Privacy & data handling

A plain-language look at how we handle your data

This page is maintained by the Practice Radiance team to answer the questions clinic owners and their DPOs ask most often. It describes today's controls during the pilot phase — not a certification.

Data we collect

Clinic profile information, calendar capacity signals, patient enquiry messages, and the marketing content your team approves. We do not request clinical records or treatment notes.

Where data is stored

Patient and clinic data is stored on managed cloud infrastructure with encryption in transit (TLS) and at rest. Production data is isolated per workspace and not shared between clinics.

Access and approvals

Only authenticated users in your clinic workspace can read your data. Every patient-facing message generated by AI requires a human approval click before it is sent.

Retention and deletion

Clinics can request export or deletion of their workspace at any time during the pilot. Marketing and lead data is retained while the workspace is active; backups are rotated on a rolling 30-day window.

Subprocessors and integrations

We use established cloud, AI, email, and SMS providers to deliver the service. Each integration is opt-in per clinic and listed inside the workspace under Settings → Integrations.

Compliance posture

Practice Radiance is an MVP / pilot product. Formal certifications (HIPAA, GDPR DPA, ISO 27001) depend on your production setup, signed agreements, and clinic-side configuration. We're happy to walk through current controls with your DPO before a pilot.

Shared responsibilities

Privacy in a dental practice is a partnership. Below is how responsibility is split today.

What Practice Radiance does

  • • Encrypts data in transit and at rest
  • • Isolates workspaces per clinic
  • • Requires human approval before patient messages send
  • • Provides export and deletion on request

What the clinic owner does

  • • Collects valid patient marketing consent
  • • Manages staff access in Settings
  • • Signs the data-processing addendum before production use
  • • Decides which integrations to enable

Contact

Questions from your DPO, IT, or legal team are welcome. Reach us at privacy@dentalgrowthos.com and we'll respond within two business days.

This page is editable content maintained by the Practice Radiance team and is not independent verification of any standard.

Ready to start a pilot?

We'll walk your team through the controls above and tailor the setup to your clinic's workflows.