Zeva CareBook a visit
← Back to Zeva Care

Privacy Policy

Effective June 3, 2026

This Privacy Policy explains how Zeva Care, PLLC (“Zeva Care,” “we,” “us”) handles information collected through zevacare.co. Health information you share to book or prepare for a visit is Protected Health Information (PHI) governed by our Notice of Privacy Practices and federal HIPAA rules; this policy describes our broader website data practices.

Information we collect

We collect only what we need to schedule and deliver your care:

  • Information you provide during booking and intake — name, date of birth, contact details, address, insurance information, medical and mental-health history, screener responses, emergency contact, and (for minors) parent or guardian details.
  • Payment information — we keep a card on file to bill for services, but your full card number is entered directly into our payment processor (Stripe) and is never seen, transmitted, or stored by Zeva Care. No charge is made at the time of booking.
  • Limited technical information — a session identifier, device and browser type, and the IP address recorded at the moment you sign a consent form (kept as part of the consent audit trail). We deliberately avoid placing health information in logs, URLs, or browser storage.

How we use your information

  • To schedule, confirm, and deliver your telehealth psychiatric care.
  • To verify insurance eligibility and authorize a payment method for later billing.
  • To send appointment confirmations, reminders, and your telehealth visit link.
  • To maintain a legally required audit trail for the consents you sign.
  • To protect the security of our services and prevent fraud or abuse.
  • To meet our legal, regulatory, and professional obligations.

We do not sell your information, and we do not use it for advertising or share it with advertising networks.

How your booking information is handled

Our booking system is designed to hold your information only as long as needed. The details you enter are stored temporarily while you complete your booking. When you confirm your appointment, that information is transferred into our electronic health record system and then deleted from the booking system. After a successful transfer, the booking system retains only non-health records — such as the link between your payment account and your patient chart — needed to support future billing.

Your signed consent document is kept available for 24 hours so you can download a copy, then removed from the booking system. Your full medical record is maintained securely in our electronic health record, as described in our Notice of Privacy Practices.

Service providers we work with

We use established healthcare and infrastructure vendors to operate our services. Where a vendor handles PHI on our behalf, we maintain a HIPAA Business Associate Agreement with them:

  • Convex — secure backend and temporary storage for booking and intake data.
  • DrChrono — our electronic health record, where your medical record is maintained.
  • Stripe — payment processing and secure storage of your card on file.
  • Resend — transactional email delivery.
  • Telehealth video platform — an encrypted, HIPAA-compliant service used for your video visit.

How we protect your information

Information is encrypted in transit and at rest, access is limited to authorized personnel and systems, and booking data is purged promptly after it reaches your health record. No method of transmission or storage is perfectly secure, but we design our systems to minimize how much sensitive information is held and for how long.

Your choices and rights

You have specific rights over your medical record — including the right to access, request corrections to, and receive a copy of your information — described in detail in our Notice of Privacy Practices. For questions about website data or to make a request, contact us using the details below.

Children and minors

Zeva Care provides care to minors only through a booking completed by a parent or legal guardian, who provides and consents to the information submitted. Our website is not directed to children, and we do not knowingly collect information from a child except as part of a guardian-initiated booking for that child’s care.

Where we provide services

Zeva Care provides telehealth services only to patients physically located in Pennsylvania. Our website and booking flow are intended for Pennsylvania residents.

Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the effective date above. Material changes will be reflected on this page.

Contact us

Questions about this policy or your information? Reach our team:

Zeva Care, PLLC
15 W State Street, Suite 200 · Doylestown, PA 18901
Administrative office only — all visits are telehealth.
Monday–Friday · 9:00 AM – 5:00 PM ET