Privacy Policy

1. Introduction

This Privacy Policy explains how DentAI collects, uses, discloses, and protects personal information when you visit dentai.io, create an account, purchase a subscription, communicate with us, or use the DentAI platform.

DentAI is operated by Farrukh Naseem, trading as DentAI, a sole proprietorship registered in Pakistan.

This Policy applies to information processed by DentAI. Payment information processed directly by Paddle is also subject to Paddle's own privacy notice.

2. Information We Collect

We may collect information you provide directly, including:

• name;
• business email address;
• telephone number;
• practice or business name;
• practice location;
• job title or role;
• specialties and services;
• account credentials;
• practice priorities;
• authorization and onboarding information;
• support communications; and
• other information you choose to provide.

We may also collect technical and usage information, including:

• IP address;
• browser and device type;
• operating system;
• pages visited;
• login and session information;
• application usage;
• timestamps;
• error and diagnostic logs; and
• security-related events.

3. Practice and Public Information

DentAI may collect and analyze publicly available information concerning a dental practice, including information from:

• the practice's website;
• public service pages;
• public provider or staff pages;
• public business listings;
• publicly accessible directories;
• public review platforms; and
• other public webpages relevant to an authorized assessment.

4. No Patient Records Required

DentAI does not require patient records, EMR data, EHR data, treatment records, or other patient-identifiable clinical information for its standard Service.

Customers should not submit protected health information or patient-identifiable health information unless DentAI has expressly provided an authorized feature and applicable terms allowing it.

5. Payment Information

Payments are processed by Paddle, which acts as Merchant of Record for transactions processed through Paddle.

DentAI generally does not receive your full payment-card details.

Paddle may provide us with transaction information such as:

• customer identity;
• subscription;
• product or plan;
• billing status;
• transaction identifier;
• currency;
• price;
• renewal status; and
• refund or cancellation status.

Paddle processes payment information under its own privacy notice.

6. How We Use Information

We may use information to:

• provide and operate DentAI;
• create and manage accounts;
• conduct authorized AI visibility assessments;
• identify applicable practice services and assessment context;
• provide evidence and Action Intelligence;
• process and administer subscriptions;
• communicate with customers;
• provide support;
• maintain security;
• prevent fraud and abuse;
• troubleshoot technical issues;
• improve product performance and usability;
• comply with legal obligations; and
• enforce our agreements.

7. AI Service Providers

To conduct assessments, DentAI may transmit assessment queries and relevant public business context to third-party AI service providers.

Depending on the applicable DentAI plan and technical configuration, these providers may include services supplied by:

• OpenAI;
• Perplexity;
• xAI; and
• Anthropic.

DentAI seeks to limit assessment inputs to information appropriate for the visibility task and does not require patient records for these assessments.

The availability and use of particular providers may change over time.

8. Other Service Providers

We may use service providers for functions such as:

• cloud infrastructure;
• database hosting;
• website/application hosting;
• authentication;
• security;
• analytics;
• error monitoring;
• email delivery;
• customer support;
• payment processing; and
• other operational services.

These providers may process information on our behalf under appropriate contractual or operational arrangements.

9. Legal Bases

Where applicable privacy law requires a legal basis, DentAI may process personal information because:

• it is necessary to perform a contract with you;
• it is necessary for our legitimate business interests;
• you have provided consent;
• we need to comply with a legal obligation; or
• another lawful basis applies.

The applicable legal basis may vary depending on your jurisdiction and the specific processing activity.

10. Disclosure of Information

We may disclose information:

• to service providers acting on our behalf;
• to Paddle in connection with subscriptions and transactions;
• where required by law, court order, or lawful governmental request;
• to investigate fraud, abuse, security incidents, or violations;
• in connection with a business reorganization, merger, financing, acquisition, or sale; or
• where you have authorized the disclosure.

We do not sell personal information to advertisers.

11. International Processing

DentAI operates internationally and may use service providers located in countries other than your own.

As a result, information may be processed in jurisdictions with different data-protection laws.

Where required, we will use appropriate safeguards for international transfers.

12. Data Retention

We retain information for as long as reasonably necessary to:

• provide the Service;
• maintain account and assessment history;
• fulfill contractual obligations;
• meet legal, tax, accounting, and compliance obligations;
• resolve disputes;
• protect against fraud and abuse; and
• enforce agreements.

Retention periods may differ depending on the type of information.

When information is no longer reasonably required, we may delete, anonymize, or securely archive it as appropriate.

13. Security

We use reasonable administrative, technical, and organizational safeguards designed to protect information against unauthorized access, loss, misuse, alteration, or disclosure.

No internet-based service can guarantee absolute security.

14. Cookies and Similar Technologies

DentAI may use necessary cookies or similar technologies for:

• authentication;
• security;
• preferences;
• session operation; and
• application functionality.

We may also use analytics technologies where legally permitted.

Where required by law, we will obtain consent before using non-essential cookies.

15. Your Privacy Rights

Depending on your location, you may have rights concerning your personal information, which may include the right to:

• request access;
• request correction;
• request deletion;
• object to certain processing;
• request restriction;
• obtain portable data;
• withdraw consent; or
• lodge a complaint with an applicable data-protection authority.

These rights may be subject to legal exceptions.

To submit a privacy request, contact info@dentai.io.

We may need to verify your identity before completing a request.

16. United States Privacy Rights

Residents of certain U.S. states may have additional privacy rights under applicable state laws.

Where such laws apply to DentAI, we will honor applicable rights concerning access, correction, deletion, portability, and other legally required choices.

DentAI does not sell personal information to advertisers.

17. Children

DentAI is a business service and is not directed to children.

You must be at least 18 years old, or the legal age required to enter into a binding business agreement in your jurisdiction, to purchase the Service.

18. Third-Party Websites

DentAI may contain links to third-party websites or services.

We are not responsible for the privacy practices of those independent third parties.

19. Changes to This Policy

We may update this Privacy Policy periodically.

The current version will be identified by the "Last Updated" date.

Where legally required, we will provide additional notice of material changes.