Zina Follow-Up — Privacy Policy
Effective date: August 17, 2026
Zina Follow-Up is a Chrome extension used exclusively by staff of Zina Cosmetic Centre (Vaughan, Ontario) to manage client follow-up tasks. It is not offered to the public.
What the extension collects
- Staff identity: your zinaclinic.com Google account email and name, used to sign you in and attribute tasks. Authentication uses Google Sign-In; the extension never sees your password.
- Sign-in tokens: the short-lived Google sign-in token, and the 12-hour session token it is exchanged for, are held in the browser's session storage and discarded when the browser closes. Your last-used sign-in email is remembered locally to speed up the next sign-in.
- Client context: when you open a client record in Zenoti HyperConnect or GoHighLevel, the extension reads that record's identifier — from the console's page address or from the addresses of the console's own network requests, never from message text or any other page content — so tasks can be linked to the correct client. In HyperConnect it also reads the console's stored employee id so a new task can be pre-assigned to you. Client names and appointment details shown in the panel come from our clinic systems, not from the page.
- Task content: titles, notes, due dates, and assignees that staff enter.
What the extension does not collect
No browsing history, no data from any website other than the clinic's Zenoti and GoHighLevel consoles, no analytics or advertising identifiers, no payment data.
Health information
Because tasks reference clients of a medical aesthetics clinic, task data may constitute health information. All such data is stored in Google Cloud (Firestore and Cloud Run) in the northamerica-northeast2 (Toronto, Canada) region, encrypted at rest and in transit. Data does not leave Canada; the only processing outside the Toronto region is scheduled-trigger metadata (containing no client data), which is processed in Montreal, Canada.
Sharing
Data is shared only with the clinic's own operational systems (Zenoti, GoHighLevel, Resend for staff email notifications). It is never sold or shared with third parties for advertising.
Retention and access
Task data is retained for clinic operational purposes and can be corrected or deleted by clinic administrators on request to omar@zinaclinic.com. Access is restricted to an explicit allowlist of current clinic staff.
Contact
Omar Ameen — omar@zinaclinic.com
Effective August 17, 2026 · Contact: Omar Ameen, omar@zinaclinic.com