Privacy Policy

1. Who we are

ezflo is operated by ezflo. For any privacy question you can reach us at ezflow0909@gmail.com or +919350018851. Our registered address and grievance contact are on our Contact page.

2. Information we collect

We collect only what we need to run the service:

• Clinic account data: clinic name, address, staff names, email addresses, phone numbers, doctors, services and business hours.
• Patient data entered by clinics: patient name, phone number, email (optional), appointment details and notes. Clinics are the data controllers for their patients; ezflo processes this data on their behalf.
• Booking & usage data: appointments, leads, reminders, campaigns and analytics generated as you use the platform.
• Payment data: when online payments are enabled, transactions are processed by a PCI-DSS compliant payment gateway. We do not store card numbers, CVV or full banking credentials on our servers.
• Technical data: log data, device/browser information and cookies strictly needed to keep you signed in and secure.

3. Why we use it (purposes)

• To provide the booking page, reminders, AI assistant, reviews, campaigns and analytics.
• To send transactional WhatsApp/email messages (booking confirmations, reminders) on a clinic's behalf.
• To process subscription payments and prevent fraud.
• To provide customer support and improve the product.
• To comply with legal obligations.

We do not sell personal data, and we do not use patient data for advertising.

4. Sharing & sub-processors

We share data only with vetted service providers who help us operate the platform — for example cloud hosting, database, WhatsApp gateway, AI processing and payment gateway providers — under contractual confidentiality and security obligations. We may disclose information where required by law.

5. Data storage & security

Data is stored on secured cloud infrastructure with encryption in transit (TLS) and access controls. Databases enforce tenant isolation so one clinic cannot access another clinic's data. We retain data for as long as an account is active and for a reasonable period afterwards to meet legal and accounting requirements.

6. Your rights

Subject to applicable law, you may request access to, correction of, or deletion of your personal data. Clinic administrators can edit or remove patient records directly in the app. To exercise other rights, contact us at ezflow0909@gmail.com.

7. Patients of clinics

If you are a patient, the clinic you booked with controls your data. Please direct data requests to that clinic; we will assist them in fulfilling your request.

8. Changes

We may update this policy from time to time. Material changes will be posted on this page with a new "last updated" date.