Privacy Policy

Last updated: February 2026

1. Information We Collect

We collect information you provide when creating an account, including your name, email address, phone number, and clinic details. For patients, we collect personal and medical information such as name, date of birth, medical history, treatment records, and uploaded files (imaging, lab results). We also collect usage data such as login times and feature interactions.

2. How We Use Your Information

We use your information to: (a) provide and maintain the DentistrySync platform; (b) process appointments, treatments, and payments; (c) send verification emails and important service notifications; (d) improve and optimize the Service; (e) provide customer support. We do not sell your personal information to third parties.

3. Data Isolation and Security

Each clinic's data is completely isolated from other clinics using tenant-based architecture. Only authorized clinic staff and their registered patients can access clinic-specific data. We implement encryption, secure authentication (including email verification), and regular security practices to protect your data.

4. Data Storage

Your data is stored on secure cloud servers. Uploaded files (X-rays, imaging, lab results) are stored securely and accessible only to the associated clinic and patient. We retain your data for as long as your account is active or as needed to provide the Service.

5. Third-Party Services

We use the following third-party services: (a) Google OAuth for authentication; (b) SMTP email services for verification and notifications; (c) Cloud hosting providers for data storage. These services have their own privacy policies and we encourage you to review them.

6. Cookies and Local Storage

We use browser local storage to maintain your session authentication tokens. We do not use third-party tracking cookies. Session tokens are cleared upon logout.

7. Your Rights

You have the right to: (a) access your personal data; (b) request correction of inaccurate data; (c) request deletion of your account and associated data; (d) export your data in a standard format; (e) withdraw consent for data processing. To exercise these rights, contact us at [email protected].

8. Children's Privacy

Clinic accounts may only be created by individuals 18 years or older. Patient records for minors may be created by their parent or guardian through the clinic. We do not knowingly collect information from children without parental consent.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered users of significant changes via email. The updated policy will be posted on this page with a revised date.

10. Contact

For questions about this Privacy Policy, please contact us at [email protected].