Privacy Policy
How Universal Plugins collects, processes and protects clinic and patient data, including encryption in transit and at rest, transient processing and data retention.
This policy explains what the integration handles and what it does not. Appointment and contact data passes through only as long as needed to keep your practice management system and Gohighlevel in step; your practice management API key is exchanged for a secure Universal Plugins key rather than stored in plain text, and you can revoke a connection from the dashboard at any time.
Infrastructure runs on Google Cloud Platform with encryption in transit and at rest. Access is limited to what is required to operate and support the service, and we do not sell data or use clinic records for advertising.
The full policy below sets out the detail: what is collected, why, how long it is kept, the rights you have over it, and how to reach us with a question or a deletion request.
What we handle and why
The integration exists to keep your practice management system and Gohighlevel describing the same reality, so it handles the data needed to do that: contact details, appointment detail such as practitioner, service, date, time and status, and the identifiers that let a record in one system be matched to the record in the other.
Data passes through as it syncs rather than accumulating. Your practice management API key is exchanged for a secure Universal Plugins key rather than kept in plain text, and revoking a connection from the dashboard stops all access immediately.
Security and infrastructure
Infrastructure runs on Google Cloud Platform with encryption in transit and at rest. Internal access is limited to what is required to operate and support the service, and we do not sell data or use clinic records for advertising or model training.
Because the connection is between two systems you already control, you remain the owner of the records in both; we act on your instruction to move them between the two.
Your rights and how to reach us
You can ask what is held, ask for it to be deleted, or revoke a connection at any time. Deletion requests and privacy questions go to apps@universalplugins.com and are handled directly.
The full policy below sets out the detail: categories of data, purposes, retention, sub-processors, international transfers and the rights available to you.
How we think about patient data
Universal Plugins moves information between your practice management system and Gohighlevel; it is not a place where clinical records live. Appointment and contact data passes through our processing layer only for as long as a request takes to complete, and practice management credentials are exchanged for a secure key issued by us so the original API key is never held in a form that could be read back.
That design is deliberate. The less data a connector retains, the smaller the consequence of any incident, and the easier it is for a clinic to answer its own patients' questions about where their information goes.
Your responsibilities as the clinic
You remain the controller of your patients' information. Decisions about what you collect, what consent you gather, how long you keep records in your practice management system and Gohighlevel, and who on your team can see them are yours to make. We process what your configuration instructs us to process, and nothing beyond it.
If a patient asks you to remove their data, the deletion happens in the systems that hold it - your practice management system and your Gohighlevel account. Because we do not retain records, there is generally nothing to erase on our side.
Questions, changes and contact
If you need detail for your own privacy documentation, a data processing agreement, or a description of our hosting and encryption arrangements to give to a client, email apps@universalplugins.com and we will provide it. We will also tell you plainly when something is outside our scope rather than implying a guarantee we cannot make.
When this policy changes materially we update this page and the date it carries, so you can see what applied at any point in your relationship with us.