Privacy Policy & Terms of Service

1. Overview & Commitment to Privacy

At Onestep4 ("we", "our", "us"), protecting your personal privacy is central to providing a safe and respectful counselling environment. This Privacy Policy describes how we collect, use, store, and disclose information when you register for an account, book an appointment, make payments, and communicate with counsellors via our secure cloud telephony network.

2. Information We Collect

We collect only information that is genuinely required to provide, schedule, and facilitate our counselling services:

• Registration Information: Full name, verified email address, mobile phone number, and account credentials.
• Consent Records: Exact timestamps and version numbers corresponding to your explicit acceptance of this Privacy Policy and Terms of Service.
• Appointment & Scheduling Details: Counsellor selected, session date, time slot, duration, and optional booking notes provided by you.
• Payment Metadata: Transaction reference IDs, payment method selected, amount paid, and server verification status. We do NOT store or process raw credit/debit card numbers or UPI MPINs on our servers.
• Telephony Metadata: Telephony call identifiers (Call SIDs), session start and end timestamps, and delivery statuses generated by our telephony network.

3. Telephony Network & Phone Call Privacy

To make connecting as seamless and private as possible, Onestep4 utilizes an enterprise cloud telephony network to facilitate scheduled voice calls between clients and counsellors.

• Number Masking & Virtual Bridging: At the scheduled appointment time, the telephony system initiates a call bridging the counsellor and client through a dedicated virtual number. Your private phone number is not displayed to the counsellor, and the counsellor's personal phone number is not displayed to you.
• Content of Conversations: Onestep4 does not record or monitor counselling conversations for marketing or commercial analysis. Any clinical notes taken by counsellors remain confidential between you and the counsellor.
• Telephony Data Security: Our cloud telephony infrastructure adheres to telecommunications industry security standards and acts as a data processor for communication transport.

4. Payment Processing Architecture

All online transactions are conducted through PCI-DSS compliant secure payment aggregators (e.g. PhonePe / UPI / Razorpay). Payment verification occurs server-to-server. Our web platform never receives, handles, or stores full card numbers, CVVs, or bank security credentials.

5. How Information Is Protected & Data Retention

We implement administrative, technical, and physical safeguards including TLS 1.3 encryption for in-transit data and isolated role-based access for backend records. We retain appointment records and consent logs only as long as necessary for administrative compliance and service continuity.

6. Your Privacy Rights

Subject to applicable Indian data privacy regulations, you have the right to:

• Review and request a copy of the personal information stored in your account.
• Request correction of inaccurate contact or profile information.
• Request deletion or deactivation of your registered account.

7. Terms of Service Summary