DentoSol – Privacy Policy
Operated by DentAssure Health Plans Private Limited
1. About DentoSol and DentAssure
DentoSol ("Platform", "Application", "we", "us", or "our") is a dental practice management application developed and operated by DentAssure Health Plans Private Limited.
DentoSol provides digital solutions for dental clinics, including patient dental records management, FDI dental charting, treatment records, appointment management, and other dental practice management services.
DentoSol is a product and digital platform of DentAssure Health Plans Private Limited. References to "DentoSol" shall include the platform and its operating entity, DentAssure Health Plans Private Limited, wherever applicable.
Company Details:
2. Protected Health Information (PHI) and Health Data Privacy
DentoSol is designed to help dental clinics securely manage dental records and related information. Information managed through the platform may include patient dental case histories, FDI dental charts, intraoral scanner STL files, diagnostic records, and treatment records.
DentAssure Health Plans Private Limited is committed to protecting personal information and health-related data in accordance with applicable data protection and privacy laws.
Any references to HIPAA or other international privacy standards shall apply only to the extent that the platform and relevant processing activities are subject to those requirements and the applicable compliance obligations have been met.
3. Data Encryption and Security
DentoSol implements appropriate technical and organizational security measures to protect information against unauthorized access, disclosure, alteration, or loss.
Security measures may include encryption in transit and at rest, secure infrastructure, access restrictions, and other safeguards appropriate to the nature of the information processed.
Specific encryption standards and infrastructure configurations shall be described accurately based on the security controls implemented in the production environment.
4. Role-Based Access Control (RBAC)
Access to dental records and related information is controlled through role-based permissions and authorized user access.
Depending on their assigned roles and permissions, clinic personnel may have access to appointment information, queue statuses, patient records, dental charts, treatment histories, and other relevant platform features.
Users and participating clinics are responsible for maintaining the confidentiality of their login credentials and ensuring that access is granted only to authorized personnel.
5. Data Protection and Privacy Responsibilities
DentAssure Health Plans Private Limited takes reasonable steps to protect personal information processed through DentoSol. The collection, use, storage, disclosure, and retention of information are governed by this Privacy Policy and applicable legal requirements.
Where applicable, dental clinics and other authorized users are responsible for ensuring that they have the necessary legal basis, permissions, and authorizations to upload and process personal and health-related information through the platform.
6. User Rights: Account Deletion and Right to Data Erasure
DentoSol respects your fundamental right to privacy, data sovereignty, and control over your personal data. We provide clear, transparent, and direct mechanisms for all end users—including Dental Clinics (Clinic Admins), Dental Organizations, Patients, and Dental Laboratory Managers—to request the complete deletion of their accounts and associated personal information.
6.1 How to Request Account & Data Deletion
Users can initiate account deletion through either of the following two sanctioned methods:
Log in to your respective portal (Clinic Admin, Patient Portal, Org Hub, or Lab Manager) and navigate to:
Confirm your deletion request. Your authentication credentials will be invalidated immediately.
Email our Data Protection Desk from your registered email address with the subject line "Account Deletion Request":
Include your full name, registered mobile number, and portal role. Requests are acknowledged within 24 hours.
6.2 Revocation of SMS & WhatsApp Messaging Permissions
To deliver critical healthcare notifications—such as appointment reminders, OPD queue tokens, FDI dental prescription receipts, and lab case updates—DentoSol integrates with authorized telecom SMS gateways (DLT compliant) and the official Meta WhatsApp Business Cloud API.
- Immediate Revocation: Deleting your account immediately terminates all automated transactional and promotional SMS and WhatsApp dispatch queues associated with your mobile number.
- Granular Opt-Out: If you wish to stop receiving WhatsApp or SMS updates without deleting your healthcare account, you can toggle off specific alerts in Settings → Notifications or reply "STOP" to any SMS notification received from our registered sender header.
6.3 Payment Gateways & Financial Token Deletion
For subscription payments and clinic patient billing, DentoSol partners with RBI-authorized payment aggregators (e.g., Razorpay, Cashfree, Stripe).
- Stored Payment Tokens: Upon account deletion, all saved card tokens, mandate authorizations, and UPI handles are immediately severed and purged from our databases.
- Statutory Tax Invoices: Historical B2B GST tax invoices, settlement notes, and payment transaction references are preserved in compliance with Section 44AA of the Income Tax Act, 1961, and Rule 56 of the Central Goods and Services Tax (CGST) Rules, 2017.
6.4 Healthcare Regulatory Compliance & Medical Records Retention
DentoSol operates as a Business Associate and digital custodian for licensed dental clinics. In compliance with the Dental Council of India (DCI) Code of Ethics Regulations, the Clinical Establishments (Registration and Regulation) Act, and NABH healthcare accreditation standards:
- Clinical Notes & Diagnostics:Clinical records created by healthcare practitioners (including radiographic OPG/CBCT scans, FDI tooth charts, and prescribed regimens) cannot be unilaterally wiped without the treating clinic's authorization and must be retained in encrypted archives for the legally mandated medical retention period (typically 3 years for adult patients).
- Patient Identity Erasure: Personal login accounts, online portal access, and communication identifiers are permanently removed, ensuring the patient can no longer be contacted or logged in.
Account Deletion Timeline (SLA):
Upon confirmation, user authentication credentials, active sessions, and messaging subscriptions are revoked immediately. All personal profile records, login tokens, and transient metadata are completely purged or anonymized across our primary and backup databases within 30 calendar days.
7. Contacting Our Data Protection Officer
For questions, privacy concerns, or requests relating to personal information, account deletion, and data protection, please contact: