Privacy Policy

Dentostack ("Dentostack", "we", "us", "our") provides software tools for dental clinics including patient management, communication, and practice operations through our website and mobile applications (collectively, the "Services").

This Privacy Policy explains how we collect, use, process, store, and protect personal data in accordance with applicable laws including the Digital Personal Data Protection Act, 2023.

By using the Services, you agree to this Privacy Policy.

---

1. Scope and Roles

1.1 Clinics as Data Controllers

Dental clinics using Dentostack control patient data uploaded or entered into the platform. Clinics are responsible for obtaining necessary patient consents and complying with applicable healthcare regulations.

1.2 Dentostack as Data Processor

Dentostack processes patient data only on behalf of clinics to provide the Services and does not use such data for independent purposes unless instructed or permitted.

---

2. Data We Collect

2.1 Account Information

• Name
• Email address
• Phone number
• Clinic details
• Login credentials

2.2 Clinic Operational Data

• Appointment information
• Treatment records
• Notes
• Billing information
• Communication logs

2.3 Patient Data (Processed on behalf of clinics)

• Patient identifiers
• Contact details
• Medical or dental history
• Treatment records
• Images or documents uploaded by clinics

Dentostack processes this data solely to provide the Services.

---

3. Mobile Application Data

Our mobile app:

• Uses device identifiers to enable push notifications
• Sends service notifications and alerts
• Stores settings locally on device storage
• Records crash logs and application logs for troubleshooting
• Uses network connectivity but does not collect network usage data
• Does not access phonebook, messages, or call logs

---

4. How We Use Data

We use personal data to:

• Provide and operate the Services
• Authenticate users
• Enable clinic workflows
• Provide customer support
• Improve product functionality
• Send service communications
• Maintain security and audit logs
• Process payments
• Investigate incidents

If Dentostack plans to use clinic or patient data for any new purpose, we will seek permission from the clinic.

---

5. Legal Basis for Processing

Under applicable law, processing is based on:

• Consent provided by users or clinics
• Legitimate uses necessary to deliver the Services
• Compliance with legal obligations

---

6. Data Retention

Patient and clinic data are stored while the subscription remains active. After account termination, data is retained for up to three (3) months and then permanently deleted unless legally required otherwise.

---

7. Data Sharing and Third Parties

We share data only as necessary with service providers:

• Payment processing — PhonePe
• Cloud hosting — DigitalOcean (India data center)
• Push notifications — Google Firebase
• Email delivery — Mailjet
• Messaging providers (SMS or WhatsApp as configured by clinic)

Some processing may occur internationally depending on vendor infrastructure. We require vendors to maintain appropriate security safeguards.

---

8. Security Measures

We implement reasonable security controls including:

• Encryption in transit using SSL/TLS
• Encryption at rest
• Access controls managed by clinics
• Audit logging of communications
• Monitoring and incident investigation procedures
• Hosting in data centers located within India

---

9. Data Breach Notification

In the event of a data breach affecting personal data, we will notify affected users and clinics in accordance with applicable laws.

---

10. User Rights

Subject to applicable law, users may:

• Request access to personal data
• Request correction or deletion
• Withdraw consent where applicable
• Raise grievances

Requests may be submitted using contact details below.

---

11. Children's Data

Dentostack does not knowingly collect personal data directly from children. Clinics are responsible for managing patient consent where minors are involved.

---

12. Cookies and Usage Data

We may use cookies or similar technologies to:

• Maintain sessions
• Improve performance
• Analyze usage patterns

---

13. Changes to This Policy

We may update this Privacy Policy periodically. Updates will be posted on our website or communicated through the Services.

---

14. Contact and Grievance Redressal

Phone: +91-9422799260
Email: care@dentostack.com

Dentostack
FESI Technology LLP
Unit 101, Oxford Towers, 139 HAL Old Airport Road
Domlur, Bengaluru, Karnataka 560008
India