Privacy Policy

1. Introduction

ZahiFlow ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard information when you access or use our clinic management software and related services.

2. Data We Collect

We collect the following types of information:

• Clinic Information: Clinic name, address, phone number, and professional details.
• User Accounts: Names, email addresses, and roles of clinic staff.
• Patient Data: Information entered by clinic users about patients, including names, medical history, clinical documents and structured visit records. The clinic remains responsible for the data it enters and its lawful use.
• Usage & Audit Data: Information about service activity such as login times, features used, security logs and audit events.

3. How We Use Your Data

We use information to provide, secure, support and improve the ZahiFlow service, including:

• Operating and maintaining the platform.
• Processing billing and payments.
• Authenticating users and securing accounts.
• Sending important service updates and support communications.

4. Data Security & Regulatory Responsibilities

We use healthcare-focused technical controls including encrypted transport and storage controls, tenant isolation, role-based access and database Row-Level Security. These controls can support a clinic's privacy and security obligations, but ZahiFlow does not represent that use of the platform by itself makes a clinic compliant with HIPAA, GDPR, NPHIES, NABIDH or another regulatory framework. Applicability and compliance depend on the clinic's jurisdiction, agreements, configuration and operating practices. External government, payer, laboratory and FHIR integrations require separate configuration and validation. We do not sell patient data.

5. Data Retention

We retain data while an account is active and as reasonably necessary to provide the service, meet security and legal obligations, resolve disputes and enforce agreements. Where account deletion is available, deletion timing may be subject to backups, legal requirements and a stated recovery period.

6. Contact Us

If you have questions about this Privacy Policy, contact us at support@zahiflow.com.