Privacy Policy

At Dentasys, accessible from dentasys.es, one of our main priorities is the privacy of our visitors. This Privacy Policy document contains types of information that is collected and recorded by Dentasys and how we use it.

1. Information we collect

We collect the information that you provide directly to us when you register on our platform, update your profile, or use our services. This may include your name, email address, phone number, clinic name, and billing details.

2. How we use your information

We use the collected information to:

• Provide, operate, and maintain our platform.
• Improve, personalize, and expand our services.
• Understand and analyze how you use our website.
• Develop new products, services, features, and functionality.
• Communicate with you, either directly or through one of our partners, including for customer service, to provide you with updates and other information relating to the website, and for marketing and promotional purposes.

3. Your clinic's patient data

When a clinic uses Dentasys, its patients' data (records, medical histories, appointments, documents, treatment plans and invoices) belongs to the clinic. The clinic is the data controller and Dentasys acts as processor: we only process that data to provide the service and on the clinic's instructions, under the Article 28 GDPR data processing agreement signed on subscription.

This data is hosted in the European Union, encrypted, in a separate database for each clinic. We do not sell it or use it for advertising or to train artificial intelligence models. Patients who wish to exercise their rights should contact their clinic.

4. Notifications and WhatsApp API

Dentasys uses the official WhatsApp Business API to send automated notifications related to your appointments and treatments.

By providing your mobile phone number, you consent to receive transactional messages (appointment confirmations, reminders, change notices) via WhatsApp. These messages are automatically generated by our system to improve the efficiency of your clinic management and reduce absenteeism.

We do not use your phone number to send unsolicited advertising (SPAM) via WhatsApp nor do we share your number with third parties for commercial purposes unrelated to the service provision.

5. Instagram and Facebook (Dentasys Marketing)

If a clinic connects its Facebook Page and its Instagram professional account in Dentasys (Marketing → Accounts), Meta gives us access, with the clinic's express permission, to:

• The name, picture and follower count of the Page and the Instagram account.
• Account and post statistics (reach, views, interactions, like and comment counts) for the metrics dashboard.
• Publishing on the clinic's behalf the photos and texts that the clinic itself prepares or approves in Dentasys. With managed Marketing, those prepared by the Dentasys team that the clinic approves, or that are deemed approved if it does not review them within the period agreed in its contract.
• The clinic's ad account, if connected, only to read its results.

Meta access tokens are stored encrypted and only used by the clinic's server; they are never sent to the browser or to third parties. We do not sell or share this data, and we never send patient data to Meta: no patient lists, phone numbers or treatment information.

The clinic can withdraw access at any time with "Disconnect" in Marketing → Accounts (tokens are deleted immediately) or by removing the integration in its Meta business settings. See also the data deletion page.

6. Google Business Profile (Dentasys Marketing)

If a clinic connects its Google Business Profile to Dentasys (Marketing → Accounts), Google gives us access, with the express permission of the person who manages the profile, to:

• The profile details: name, address, hours, phone, website, description and categories, to display them and update them when the clinic asks.
• The profile's reviews (reviewer's public name and photo, stars, text and date), to display them and post the replies the clinic writes or approves.
• Posting, on the clinic's behalf, the updates and photos the clinic itself prepares or approves in Dentasys. With managed Marketing, those prepared by the Dentasys team that the clinic approves, or that are deemed approved if it does not review them within the period agreed in its contract.
• The profile's performance metrics (calls, website clicks, direction requests and impressions), for the dashboard and the monthly report.

The Google access token is stored encrypted and is only used by our servers; it is never sent to the browser or to third parties. We do not store the text or the name of reviews, only their rating, date and whether they have a reply. If the clinic asks for an AI reply draft, the review text (without the name) is processed by Google's AI model and is not stored. We do not sell or share this data, we do not use it for advertising or to train models, and we never send patient data to Google. Dentasys's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

The clinic can revoke access at any time with "Disconnect" in Marketing → Accounts (the token and the ratings summary are deleted immediately) or from "Security → Third-party apps & services" in its Google Account. See also the data deletion page.

7. Data Security

Data is hosted in the European Union (AWS, Paris region), encrypted in transit and at rest, with daily backups and access logging. See the Security page for details.

8. Dentasys app for iPhone and iPad

The Dentasys app for iPhone and iPad is for the clinic team: it shows the same data as the clinic's web app and handles it in the same way, with each user's same permissions. It is not an app for patients.

• Your session is stored encrypted in the device keychain and deleted when you sign out. The clinic address is stored on the device itself until you choose “Change clinic”.
• Face ID, Touch ID or the device passcode are checked by the device's operating system. Dentasys never receives or stores your face, fingerprint or passcode: it only learns whether the check succeeded.
• The camera, microphone and photos are only used when you ask for it (taking a clinical photo, recording a voice message or attaching an image), and what you capture is saved to the clinic's records and nowhere else.
• The app has no advertising and no third-party analytics or tracking tools, and it does not share data with advertisers or other apps.

Clinic data shown in the app is hosted as explained in sections 3 and 7. To stop using it, just sign out and delete it; the clinic can remove any user's access from Settings.

9. Cookies

This website only uses analytics cookies (Google Analytics, by Google Ireland Ltd.) if you accept them in the cookie notice. They tell us which pages and buttons are used and how many people book a demo; they are not used for advertising. If you reject them or don't choose, nothing from Google Analytics is loaded. You can change your choice at any time under “Cookie preferences” at the bottom of every page. Your choice is stored in your browser.

10. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. Thus, we advise you to review this page periodically for any changes. We will notify you of any changes by posting the new Privacy Policy on this page.

11. Contact Us

If you have any questions or suggestions about our Privacy Policy, do not hesitate to contact us.