Privacy Policy

This Privacy Policy explains how Verihab collects, uses, and shares information when you use https://verihab.com and related booking services.

Contact for privacy questions: support@verihab.com.

1. Who we are

Verihab is a marketplace that helps patients find and book sessions with rehabilitation therapists, and helps therapists manage profiles, availability, and appointments.

2. Information we collect

2.1 Patients / booking visitors

• Name, email address, and mobile number
• One-time password (OTP) verification details for booking
• Optional requirement or concern text you submit with a booking
• Home visit address details when you book a home visit (address lines, city, and pincode)
• Selected therapist, consultation type, and appointment slot
• Fetch location details for filtering nearby therapists

2.2 Therapists

• Account and profile details (name, contact, email, specialization, bio, location, experience, services)
• Profile photos and verification documents uploaded
• Availability slots and booking records assigned
• Google account email and OAuth tokens for Google Calendar (see Section 4)

2.3 Administrators

• Admin account credentials and profile details used to operate the Service (for example verification review and membership support)

2.4 Technical and device data

• Basic logs and diagnostics from hosting and application services (for security, reliability, and abuse prevention)
• Browser local storage values used for convenience features such as search filters, booking selection state, and session idle timeouts

3. How we use information

• Create, confirm, and manage appointment bookings
• Send booking-related communications (for example email or SMS/OTP messages)
• Show therapists the patient details needed to deliver care for a booked session
• Operate therapist profiles, verification, availability, and membership features
• Create telehealth calendar events and Google Meet links when a therapist has connected Google Calendar
• Provide customer support and improve Service reliability
• Protect against fraud, abuse, and unauthorized access

4. Google user data

4.1 Google data we access

With the therapist’s consent through Google OAuth, we may access:

• Google account email address (userinfo.email)
• Google Calendar event permissions (calendar.events) to create or manage booking-related calendar events (including Meet conference details where applicable)

4.2 How Google data is used

Google user data is used only to:

• Confirm which Google account is connected to a therapist profile
• Create calendar invitations / Meet links for telehealth appointments booked through Verihab
• Maintain or clean up those booking-related calendar artifacts when required by the booking workflow

We do not use Google user data for advertising, sold data products, credit decisions, or unrelated profiling.

4.3 Google API Services User Data Policy / Limited Use

Verihab’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

• Google user data is used only to provide or improve user-facing features that are prominent in the Service (telehealth calendar / Meet booking support).
• We do not transfer Google user data to third parties except as necessary to provide/improve those features, for security/legal compliance, or as part of a merger/acquisition with equivalent protections.
• We do not use Google user data for serving advertisements, including personalized or retargeted ads.
• We do not allow humans to read Google user data unless we have the user’s affirmative consent for specific cases, it is necessary for security/compliance, or the data is aggregated/anonymized for internal operations.

4.4 Storage, retention, and disconnection

• OAuth tokens associated with Google Calendar connections are stored securely (including encryption of token material in our booking systems) and used only for the purposes above.
• Therapists can disconnect Google Calendar from their Verihab therapist profile. After disconnection, we stop using that Google connection for new bookings and remove or invalidate stored tokens as part of the disconnect flow.
• Therapists may also revoke Verihab’s access from their Google Account permissions page.

5. How we share information

We share information only as needed to operate the Service:

• With the other party to a booking (patient details with the selected therapist; therapist/session details with the patient)
• Service providers / processors that help us host and run the Service, such as database/auth/storage (Supabase), application hosting/edge functions (Cloudflare Workers), and email delivery providers
• Payment / membership processing metadata related to therapist membership (for example UPI payment references reviewed by Verihab)
• Legal and safety disclosures when required by law or to protect users, the Service, or the public

We do not sell personal information.

6. Cookies and local storage

We use browser local storage (and similar technologies) for functional purposes such as remembering homepage search preferences, restoring booking selection details during the booking flow, and managing authenticated session idle timeouts. These are not used to sell your data to advertisers.

7. Data retention

We retain personal data for as long as needed to provide the Service, maintain booking and verification records, meet legal/accounting obligations, resolve disputes, and enforce our terms. When data is no longer required, we delete or anonymize it where practicable.

8. Security

We use industry-standard safeguards appropriate to our Service, including HTTPS/TLS for data in transit, access controls for authenticated therapist and admin areas, and provider-managed security features for hosted infrastructure. No method of transmission or storage is completely secure; please use strong account credentials and contact us if you suspect unauthorized access.

9. Your rights and choices

Depending on applicable law, you may request access, correction, or deletion of personal information we hold about you, or ask questions about how it is used (Contact support@verihab.com). We may need to verify your request before responding.

Therapists who connected Google Calendar can disconnect that integration in their profile or revoke access in Google Account settings.

10. Children’s privacy

The Service is not directed to children under 13 (or the minimum age required in your jurisdiction). We do not knowingly collect personal information from children. If you believe a child has provided us personal information, contact us and we will take appropriate steps.

11. International processing

Verihab operates with infrastructure and service providers that may process data in India and other countries. Where data is processed in another country, we take steps designed to provide appropriate protections consistent with this Policy and applicable law.

12. Changes to this Policy

We may update this Privacy Policy from time to time. We will post the updated version at https://verihab.com/privacy and revise the “Last updated” date above. Continued use of the Service after an update means you acknowledge the revised Policy.

13. Contact us

Verihab
Website: https://verihab.com
Email: support@verihab.com