1. Introduction
Odento Infolabs Pvt Ltd ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our dental practice management platform and related services.
By using Odento, you consent to the data practices described in this policy. If you do not agree with this policy, please do not use our services.
2. Information We Collect
2.1 Information You Provide
We collect information that you voluntarily provide:
- Account Information: Name, email address, phone number, professional details
- Profile Information: Dental registration number, specialization, clinic details
- Patient Data: Patient records, treatment history, appointment information
- Payment Information: Billing address, payment method details (processed by secure payment gateways)
- Communication Data: Messages, support tickets, feedback
- Content: Photos, videos, documents you upload to the platform
2.2 Information Collected Automatically
When you use our services, we automatically collect:
- Device Information: IP address, browser type, operating system, device identifiers
- Usage Data: Pages visited, features used, time spent, click patterns
- Location Data: Approximate location based on IP address
- Cookies and Tracking: Session cookies, analytics cookies, preference cookies
- Log Data: Access times, error logs, system activity
2.3 Information from Third Parties
- Social media authentication (Google, Facebook, LinkedIn)
- Payment gateway providers (Razorpay, PayU)
- Analytics providers (Google Analytics, Mixpanel)
- Communication platforms (WhatsApp Business API, Twilio)
3. How We Use Your Information
We use collected information for:
3.1 Service Delivery
- Provide and maintain our platform services
- Process appointments and patient records
- Facilitate communication between dentists and patients
- Enable lab orders and inventory management
- Process payments and generate invoices
3.2 Communication
- Send appointment reminders via SMS, WhatsApp, and email
- Provide customer support and respond to inquiries
- Send service updates and important notifications
- Deliver marketing communications (with your consent)
3.3 Platform Improvement
- Analyze usage patterns to improve features
- Develop new products and services
- Personalize user experience
- Conduct research and analytics
3.4 Security and Compliance
- Detect and prevent fraud and abuse
- Ensure platform security and integrity
- Comply with legal obligations
- Enforce our terms of service
4. Data Sharing and Disclosure
4.1 We Share Information With:
- Service Providers: Cloud hosting, payment processing, SMS/email delivery
- Dental Labs: Order details for lab work fulfillment
- Healthcare Partners: With explicit consent for referrals
- Analytics Partners: Aggregated, anonymized data for insights
- Legal Authorities: When required by law or to protect rights
4.2 We Do Not:
- Sell your personal information to third parties
- Share patient medical records without authorization
- Use your data for purposes other than stated in this policy
- Disclose sensitive health information without consent
5. Data Security
We implement industry-standard security measures to protect your data:
- Encryption: TLS/SSL encryption for data in transit, AES-256 for data at rest
- Access Controls: Role-based access, multi-factor authentication
- Infrastructure: Secure cloud hosting on AWS/Google Cloud
- Monitoring: 24/7 security monitoring and threat detection
- Backups: Regular automated backups with disaster recovery
- Compliance: ISO 27001, HIPAA-equivalent standards
- Audits: Regular security audits and penetration testing
6. Data Retention
We retain your information for as long as necessary:
- Active Accounts: Data retained while account is active
- Patient Records: Retained as per Indian medical record laws (minimum 3 years)
- Financial Data: Retained for 7 years as per tax regulations
- Marketing Data: Retained until you opt out
- Deleted Accounts: Data deleted within 90 days after account closure
7. Your Rights and Choices
You have the right to:
- Access: Request a copy of your personal data
- Correction: Update or correct inaccurate information
- Deletion: Request deletion of your data (subject to legal obligations)
- Portability: Export your data in a structured format
- Objection: Object to processing of your data for marketing
- Restriction: Request restriction of data processing
- Withdrawal: Withdraw consent at any time
To Exercise Your Rights:
Email us at privacy@odento.com with your request. We will respond within 30 days.
8. Cookies and Tracking Technologies
We use cookies for:
- Essential Cookies: Required for platform functionality (cannot be disabled)
- Functional Cookies: Remember your preferences and settings
- Analytics Cookies: Understand how you use our platform
- Marketing Cookies: Deliver personalized advertisements
You can manage cookie preferences through our Cookie Settings (available in the footer) or your browser settings.
9. Children's Privacy
Our services are not intended for children under 18. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.
10. International Data Transfers
Your data is primarily stored in India. If we transfer data internationally, we ensure:
- Adequate data protection measures are in place
- Standard contractual clauses are executed
- Compliance with applicable data protection laws
11. Changes to Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes via email or prominent notice on our platform. Continued use after changes constitutes acceptance of the updated policy.
12. Contact Us
For privacy-related questions or to exercise your rights:
Data Protection Officer
Email: privacy@odento.com
Email (DPO): dpo@odento.com
Phone: +91-XXXXXXXXXX
Mailing Address:
Odento Infolabs Pvt Ltd
Bangalore, Karnataka, India
Your Privacy Matters: We are committed to transparency and protecting your data. If you have concerns about how your information is handled, please don't hesitate to contact us.