Privacy Policy

DentaReady ("we," "our," or "us") operates the DentaReady website, mobile app, and organization platform (together, the "Services"). DentaReady helps dental hygienists and other dental professionals track their licenses, continuing education (CE), CPR/BLS, and work documents, stay renewal-ready, and share a verified credential packet. It also helps organizations such as dental groups, DSOs, staffing agencies, and schools monitor the compliance of the clinicians on their roster. This Privacy Policy explains what information we collect, how we use and protect it, and the choices you have.

Your professional credentials belong to you. We do not sell your personal information, and we do not use third-party advertising in the Services.

1. Information We Collect

Account Information

When you create an account, we collect your name and email address. Sign-in is handled by our authentication provider (WorkOS), including email and password, Sign in with Google, and Sign in with Apple. When you use a single sign-on option, we receive the name and email address that service provides. We do not store your password; it is handled by our authentication provider.

Professional and Credential Information

DentaReady is built around your professional credentials. Depending on what you choose to add, we collect and store:

• Licenses: state, license number, license type, issue and expiration dates, and renewal cycle
• Continuing education: course title, provider, credit hours, delivery type, completion date, topic categories, and the certificates you upload
• Credentials: CPR/BLS and other certifications (for example local anesthesia, nitrous, laser, radiology, OSHA, HIPAA, or malpractice), including issuer and expiration dates
• Documents: license cards, certificates, and other work documents you upload to your document vault

Organization and Roster Information

If you join an organization's roster, we process your roster membership, job role, work location, and a compliance status calculated from your credentials. If you are an organization administrator, we process information about the clinicians on your roster so you can monitor compliance. How information flows between clinicians and organizations is described in Section 2.

Purchase Information

When you subscribe, we receive your subscription status, product identifier, the store or processor used, and renewal or expiration dates. Payment card details are handled entirely by the Apple App Store, Google Play, or our payments processor (Stripe). We never receive or store your full payment card information.

Information Collected Automatically

When your device or browser communicates with our servers, we receive standard technical information such as your IP address, device or browser type, app version, and the time of access. We use this to operate, secure, and troubleshoot the Services. We do not sell this information or use it to track you across other apps or websites for advertising.

2. How Clinician and Organization Sharing Works

DentaReady is built on a simple principle: the clinician owns their data. When a clinician and an organization are connected, the following applies:

• You control your profile. When you claim and own your profile, organizations you are connected to can see a compliance status and projection calculated from your records, but cannot edit your records.
• Proof requests. An organization can request proof of a specific credential. You fulfill it by sharing a verified, time-limited packet of the documents you choose. You decide what to share and when.
• Organization-managed entries. An organization may provision a profile and add records on your behalf before you claim it. Once you claim the profile, you control it and the organization must use proof requests to obtain documents.
• Shareable packets. You can generate a verified packet of your credentials to share with any employer by link or file. Shared links can expire.

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the Services
• Calculate your renewal readiness and compliance against applicable state board rules
• Send reminders and notifications about expirations and renewals
• Enable roster monitoring, requirement templates, proof requests, and audit exports for organizations you are connected to
• Process subscriptions and manage access to paid features
• Respond to support requests and send service-related messages
• Detect, prevent, and address fraud, abuse, and security issues
• Comply with legal obligations

De-Identified and Aggregated Data

We may de-identify or aggregate information so that it can no longer reasonably be used to identify you, and use that data to analyze trends and to develop and improve the Services. We do not sell de-identified or aggregated data, and we do not attempt to re-identify it.

4. Third-Party Services

We rely on a small number of service providers to operate the Services. Each receives only the information needed for its function:

• WorkOS: authentication and single sign-on. Privacy Policy
• RevenueCat: manages and validates subscriptions and receives your subscription status and a DentaReady account identifier. Privacy Policy
• Stripe: processes payments for web and organization billing. Privacy Policy
• Apple and Google: provide Sign in with Apple and Sign in with Google and process App Store and Google Play payments, subject to their own privacy policies.
• Cloud hosting and storage providers: host our servers and securely store the files you upload, under confidentiality obligations and only to operate the Services.

5. No Advertising or Sale of Data

DentaReady is supported by subscriptions, not advertising. We do not display third-party ads, we do not use advertising identifiers, and we do not sell or rent your personal information. We do not "sell" or "share" personal information for cross-context behavioral advertising as those terms are defined under U.S. state privacy laws.

6. Data Sharing and Disclosure

Beyond the providers and organization sharing described above, we may share information:

• Service Providers: with companies that host infrastructure or provide support on our behalf, under confidentiality obligations
• Legal Requirements: when required by law, court order, or governmental authority
• Business Transfers: in connection with a merger, acquisition, or sale of assets
• Safety: to protect the rights, property, or safety of our users or the public

7. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Services. You may request deletion of your account and associated data at any time (see Section 10). We may retain limited information where required by law or to resolve disputes and enforce our agreements.

8. Data Security

Your data is stored on secured servers and transmitted over encrypted (HTTPS) connections. Uploaded documents are kept in access-controlled storage. We implement technical and administrative safeguards to protect your information; however, no method of electronic transmission or storage is completely secure, and we cannot guarantee absolute security.

9. International Data Transfers

DentaReady is operated from the United States, and your information is stored and processed there. If you use the Services from outside the United States, you consent to the transfer and processing of your information in the United States, which may have different data protection laws than your country of residence.

10. Your Rights and Choices

Depending on where you live, you may have the right to:

• Access: request a copy of the personal information we hold about you
• Correct: request correction of inaccurate information
• Delete: request deletion of your account and personal information
• Portability: request your data in a portable format
• Withdraw consent: withdraw consent where processing is based on consent

To exercise these rights, contact us at info@dentaready.com. We may need to verify your identity before acting on a request. We will not discriminate against you for exercising your privacy rights.

11. California Privacy Rights (CCPA/CPRA)

California residents have rights to know, delete, and correct personal information under the California Consumer Privacy Act, as amended.

Categories of information collected: identifiers (such as name and email address), professional license and credential information, commercial information (subscription records), internet and device activity, approximate location inferred from IP address, and inferences drawn from the above.

Sale or sharing: we do not sell your personal information and do not share it for cross-context behavioral advertising.

12. Other U.S. State Privacy Rights

Residents of Colorado, Connecticut, Virginia, Utah, and other states with comprehensive privacy laws may have similar rights to access, correct, delete, and obtain a copy of their personal information. Contact us to exercise these rights.

13. Children's Privacy

DentaReady is intended for working dental professionals and the organizations that employ them. It is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us at info@dentaready.com and we will delete it.

14. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated policy on this page and revise the "Last updated" date. Material changes may also be communicated within the Services. Your continued use of the Services after an update constitutes acceptance of the revised policy.

15. Contact Us

If you have questions about this Privacy Policy or wish to exercise your privacy rights, please contact us at info@dentaready.com.