The people your counselors serve are trusting them with painful and private things. Protecting that trust matters deeply to us. Here, in plain language, is how it works and what we do and do not claim.
Long before this was software, guarding what is spoken in confidence was a matter of Christian faithfulness. The protections on this page are our attempt to put that conviction into action with the tender things people bring to counseling.
Scripture asks us to treat others as we would want to be treated (Luke 6:31), and it reminds us that those entrusted with something are called to be found faithful with it (1 Corinthians 4:2). We hold your data, and the care behind it, as a trust to be kept, not a thing to be traded.
The heart of protecting counseling is making sure the right people, and only the right people, can see each thing. Access in Soul Care Dashboard is built around roles, not one shared login.
There are no passwords to remember, reuse, or leak. When you sign in, a one-time code arrives by email, or you can use your Google account. Either way, a signed-in session lasts about 30 days and then asks you to sign in again.
If you choose to connect a Google account, Soul Care Dashboard asks Google for permission to see your list of calendars and when you're busy, and to add, change, and remove the events it creates. We use that access for two things only: to check your existing calendar for busy times so clients can't book over them, and to put booked sessions (with a Google Meet link when you choose video) on the calendar you pick. We don't read event details beyond what's needed to know when you're busy, and we never sell calendar data, use it for advertising, or share it with anyone else.
You can disconnect Google at any time from your Availability settings, and you can also remove access from your Google account's security settings. Disconnecting stops our access right away and deletes the stored connection. To withdraw the permission on Google's side as well, remove Soul Care Dashboard in your Google account's security settings.
Soul Care Dashboard's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Card numbers are handled entirely by Stripe and never touch our servers or our database. We do not store card numbers. Stripe is one of the largest payment processors in the world and is certified at the highest level of the card industry's security standard (PCI Level 1), so cardholder data stays inside their vault, not ours.
Because each organization connects its own Stripe account, the money for a session flows to the counselor or ministry, not through us.
Everything that moves between you and Soul Care Dashboard travels encrypted over HTTPS, the same standard your bank uses. The platform runs on Cloudflare, a major infrastructure provider, which also shields the service from abuse and attacks. Your information is stored on Cloudflare's infrastructure, which encrypts stored data at rest.
We use a small number of trusted companies to run Soul Care Dashboard, and each one only gets what it needs for its job:
When a client signs a consent form or agreement, the signed record keeps the wording they agreed to and their signature. For a minor, the counselor sets up the account with a parent or legal guardian, who receives the invitation and is asked to sign consents and handle payment on the child's behalf.
If someone asks to be removed, an admin can delete a client and their counseling records, keeping only the anonymized billing history that accounting requires. A few related items can take longer to clear or need a separate step: files attached to session notes, events already placed on a counselor's own calendar, our activity log, and backups, which expire within 30 days. Email us and we will help make sure everything is removed.
You have the right to know what personal information is held about you, to have it corrected if it is wrong, to ask for a copy of it, and to ask for it to be deleted. Because your care happens through a counselor or organization using Soul Care Dashboard, the quickest way to exercise these rights is to ask them directly, and they can view, correct, export, or delete your information from within the platform.
If you would rather reach us, or you are not sure who holds your data, email info@soulcaredashboard.com and we will help you exercise your rights or connect you with the right organization. When an organization deletes a client, their counseling records are removed as described above, keeping only the anonymized billing history that accounting requires.
We do not sell your data. We do not show ads. We do not load third-party marketing trackers that follow your clients around the internet. Your counseling data exists to serve the care happening inside your organization, and nothing else.
Soul Care Dashboard is a ministry and soul care platform, not a medical or insurance-billing system. We do not market it as HIPAA compliant. Biblical and pastoral soul care is generally not billed through insurance, so HIPAA usually does not apply to it. That said, your situation is your own, and you should check with your own legal and ministry advisors about what applies to you.
We would rather be clear about this than let a badge imply something that is not true.
We are early, and we are still adding to our security measures as we grow. We will keep this page honest and up to date as things change, and we will not claim certifications or protections we do not actually have.
Have a question this page did not answer? Email us at info@soulcaredashboard.com and a real person will get back to you.