Privacy Notice

• Data controller: Godento Solutions Private Limited
• Registered office: #111, Rustum Colony, Rajbagh, Jawahar Nagar, Srinagar, Jammu & Kashmir, India - 190008
• Corporate office: Dentospace, Gold Signature #95, Mosque Road, Frazer Town, Bengaluru, Karnataka, India - 560005
• Privacy contact: dentoair@gmail.com

We act as the controller for account and usage data of clinicians who register with us. For patient photographs and case information that a clinician uploads, the clinician is the controller of that clinical record and we act as a processor on their instructions.

• Account data (name, email, password hash, authentication provider): to create and secure your account. Legal basis: performance of a contract.
• Clinic profile data (practice name, specialty, profile photo, banner, public slug, watermark text): to build and display your public profile. Legal basis: performance of a contract.
• Case content uploaded by clinicians (pre- and post-treatment photographs, treatment notes, dates, case status, patient first name or reference, patient phone number where entered): to store, edit and display cases and to send review requests. Legal basis: performance of a contract with the clinician; the clinician is responsible for obtaining patient consent.
• Patient reviews (rating, comment, display name): to publish feedback on shared cases once the clinician approves it. Legal basis: consent of the reviewer.
• Usage and technical data (page and case views, device and browser information, IP address, error logs): to keep the Service secure, prevent abuse and improve the product. Legal basis: legitimate interests.
• Support correspondence: to answer your questions. Legal basis: legitimate interests.

Card and billing details are collected and processed by our payment provider, not by us. We only receive subscription status and identifiers.

• Infrastructure and hosting providers who run our database, file storage and application hosting;
• Paddle, our Merchant of Record, for the sale of subscriptions, payment processing, subscription management, invoicing and tax compliance;
• Professional advisers such as accountants and lawyers, where necessary;
• Authorities, where disclosure is required by law or to protect our rights.

We do not sell personal data and we do not use patient images to train AI models for third parties.

Our providers may store or process data outside your country, including outside the EEA/UK. Where that happens we rely on appropriate safeguards such as standard contractual clauses or an adequacy decision.

We keep account and case data for as long as your account is active. After closure we delete or anonymise personal data within a reasonable period, except where we must keep records for legal, tax or dispute purposes. You can delete individual cases, images and reviews at any time from within the app.

We apply appropriate technical and organisational measures, including encryption in transit, access controls and row-level authorisation so that clinicians can only reach their own records. Patient photographs are held in private storage and served through short-lived signed links. No system is perfectly secure, so please use a strong, unique password.

Subject to the law that applies to you — including India's Digital Personal Data Protection Act, and the UK/EU GDPR where relevant — you may request access to your data, correction, erasure, restriction, portability, or object to processing based on legitimate interests, and withdraw consent where processing relies on it. Write to dentoair@gmail.com; we aim to respond within one month. If you are in the EEA or UK you may also complain to your supervisory authority. Patients whose images a clinician has uploaded should contact that clinician first; we will assist them as processor.

We use strictly necessary cookies and local storage to keep you signed in and to remember interface preferences. We use limited first-party analytics to count case and profile views. We do not use advertising cookies. You can clear or block cookies in your browser, though sign-in will stop working.

We will update this notice as the Service evolves and will change the "Last updated" date above when we do.