Privacy Policy

DentiSoft is a clinic management platform for dental practices in India. This policy explains what data we collect, why we collect it, and what control you have over it. It covers dentisoft.in, app.dentisoft.in, and the notifications we send on a clinic's behalf.

Clinic account data. The name, email address, phone number, and clinic details you provide when you register, plus a hashed password. We never store passwords in readable form.

Patient records. Information a clinic enters about its patients — name, phone number, optional email, age, gender, appointment history, treatment records, billing entries, and any notes the clinic adds. This data is entered by the clinic, not collected by us directly from patients.

Technical data. Server logs, IP addresses, and request metadata generated when you use the service, retained for security and debugging.

We do not use tracking cookies for advertising, and we do not sell any data.

To operate the service: authenticate users, store and display clinic records, send appointment notifications, and keep each clinic's data isolated from every other clinic's. We also use aggregate, non-identifying usage data to improve the product.

We do not use patient data to train machine learning models, and we do not share it with other clinics on the platform.

When a clinic books, cancels, or has an upcoming appointment, DentiSoft sends the patient a notification by email and, where a mobile number is on file, by WhatsApp. These are transactional messages about that patient's own appointment — we do not send marketing or promotional messages over WhatsApp.

WhatsApp messages are sent from a single DentiSoft-operated number using the WhatsApp Business Platform, and deliberately contain no clinical information: no diagnoses, no prescriptions, and no treatment details. They carry only the clinic name, appointment date and time, and a contact number.

A patient can stop WhatsApp notifications at any time by replying STOP to the message, or by asking their clinic to switch them off. Either action takes effect immediately and across every clinic using the platform.

We rely on a small number of infrastructure providers, each of which processes data only to deliver their part of the service:

• Vercel — application hosting
• Neon — database hosting
• Upstash — rate limiting
• Resend — transactional email delivery
• Meta Platforms — WhatsApp message delivery
• ImageKit — image storage and delivery

For patient records, the clinic is the data fiduciary and DentiSoft is a data processor acting on the clinic's instructions. Clinics are responsible for having a lawful basis to enter patient information and for the accuracy of what they record. For clinic account data, DentiSoft is the data fiduciary.

We retain clinic and patient data for as long as the clinic's account is active. Notification delivery logs are retained so clinics can confirm what was sent. Server logs are retained for a limited period for security purposes.

A clinic can delete individual patient records from within the app at any time. To delete an entire account and all associated data, email [email protected] from the address registered to the account. We will confirm the request and erase the data within 30 days, except where we are required by law to retain it.

Patients who want their record removed should contact their clinic, which controls that record. If you cannot reach the clinic, write to us and we will pass the request on.

Data is transmitted over TLS and stored in managed, access-controlled databases. Passwords are hashed. Every database query is scoped to a single clinic so one clinic cannot read another's records. No system is perfectly secure, but we treat clinical data as sensitive and design accordingly.

Under India's Digital Personal Data Protection Act, 2023, you may request access to the personal data we hold about you, ask for corrections, request erasure, and withdraw consent. Write to [email protected] and we will respond within a reasonable period.

If we change this policy materially, we will update the date at the top of this page and notify account holders by email.

Questions about privacy or this policy: [email protected].