Privacy policy
Last updated: 8 November 2026
DentArc (dentarc.app, "the service") is a practice-management application for dental and orthodontic clinics. It is operated by [Operator legal name], [operator address] ("we"). Each clinic that uses it ("the clinic") decides what it records about its patients; for that data the clinic is the controller and we process it on the clinic's behalf.
What we hold
- Clinic staff accounts: user names, password hashes, roles, and sign-in times.
- Patient records the clinic enters: names, phone numbers, appointments, treatment, payments, photos, X-rays and documents.
- WhatsApp messages: when a clinic connects its WhatsApp Business number, the messages it sends and receives through the WhatsApp Business Platform (Cloud API), their delivery status, the names and numbers of the people it talks to, and the attachments they send. If the clinic keeps using the WhatsApp Business app on its phone (coexistence), its chat history and contacts from that app are copied once when it connects, and messages sent from the app afterwards are recorded too.
- Technical logs: request logs and error reports, kept for a short time to run and secure the service.
How we use it
Only to provide the service to the clinic: showing its records to its staff, sending the appointment reminders and messages the clinic asks for, and keeping the service secure and working. We do not sell data, do not use it for advertising, and do not share it except with the providers that host the service (database, file storage, hosting) and with Meta, for the WhatsApp messages the clinic sends and receives.
Where and how it is kept
Each clinic's records are kept in a database of its own, separate from every other clinic's. Files are kept in private storage reached only by short-lived signed links. The clinic's WhatsApp access token is stored encrypted. Connections are encrypted (HTTPS).
How long
For as long as the clinic uses the service. When a clinic leaves, its data is exported to it on request and then deleted.
Your rights
Patients should contact their clinic first: it holds their record and can correct or delete it. You can also ask us to delete data; see data deletion.
Contact
[Contact email address] · [Operator legal name], [operator address]