Privacy Policy

Effective Date: [{{EFFECTIVE_DATE}}]

Version: 1.0

1. Introduction

[{{LEGAL_BUSINESS_NAME}}] ("we", "us", "our") provides the Smart Dental Desk platform. This Privacy Policy describes how we process data on behalf of dental clinics and how we handle clinic account data.

2. Clinic Responsibility for Patient Data

For patient information entered by clinics (including appointments, treatment notes, prescriptions, uploaded files, X-rays, and billing metadata), the clinic is the primary data controller. Smart Dental Desk acts as a service provider processing this data strictly on behalf of the clinic. Clinics are responsible for ensuring lawful collection and providing necessary privacy notices to their patients.

3. Data We Collect and Process

• Clinic Account Data: Registration details, billing information, and support communications.
• Staff Data: Names, roles, and login credentials of clinic staff.
• Patient Data: Information entered into the platform by clinics.
• Usage & Security Logs: IP addresses, browser types, and access logs used for security monitoring.
• AI Processing: Patient data may be processed via AI features. Output is assistive and must be reviewed.

4. Purposes of Processing

We process data to provide, secure, and maintain the platform, process payments, and provide technical support.

5. Third-Party Providers and Subprocessors

We use third-party providers to deliver our services. These include: [{{DATA_SUBPROCESSORS}}] and [{{PAYMENT_PROVIDER_DETAILS}}].

6. Security Safeguards

Smart Dental Desk uses access controls, secure transport, authentication safeguards, and infrastructure security features provided by its service providers. Clinics remain responsible for configuring access correctly and complying with applicable laws and professional obligations.

7. Retention and Deletion

Data is retained as long as the clinic's account is active. Clinics may request data export or deletion. Upon verified request, data will be deleted in accordance with our retention policies, subject to legal obligations.

8. Cookies and Analytics

We use essential cookies and local storage necessary for authentication and session management. We do not use non-essential tracking cookies.

9. International Transfers

Data may be stored and processed outside of your jurisdiction by our subprocessors. We ensure appropriate safeguards are in place.

10. Children's Data

Our platform is not directed to children. Clinics are responsible for obtaining parental consent when entering data about minors.

11. Incident Communication

In the event of a security breach involving personal data, we will notify affected clinics as required by applicable law.

12. Contact and Complaints

For privacy inquiries, contact us at: [{{PRIVACY_EMAIL}}] or [{{GRIEVANCE_EMAIL}}].

Registered Address: [{{REGISTERED_ADDRESS}}]