Privacy Policy

This policy describes how Dental Kits Ltd, operating as Dentography (“Dentography,” “we”) collects, uses, and protects information — including patient images uploaded by dental professionals using our services.

1. Who we are

Dentography is a software service that generates photorealistic dental mockups and related media on behalf of licensed dental professionals. When a dentist uses our platform, they act as the “Covered Entity” (under HIPAA) or “Data Controller” (under GDPR) for their patients' data. Dentography acts as their “Business Associate” and “Data Processor” respectively.

2. What we collect

We collect three categories of information:

• Account data — your name, work email, credentials, practice name, billing information, and password (hashed).
• Usage data — pages you visit, tools you use, credits consumed, timestamps, IP address, browser and device metadata.
• Uploaded content — the images, videos, and text prompts you submit to our generation tools, plus the outputs we return to you.

3. Patient photos

Photos of patients are the most sensitive category of information you upload to Dentography. We treat them with the strictest possible controls:

• Patient photos are transmitted over TLS 1.3 and stored encrypted with AES-256.
• Patient photos are processed in-memory only during the generation window. They are not persisted on our GPU compute nodes.
• We never use patient photos to train our AI models unless you have explicitly opted in in writing.
• You can delete any generation — and the source image behind it — from your Gallery at any time. Deletions are irreversible and complete within 24 hours.

Your responsibility

You must obtain informed, written patient consent before uploading a patient photograph to Dentography. Consent templates are available inside your dashboard in 12 languages.

4. How we use data

We use your data to: (a) provide and improve the service, (b) process payments, (c) send transactional email (receipts, security notices, product updates you've opted into), and (d) satisfy legal obligations. We do not sell your data. We do not use patient photos for any purpose other than generating the requested output.

5. Sharing & sub-processors

We rely on a small set of vetted sub-processors to run the service. All are bound by written Data Processing Agreements and have security controls at least as strong as ours.

• Supabase — authentication, database, and metadata storage
• Stripe — payment processing (globally distributed)
• Third-party AI inference infrastructure — image and video model processing

6. Retention & deletion

Generation outputs are retained in your Gallery until you delete them or close your account. Source patient uploads are purged from processing infrastructure within one hour of generation. Account and billing records are retained for seven years after account closure to satisfy tax and regulatory obligations, then permanently deleted.

7. Security

We operate a defense-in-depth security program including annual third-party penetration testing, quarterly SOC 2 controls review, hardware-key MFA for all engineering staff, encrypted-at-rest data stores, per-tenant network isolation, and a documented incident response plan with a 24-hour breach notification commitment.

8. HIPAA alignment

Dentography is designed to be a HIPAA-compliant Business Associate. If your practice is a Covered Entity, we will execute a Business Associate Agreement (BAA) with you at no additional cost on any paid plan. Contact privacy@dentography.io to request a BAA.

9. Your rights

Depending on your jurisdiction, you may have the right to access, correct, port, or delete your personal data, to withdraw consent, and to lodge a complaint with a supervisory authority. To exercise any of these rights, contact privacy@dentography.io and we'll respond within 30 days.

10. Contact

Data Protection Officer: privacy@dentography.io
Dental Kits Ltd, operating as Dentography · United Kingdom
For urgent security matters: security@dentography.io

Read our Terms of Service for additional details on your rights and responsibilities.