Privacy policy

Scope and roles

This policy describes how Denticore handles personal information in the Denticore website, desktop application, support channels, and related services. A clinic normally controls the patient and workforce information it enters into Denticore; Denticore processes that information to provide the service under its agreement with the clinic.

Information handled

• Account, clinic, role, authentication, and contact information.
• Signup and account-recovery mailbox verification, agreement versions and acceptance timestamps, and security rate-limit records.
• Patient and clinical records entered by authorized clinic users.
• Device registration, security, audit, update, and service-usage information.
• Support messages and information intentionally supplied with a support request.
• Optional crash diagnostics when a desktop user explicitly enables them.
• Walkthrough contact details, request receipts, and email-delivery status.

Why information is used

Information is used to authenticate users, provide and secure Denticore, synchronize authorized clinic records, prevent misuse, maintain service reliability, deliver support, and meet legal or contractual obligations. Denticore does not sell personal information.

Storage and sharing

Information may be stored on an authorized workstation and on infrastructure used to operate Denticore. It may be disclosed to vetted service providers acting on our instructions, to the clinic that controls the records, during a lawful business transfer, or when disclosure is legally required. Access is limited according to role and purpose.

Signup and account-recovery codes are sent by email. Pending delivery payloads are encrypted in the service. Stripe handles subscription checkout; the website does not collect card details. An offline clinic recovery kit stays with the clinic. Its passphrase and unwrapped data keys are not uploaded; the service retains key identifiers, verification metadata, and device-wrapped keys.

Retention and deletion

After subscription cancellation takes effect, clinic access stops and closed-clinic data is retained for 90 days to allow resubscription. At the end of that window, server records and attachments are permanently deleted; backup copies must also be removed or sanitized so deleted clinic data cannot be restored. No record export or handover service is available. Minimal deletion receipts containing a clinic identifier and deletion dates are retained to prevent restoration of deleted data. This policy does not erase files on clinic-controlled workstations. Uninstalling may preserve unsynced records and keys; it is not confirmation that workstation records have been erased. Contact support for safe device data-removal guidance.

Public verification attempts are eligible for deletion seven days after expiry. Verification delivery records older than seven days may be deleted when not processing; expired rate-limit counters are also removed. Converted clinic/account records and signup-identity receipts are not deleted by this cleanup. Converted clinic/account, billing, and agreement records are included in the closed-clinic deletion process.

Walkthrough contact details are encrypted while queued for delivery and removed from the delivery payload after successful submission to the email service. Failed deliveries remain available for support review and retry. A request reference and non-readable request fingerprint are retained to prevent duplicate submissions; support email follows the applicable retention process.

Security and choices

Denticore uses access controls, encrypted transport, local data encryption, credential-vault storage, and audit controls intended to protect information. No system can guarantee absolute security. Optional desktop crash diagnostics can be declined during setup.

Questions and rights requests

Depending on location, individuals may have rights concerning access, correction, deletion, restriction, or objection. Contact the responsible clinic first for patient or clinic-managed records. For questions about this policy, email privacy@testingapplication.online.

Changes

Material policy changes will be posted here with a revised effective date. The desktop app asks users to review a new policy version before continuing when acknowledgement is required.