Privacy Policy

Zetifa is a marketing and operations platform for independent healthcare practices. It is not an electronic medical record system and is not designed to store patient health information.

What we collect

• Account details for clinic staff: name, work email and role.
• Clinic information you provide: name, address, services, brand assets and communication preferences.
• Content you create, approve or schedule in the platform, and a record of who approved it.
• Information from services you choose to connect, for the purposes and permissions described below and on the Connections page.

Non-clinical use only

Do not enter identifiable patient information. Zetifa is not intended for patient correspondence, patient appointments or clinical records. Connecting an account does not guarantee that patient information will be excluded.

Gmail and Google Calendar

Access is read-only. Zetifa does not send Gmail messages or create, edit or delete Google Calendar events. Use a dedicated non-clinical operational inbox and calendar for vendors, staffing, facilities, closures and other practice operations. Do not connect an inbox or calendar used for patients.

For Gmail, the server reads mailbox information and a limited sample of recent message subjects and snippets to calculate counts and categories. The Connections page does not display subjects, senders or message text. Keyword screening is best-effort, not a reliable patient-information filter. Counts are not a complete mailbox review and category counts do not mean tasks have been saved.

For Google Calendar, Zetifa reads calendar information and upcoming primary-calendar events, including event titles, dates and locations, which may be displayed in the clinic workspace. Events are not filtered to guarantee non-clinical content. The current read functions do not save message or event content to clinic database tables; this is not a promise about all provider, hosting or diagnostic retention.

Google access currently uses a shared workspace connection restricted to an explicitly assigned clinic, not a separate Google sign-in for each clinic user. A connection is shown as live only after a successful server check. Provider approval and a connection shown in Zetifa are different things.

How we use information

To prepare recommendations and content for your clinic, to keep an audit record of approvals, and to operate and secure the service. We do not sell your information.

AI processing

Clinic details and your requests are sent to AI providers to draft content. Requests must contain only clinic-level, non-identifiable information. Do not include patient details in a prompt. The current Google read functions do not send mailbox messages or calendar events to the content-generation AI.

Facebook and Instagram

If an Owner or Office Manager connects Meta, Zetifa asks only for permission to list the Facebook Pages they manage, read basic Page information, read the linked professional Instagram account, and publish posts that an Owner or Office Manager has approved. We store the Page name, the Instagram username and an encrypted access token on our servers. We do not read messages, comments, followers, insights or ads, and nothing is posted without recorded approval.

Use Disconnect on the Connections page to remove stored Meta tokens and clear connected Page/account details. Zetifa also attempts to revoke Meta access; if that request fails, remove the app in Facebook Business integrations. Provider-side removal reaches Zetifa automatically only when Meta's signed callbacks are configured and delivered. See our data deletion instructions.

Other providers and availability

Google Business Profile is intended for managed clinic reviews with approved replies. Outlook is planned for read-only operational mail and calendars. Availability depends on credentials, provider permissions and successful verification; these descriptions do not mean access is approved or a service is connected. Do not connect patient-facing accounts.

Separation and security

Each clinic's workspace is isolated. Provider credentials are kept on our servers and never shown in the browser. Access is limited by staff role.

Your choices

For Meta, use the in-app Disconnect action. For the shared Google connection, contact support to arrange removal and revoke access in your Google Account's third-party connections if needed. Removing provider access does not delete saved clinic content or approval history. Request export or workspace deletion using the data deletion instructions. No automatic retention or deletion deadline is promised here.

Contact

Privacy and legal questions: privacy@zetifa.com. Zetifa is operated by Zetifa Technologies Inc..