Privacy Policy

Dento365 (“Dento365”, “we”, “us”) is a dental clinic management platform operated by Schneide, built for dental clinics in India. This policy explains what data we collect, why, how it's protected, and the rights you and your patients have over it.

Dento365 is used by dental clinics (“Customers”) to manage their own patients' clinical and billing records. For that patient data, the clinic is the data controller and Dento365 acts as a data processor on the clinic's behalf. This policy covers both: how we handle a clinic's own account data, and how we handle patient data on a clinic's behalf.

1. What we collect

From clinics and their staff, when they sign up and use Dento365:

• Account details — clinic name, owner/staff name, email, phone number, billing address
• Usage data — login activity, feature usage, device and browser information, IP address
• Payment information for subscription billing, processed by our payment gateway partner (we do not store full card numbers)

On behalf of clinics, as part of the clinical record-keeping the software provides:

• Patient demographics — name, contact details, date of birth
• Clinical records — dental charting, treatment history, prescriptions, consent forms, uploaded documents (e.g. X-rays, lab reports)
• Billing records — invoices, payments, outstanding balances
• Communication logs — WhatsApp/SMS recall and reminder delivery records

2. How we use it

• To provide, operate, and maintain the Dento365 platform for the clinics that use it
• To send appointment reminders and recall messages on a clinic's behalf, via WhatsApp or SMS, to that clinic's own patients
• To process subscription billing and send related notices
• To provide customer support and respond to enquiries
• To improve the product — we may use aggregated, de-identified usage patterns to guide what we build next; we do not use identifiable patient data for this
• To meet legal, regulatory, or contractual obligations

We do not sell clinic or patient data, and we do not use patient clinical data for advertising.

3. Where data is stored

Dento365 is hosted in India (Mumbai region). Patient and clinic data is stored on infrastructure located within India, in line with data-localisation expectations for healthcare-adjacent platforms operating under India's Digital Personal Data Protection Act, 2023 (DPDP Act).

4. Data protection under the DPDP Act

Consistent with the DPDP Act, we aim to:

• Collect only the data reasonably necessary to provide the service
• Process patient data strictly on the instructions of the clinic that owns the record
• Apply reasonable technical and organisational safeguards — encryption in transit, access controls, and role-based permissions within the software itself — to protect data against unauthorised access, alteration, or loss
• Retain data only as long as the clinic's account is active, or as required by applicable law, and support a clinic's request to export or delete its data on account closure
• Notify affected clinics without undue delay in the event of a data breach affecting their data, as required by law

A patient wishing to exercise a right over their own data (such as access or correction) should contact the dental clinic where they are a patient directly, since the clinic is the data controller for that record. We support clinics in fulfilling those requests.

5. Who we share data with

• Infrastructure and hosting providers, under contractual data-protection terms
• WhatsApp Business API / SMS gateway providers, solely to deliver messages a clinic has configured (e.g. appointment reminders, recalls)
• Payment processors, for subscription billing
• Where required by law, regulation, or a valid legal request

We do not share patient data across clinics, and we do not share it with advertisers.

6. Cookies and analytics

The Dento365 marketing website (dento365.in) uses standard analytics (such as Google Analytics) to understand site traffic and improve our content. The Dento365 application itself uses only the cookies necessary for you to stay logged in and for the product to function.

7. Data retention and deletion

We retain clinic and patient data for as long as a clinic's account remains active, so the software can continue to serve accurate clinical and billing history. When a clinic closes its account, we retain data only as required by applicable law (for example, medical record-keeping requirements) and otherwise delete or anonymise it within a reasonable period. Clinics can request an export of their data at any time by contacting us.

8. Changes to this policy

We may update this policy from time to time as the product, our infrastructure, or applicable law changes. We'll update the “Last updated” date above, and where a change is material, we'll notify clinic accounts directly.

9. Contact us

Questions about this policy, or a request relating to your data, can be sent to hello@dento365.in.