Privacy Policy

President Email: privacy@denticom.app

Contact this person for any question, request or complaint about your personal information.

Denticom is a coordination tool used by dental clinics.

• User accounts (clinic staff): we are responsible for this information.
• Patient names and staff names shown on the board: this information is entered by the clinic, which remains responsible for it. We act as a service provider on the clinic’s behalf, only to provide the service, in accordance with section 18.3 of Quebec’s Act respecting the protection of personal information in the private sector.

• User account: email address, name, role and clinic name.
• Staff names: names entered by the clinic in the settings to be displayed on the board, along with their working days if they are on the schedule.
• Patient names (optional feature): only the name entered in the arrivals queue. The queue is used only if the clinic chooses “Next available room” mode; in “Pre-assigned rooms” mode (the default), no patient names are entered. The clinic may also enter only a first name or initials.
• Board statuses: room and staff statuses (no patient information).
• Technical performance data: anonymous page-performance data (see section 7).

No health information may be entered in Denticom. Only the patient’s name may be entered in the queue — never the reason for the visit, the treatment, or any other information.

Only to provide the Denticom service: tracking room statuses, displaying staff, coordinating patient arrivals, managing accounts (including password resets) and keeping the service running properly.

We do not sell, rent or monetize any personal information. We do not use advertising.

• Patient names: permanently deleted from the database as soon as the patient is taken to a room. As a safeguard, any name not removed is automatically deleted no later than 31 days after it was added.
• Board statuses: automatically deleted after 14 days.
• Accounts and clinic settings: kept while the account is active, then deleted as described in section 10.
• Backups: automatic database backups may retain deleted data for up to 7 days, after which it is erased.

Data is hosted by Supabase in the Canada (Central), Montreal region. It is encrypted in transit and at rest. Each clinic is isolated: only a clinic’s authenticated users can access that clinic’s data, enforced by row-level security policies.

These providers use the information only to provide their services. If information is processed outside Quebec, we first assess that it will receive adequate protection there.

Denticom stores login tokens, your preferences (language, sound, display) and, if you check “Stay signed in on this device”, your email address to make signing in easier, in your browser’s local storage. This data is strictly functional. We use no advertising or analytics cookies and no third-party trackers. Vercel Speed Insights measures page performance anonymously, without cookies.

You may at any time:

• access the personal information we hold about you;
• request that it be corrected;
• withdraw your consent;
• request deletion of your account;
• obtain your information in a structured, commonly used technological format (portability).

Write to the person in charge (section 1). We respond within 30 days. If a request concerns a patient name, we will forward it to the clinic concerned, which is responsible for it.

You may also file a complaint with the Commission d’accès à l’information du Québec: www.cai.gouv.qc.ca.

You may request deletion of your account and all of your clinic’s data by writing to the person in charge (section 1). Data is deleted within 30 days, subject to the backup period (section 5).

In the event of a confidentiality incident (unauthorized access, use or disclosure, or loss), we promptly take steps to reduce its consequences, notify the affected clinics without delay and, if it presents a risk of serious injury, notify the Commission d’accès à l’information and the individuals concerned. We keep a register of incidents.

For any material change, we will notify clinics by email at least 30 days before it takes effect. The last-updated date appears at the top of this document.