Legal

Sub-processors

Last updated November 2026

ClinyPal uses these companies to run the service. Each processes clinic data only to provide its part, under a data protection agreement. We announce changes at least 30 days ahead, by email and on this page.

CompanyWhat it does for ClinyPalData it handlesWhere
OVHcloud USHosting, the database, file storage and backupsEverything in the clinic's account, including patient records, uploaded files and encrypted backupsUnited States
Amazon Web ServicesSending emails (Amazon SES) and text messages (AWS End User Messaging): reminders, confirmations, invoices, sign-in codesRecipient name, email address or mobile number, the message content, delivery statusUnited States
StripeClinyPal's own subscription billing, and card payments for clinics that connect StripeFor billing: the clinic's billing contact and card; for clinic payments: the patient's name, email and the amountUnited States and others
Cloudflare, Inc.Our website and DNS, the bot check on the sign-up form (Turnstile), the relay for video calls when a direct link can't be made, and AI features (templates, message wording, report explanations, help chat; not used for patient records)Website traffic; browser signals for the bot check; encrypted video and audio passing through the relay; for AI features, the text the feature sendsGlobal network

Monitoring

These services watch that ClinyPal is up and running well. Neither receives patient data.

CompanyWhat it does for ClinyPalData it handles
Grafana Labs (Grafana Cloud)Server performance metricsServer metrics; no patient data
Better StackUptime checks of public health-check pages, and alertsWhether the health-check pages respond; no patient data

Services a clinic connects itself

These are not ClinyPal's sub-processors. The clinic chooses them, signs in to its own account with them, and has its own agreement with each. ClinyPal sends them data only while the connection is on.

ServiceWhat ClinyPal sends
Xero, QuickBooks Online, Zoho BooksPatients' names, invoices, payments, refunds and account credit
Square, PayPal, Stripe (the clinic's own account)Payment amounts and the patient's name and email
Google Calendar, Microsoft Outlook, Apple CalendarAppointment times, with the patient's name if the clinic chooses
Google Drive, OneDriveFiles the clinic exports there
Mailchimp, Zoho Campaigns, HubSpot, BrevoNames and emails of patients who agreed to marketing
Sign in with Google or MicrosoftOnly the sign-in itself; no patient data

Questions about this page? Email [email protected], or see every way to contact us.

Features

See the whole platform Who it’s for Pricing Security
Start free trial Sign in