Privacy Policy

This policy explains how DentaSaaS ("we", "us") handles personal data when you visit our website or use our dental clinic management service. In this policy, a "clinic" means a dental clinic or practitioner that uses DentaSaaS.

Two roles: clinic data and our own data

Patient and clinical data entered by a clinic. A clinic decides what patient information to record and why. For that information the clinic is responsible for its lawful use, and we act as a service provider that stores and processes it on the clinic's behalf and only to provide the service. If you are a patient and want to see, correct or delete your records, please contact your clinic.

Information about clinic users and website visitors. For the details of the people who sign in to DentaSaaS or contact us, we decide how the data is used, and this policy applies to us directly.

Information we collect

• Account and clinic details: name, email address, phone number, clinic name, address, GSTIN, logo, language and theme preferences, and your login credentials (passwords are stored hashed, not in plain text).
• Requests and messages: what you submit through the request-access form or send us on WhatsApp, phone or email.
• Patient and clinical information entered by clinics: for example patient names, phone numbers, email addresses, dates of birth, gender, blood group, addresses, allergies and notes, together with appointments, treatment plans, prescriptions and invoices.
• Technical information: IP address, browser and device type, pages requested and timestamps, recorded in server logs for security and troubleshooting.

Cookies and similar technologies

We use essential cookies to keep you signed in and to protect forms against forgery. We store your light or dark theme choice in your browser's local storage. If website analytics are switched on, we use Google Analytics with IP anonymisation to understand which pages are useful. We do not use advertising cookies.

How we use information

• to create and run clinic accounts and provide the service;
• to give support, including sending login details and service notices such as plan expiry;
• to keep the service secure and to prevent misuse;
• to understand and improve how the website and product are used; and
• to meet legal obligations.

We do not sell personal data, and we do not use patient data for marketing.

Support access to your account

Our administrators can open a clinic's account to help with a support request. While they do, the account shows a visible banner. This access is used only to provide support.

Who we share information with

We share information only with service providers that help us run the service, such as our hosting provider and our email delivery provider, and with analytics tools if they are enabled. They may process data only for those purposes. We may also disclose information where the law requires it, or to protect our rights and users, and in connection with a sale or transfer of our business. We do not share patient data with third parties for their own purposes.

Where data is stored

Data is stored on servers operated by our hosting provider. Depending on the provider's infrastructure, data may be processed in data centres outside India.

How long we keep data

We keep clinic data for as long as the clinic's account is active. If you close your account or ask us to delete your data, we will delete it, except where we must keep some information to meet legal obligations or resolve disputes. Encrypted or routine backups may persist for a limited period before they are overwritten. Server logs are kept for a limited time.

Security

We use individual staff accounts, hashed passwords, separation of each clinic's data from every other clinic's, and encrypted connections (HTTPS). No system is perfectly secure, so clinics should also use strong, unique passwords, remove access for staff who leave, and keep their own devices secure.

Your rights

Under applicable law, including the Digital Personal Data Protection Act, 2023, you may have rights to know what personal data we hold about you, to have it corrected or erased, to withdraw consent, and to raise a grievance. To exercise these rights for the data we hold about you as a clinic user or visitor, contact us using the details below. Patients should contact their clinic for their medical and billing records.

Children

DentaSaaS is intended for dental clinics and their staff, not for children. Clinics may record information about minor patients and are responsible for obtaining any consent required for it.

Changes to this policy

We may update this policy from time to time. The date at the top shows when it was last changed, and significant changes will be highlighted on our website.

Contact

Questions about this page? Reach DentaSaaS on WhatsApp or phone at +91 84880 55253 or by email at info@dentasaas.in.