Comprehensive Privacy Notice
Summary: we use your data to respond to your request, create a demo account if appropriate and provide commercial follow-up using demo usage metrics. Do not upload real patient data, clinical records, clinical photographs or sensitive information during the demo unless a specific written agreement exists.
1. Identity and controller contact
Órbita Dental is a SaaS brand and service operated by an independent technology services provider. Until a legal entity is incorporated, the individual owner and operator of the brand is responsible for the personal data processing described in this notice for commercial, white-label presales and demo account purposes. For privacy, ARCO rights or consent revocation, write to [email protected].
Before contracting the service, signing a white-label agreement or processing real clinic information, the complete legal identification, contractual address, tax data and applicable agreement will be provided.
2. Scope: controller vs. processor
This notice covers data processed by Órbita Dental as controller: commercial requests, contacts from interested clinics, demo account users, demo usage metrics, commercial support, white-label presales and customer administrative data.
It does not authorize uploading real patient data into a commercial demo. When a clinic, distributor or white-label brand uses the platform with real patients, that clinic, distributor or brand is responsible before patients and end users; Órbita Dental acts as technology provider/processor under the contract, data processing addendum and documented customer instructions.
3. Personal data we may process
| Category | Data | Purpose |
|---|---|---|
| Commercial contact | Clinic or office name, contact name, email, phone, operation size, message and request source. | Respond to the request, prepare the demo and provide commercial follow-up. |
| Demo account | Email used as demo owner or administrator, name, role/profile, users or profiles created, module configuration and access logs. | Create, administer, secure and measure demo account usage. |
| Demo analytics | Most used modules, pages visited, profiles created, response times, technical errors, volume of uploaded images/files and aggregate activity metrics. | Support, product improvement and personalized commercial follow-up. |
| Technical data | Pseudonymized IP/User-Agent identifiers, date, time, technical traces and security logs. | Security, abuse prevention, technical diagnosis and service continuity. |
We do not request sensitive personal data for the demo. If you upload patient information, health data, clinical photographs or sensitive documents by mistake, we may block, delete or anonymize that content and contact you to correct demo use.
4. Primary purposes
- Respond to information, quote and demo requests.
- Create a demo account or white-label presales environment with the provided email as owner or initial administrator.
- Operate, protect, diagnose and improve the demo account.
- Provide sales or white-label evaluation follow-up using demo usage metrics.
- Prevent spam, abuse, misuse, prohibited data uploads and unauthorized access.
- Comply with legal obligations and respond to competent authority requests.
5. Secondary purposes
We may send communications about new features, promotions, commercial materials or invitations to interviews/case studies. You may opt out without affecting your request or demo access by writing to [email protected] with the subject “Opposition to secondary purposes”.
6. Analytics inside the demo app
During the demo or white-label presales, we may analyze platform operations for commercial follow-up, support, fit evaluation and product improvement. This analysis is limited to metadata and usage activity; we do not use clinical content, images, documents or patient data for sales.
The demo must use fictitious or anonymized data. Testing with real patient information or clinical images requires a prior contract, processor addendum, documented instructions from the responsible clinic or brand, additional security measures and, where applicable, consent from data subjects.
7. White-label services
In a white-label model, the customer may present the platform under its own brand to personnel or patients. That customer must publish its own privacy notice, define purposes, obtain consents when applicable and assume the direct relationship with patients and end users.
8. Transfers and providers
We do not sell personal data. We may use providers that process data on behalf of Órbita Dental for hosting, transactional email, security, backups, technical monitoring and support. We may also disclose information when required by competent authority or when needed to defend rights, comply with obligations or formalize a contractual relationship.
9. ARCO rights, revocation and limitation of use
You may exercise access, rectification, cancellation or opposition rights; revoke consent; or limit use/disclosure by writing to [email protected]. Include your name, response channel, identity or representation document, the right exercised and a clear request description. We will respond within applicable legal deadlines.
10. Retention
We keep commercial requests and demo data for up to 24 months from the last contact or activity, unless a contractual relationship, legal obligation, dispute, security investigation or applicable deletion request requires a different period.
11. Security
We apply technical and administrative controls such as HTTPS/TLS, role-based access control, password hashing, logical clinic isolation, logs, backups, upload limits, technical monitoring and pseudonymized abuse signals where appropriate. No measure eliminates all risk, so the demo must not contain real patient data.
12. Changes to this notice
Changes will be published on this page with an update date. If a change substantially modifies purposes or demo analytics use, we will try to notify through available contact channels.