history and the clinic's audit record, such as who archived, erased or exported client data. The export leaves out invitations, payment links and other payment gateway state, custom domains, links to Google Sheets exports, invoice reminder logs, records of which follow-up and monthly report emails were sent and Bliss's own plan billing, and removes passwords, tokens and similar secrets.
When a clinic leaves Bliss, support closes the workspace. Bliss deletes the clinic's data within 90 days of closure, or sooner if the clinic asks, except records the law requires us to keep.