1. Who we are
This policy explains how the Dental Lab Manager platform ("we") handles personal data of Lab owners, staff and doctors.
2. Data we collect
Account data (name, email, mobile number), sign-in records (date, time, device address, browser), acceptance of legal documents and contract signatures, and billing records of the Lab subscription.
3. Lab data
Data entered by a Lab (cases, patients, doctors, prices, files) belongs to that Lab. The Lab is responsible for having a lawful basis to process its patients' and doctors' data. We process it only on the Lab's behalf to provide the service. Each Lab's data is isolated from other Labs.
4. Access by the platform
Platform staff do not access a Lab's operational data, except with the Lab owner's permission for support or where required by law.
5. Security
Data is protected with access controls enforced in the database, encrypted connections, two-factor authentication for platform administrators, and audit logs.
6. Retention and export
We keep data while the Lab's subscription is active. After cancellation the Lab can request an export; afterwards data is deleted or anonymised within a reasonable period, except records we must keep by law (for example invoices).
7. Your rights
You may request access to or correction of your personal data through your Lab owner or by contacting us.
8. Changes
We may update this policy. You will be asked to accept the new version before continuing.
9. Governing law
This policy is governed by the laws of the Arab Republic of Egypt, including Personal Data Protection Law No. 151 of 2020.
External AI assistants
If a user connects an external AI assistant (for example ChatGPT, Claude or Cursor) to their account, the data that user is allowed to see in DentalFlow Lab may be sent to that assistant's provider. This happens under the user's own account with that provider and at the user's own responsibility. Lab owners decide whether their lab allows this and which roles may use it, and can revoke connected assistants at any time. Assistant access is read-only and every use is recorded in the lab's audit log.
Toothline