Privacy Policy

This Privacy Policy applies when you visit DentalPresence.in, create a customer or referral partner account, browse public practice information, use our local growth, SEO, referral, or partner tools, contact us, or otherwise interact with our services (the “Service”).

It does not govern third-party websites or services that have their own privacy policies.

We may collect the following categories of information:

• Account information, such as your name, email address, sign-in details, and account preferences.
• Business information, such as clinic names, locations, websites, public business contact details, listings, keywords, competitors, and marketing content you submit.
• Payment and subscription information, such as plan, billing status, transaction identifiers, and salted one-way fingerprints of limited account or payment-provider identifiers used to enforce one-time referral eligibility. Payment card details are handled by our payment provider rather than stored by us.
• Referral partner and attribution information, such as partner profile and verified email, agreement acceptance record, signed first-party referral records, Lemon Squeezy affiliate and event identifiers, referral status, privacy-masked customer identity, fraud or organization-overlap flags, and audit history. Lemon Squeezy separately holds the authoritative commission, fee, tax, and payout records.
• Usage and device information, such as pages and features used, approximate location derived from IP address, browser type, device information, logs, and diagnostic data.
• Communications, including support requests, feedback, and other messages you send us.
• Connected-service information that you authorize a third-party service to provide to us.

No patient data: our practice tools are designed for business and marketing information, and our discovery pages provide public practice information. Do not submit patient names, contact details, dates of birth, appointment details, diagnoses, treatment information, medical record numbers, insurance information, photographs, or any other patient information.

The current Service is not designed to create, receive, maintain, or transmit protected health information, does not import individual Google review names or comments, and is not offered under a HIPAA business associate agreement. If patient information is submitted accidentally, stop using the affected feature and contact us promptly so we can review and delete it where possible.

We use information to provide and personalize the Service; create audits, reports, recommendations, and content; authenticate users; process subscriptions; administer the referral partner program; reconcile Lemon Squeezy attribution with DentalPresence safeguards; support customers and partners; maintain security; prevent fraud, self-referrals, and abuse; analyze and improve performance; communicate service updates; and comply with legal obligations.

Where applicable law requires a legal basis, we process information as needed to perform our contract with you, pursue legitimate interests such as operating and securing the Service, comply with law, or act with your consent.

We do not sell your personal information. We may share information with service providers that help us host, operate, secure, analyze, support, and bill for the Service; with third parties you choose to connect; when required by law or needed to protect rights and safety; or as part of a merger, financing, acquisition, reorganization, or sale of assets.

Service providers may process information only for the services they provide to us, subject to their agreements and applicable law.

Lemon Squeezy processes checkout and subscription information as merchant of record and separately processes affiliate applications, tracking identifiers, referral and commission status, tax forms, and payout destinations under its own terms and privacy policy. We receive limited provider identifiers and events needed to match affiliates, reconcile referrals, and apply fraud safeguards; we do not receive payment-card credentials, complete tax forms, or affiliate bank and PayPal credentials.

If you connect a Google or other third-party account, we receive and use authorized business-level search, location, and performance information to deliver the connected features. DentalPresence does not import individual reviewer names, review comments, or review replies.

Google data we access. With your authorization, DentalPresence uses read-only Google Search Console access to retrieve verified property URLs and bounded search-performance results, including queries, pages, clicks, impressions, click-through rates, positions, and reporting date ranges. Google Business Profile access lets us retrieve the accounts and practice locations available to the connected Google account and create or update supported listing content, including profile posts, only when you request or schedule that action.

How we use and share Google data. We use Google data only for user-facing DentalPresence features such as private search-performance reports, comparisons, local-visibility guidance, approved content, and scheduled Business Profile publishing. We do not sell Google user data, use it for advertising, or use it to train generalized or foundation AI models. Google data may be processed by infrastructure and AI service providers only as needed to provide the DentalPresence feature you use, subject to contractual and technical safeguards; it is not shared with advertisers or data brokers.

How we store and delete Google data. OAuth access and refresh tokens are encrypted at rest and retained only while the connection is active. DentalPresence stores bounded Search Console snapshots and may store the GBP drafts, publishing history, reports, and derived evidence needed to provide workspace history. From Workspace settings you can disconnect Google at any time: we delete stored access and refresh tokens, disable GBP auto-posting, and stop pending scheduled GBP posts. You may also request revocation of the Google grant and choose to delete direct Search Console snapshots plus saved GBP post records. If you do not choose that deletion, those direct caches remain available for continuity. Reports, audits, and derived evidence already created remain subject to the retention rules in this policy and any applicable legal or security requirements. You can also revoke DentalPresence in your Google Account security settings.

DentalPresence's use and transfer of information received from Google APIs to any other application will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Some features use artificial intelligence providers to generate recommendations, reports, or marketing content. Information submitted to those features may be sent to our AI service providers for processing. Data received from connected Google accounts is used only to generate the reports, metrics, and content you view or choose to publish, and is not used to train AI models. Never include patient or other sensitive personal information in prompts.

We may use cookies and similar technologies to keep you signed in, remember preferences, protect the Service, understand usage, diagnose problems, and measure performance. Your browser may let you block or delete cookies, but some Service features may not work correctly without essential cookies.

For public website analytics, we use a random first-party browser identifier to count unique visitors and measure how often visitors complete a free DentalPresence Score. We store only a one-way digest of that identifier and do not attach IP addresses, page URLs, form contents, or patient information to the visitor count.

We use PostHog through a first-party endpoint to measure page visits, Core Web Vitals performance metrics, and a limited set of product actions, including automatic interaction events such as clicks. When you create or use a customer account, these events may be associated with your Firebase account identifier, practice workspace, and plan so we can understand the path from a free score to a subscription. Some analytics events use an IP address to derive approximate location. Session replay keeps ordinary page text readable while masking every form input; request headers, request bodies, and console logs are not recorded. The Service is not intended to contain patient information, reviewer names, or review content.

On public practice-directory pages, we measure visits and clicks on practice websites, phone numbers and directions. These records may include the practice selected, action, time, browser or analytics identifiers, and device and approximate location information. Activity may be linked across visits and associated with a customer account when you sign in. These identifiers are linkable and are not anonymous. Practice-facing reports show activity counts rather than visitor identities. A click does not confirm that a visitor contacted a practice or received care. Do not submit patient names, contact details, symptoms, appointment details or clinical records through discovery or analytics features.

We use Cloudflare Turnstile on sensitive forms such as free scores, sign-in, signup, password reset, referral registration, and first-practice onboarding. Cloudflare processes technical request and browser signals needed to distinguish people from automated abuse; the challenge response is validated on our server and expires after a short period.

We use Sentry for application error and performance diagnostics. Before events are sent, DentalPresence removes request headers, cookies, request bodies, IP addresses, query strings, user records, and opaque path identifiers and applies patient-data and credential redaction. Sentry Session Replay is not enabled.

For referral safeguards, DentalPresence may store a signed first-party attribution record containing a partner code and timestamps. Our Lemon Squeezy affiliate tracking script also reads the affiliate code in a referral URL so Lemon Squeezy can create its anonymous tracking identifier and associate a later eligible purchase within the configured tracking period. Lemon Squeezy currently describes its identifier as cookie-free; its technology, retention, and processing are controlled by its own terms and privacy policy.

We retain information for as long as reasonably necessary to provide the Service, maintain business and transaction records, resolve disputes, enforce agreements, protect security, and meet legal obligations. Retention periods vary based on the type of information and why we hold it.

Website audit history and generated report evidence are scheduled for deletion after 90 days unless a longer period is required for legal, security, or operational reasons.

Where a one-time referral benefit is claimed, we may retain non-reversible identity fingerprints after account deletion so the benefit cannot be claimed again through a recreated account.

Referral partner agreement acceptance, provider-event, attribution, fraud-review, and audit records may be retained after participation ends where reasonably necessary to account for payments, resolve disputes, prevent abuse, and enforce agreements.

When information is no longer needed, we take reasonable steps to delete or anonymize it, subject to backups and legal requirements.

We use reasonable administrative, technical, and organizational safeguards designed to protect information against unauthorized access, loss, improper use, or alteration. No internet transmission or storage system is completely secure, so we cannot guarantee absolute security.

You are responsible for keeping your credentials confidential and for notifying us if you suspect unauthorized account access.

You can review or update certain account information through the Service and can unsubscribe from non-essential marketing messages using the instructions in those messages. You may also ask us to access, correct, delete, restrict, or provide a copy of your personal information, or withdraw consent, where applicable law provides those rights.

We may need to verify your identity before completing a request. Some requests may be limited where information must be retained for legal, security, fraud-prevention, or operational reasons. You may also have the right to complain to your local data-protection authority.

Our practice tools are intended for business users. Our public directory is intended for adults seeking practice information and is not directed to children. We do not knowingly collect personal information from children who are not legally able to consent to its processing. If you believe a child has provided personal information to us, please contact us.

We and our service providers may process information in countries other than the country where you live. Where required, we use appropriate safeguards for international transfers and handle information in accordance with applicable law.

We may update this policy to reflect changes to the Service, our practices, or applicable law. We will post the revised policy with a new effective date and provide additional notice when required.

For privacy questions or requests, contact us at hello@dentalpresence.in or use the support channel available in your account.