Data Collected

We collect the following types of information:

• User identity information: Name, email address, company/clinic name, country, and contact details
• Uploaded dental case files: STL files, OBJ files, dental scans, and related clinical documentation
• Technical case metadata: Case specifications, material preferences, shade selections, and design instructions
• Payment information: Billing details processed through our secure payment provider (Stripe)
• Usage data: Platform interaction logs, access times, and feature usage statistics

Purpose of Processing

We process your data for the following purposes:

• To deliver digital dental CAD design services
• To communicate with you about your cases and account
• To process payments and manage billing
• To improve our services and platform functionality
• To comply with legal and regulatory requirements

Storage & Security

Data is stored in encrypted form on HIPAA-compliant cloud servers. We implement industry-standard security measures including:

• AES-256 encryption for data at rest
• TLS 1.3 encryption for data in transit
• Role-based access controls
• Multi-factor authentication options
• Regular security audits and penetration testing
• Automated backup systems with geographic redundancy

Retention Period

Data is retained only as long as necessary for service delivery or legal compliance. Specifically:

• Active case files: Retained for the duration of the case plus 7 years for regulatory compliance
• Account information: Retained while your account is active and for 3 years after closure
• Payment records: Retained for 7 years as required by tax regulations
• Audit logs: Retained for 6 years for compliance purposes

User Rights

You have the following rights regarding your personal data:

• Access: Request a copy of your personal data
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your data (subject to legal retention requirements)
• Portability: Request your data in a machine-readable format
• Objection: Object to certain types of processing
• Withdrawal: Withdraw consent where processing is based on consent

International Transfers

Your data may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place for such transfers, including:

• Standard contractual clauses approved by relevant authorities
• Data processing agreements with all service providers
• Compliance with PIPEDA, PHIPA, and HIPAA requirements as applicable

Contact Information

For privacy-related inquiries or to exercise your rights, please contact us: