Ortooth is a lab-management platform operated by [Lab legal entity name and address] (“the Lab,” “we,” “us”) to coordinate orthodontic appliance work with dental clinics. Accounts exist only for clinic staff (doctors), lab technicians, and lab managers — patients never sign in to Ortooth directly, and this policy is written with that in mind.
Account data — for every doctor, technician, and manager account: name, email, phone number, and role. Used to run the account and to contact you about it.
Order data — entered by a clinic’s doctor to place a lab order: tooth chart markings, appliance type and specifications, uploaded scan files, and free-text task descriptions. A clinic provides this to have the Lab fulfil an order for one of its own patients — it isn’t data about the doctor themselves.
For order data describing a clinic’s patient, that clinic is the data controller — it decides what’s submitted and why, and is the right first point of contact for anything a patient asks about their own data. The Lab acts as a data processor for this data, handling it only to provide the lab service, under a data processing agreement with each clinic.
For account data — a doctor’s, technician’s, or manager’s own contact details — the Lab is the controller.
Ortooth sets three cookies, all strictly necessary for the app to function. We don’t use analytics, advertising, or tracking cookies of any kind, so nothing here needs your consent to be set:
sb-*-auth-token — keeps you signed in. Set by Supabase, our authentication provider.ortooth-theme — remembers your light/dark display preference.ortooth-locale — remembers your chosen display language.Two subprocessors run the service on our behalf: Supabase (database, authentication, and file storage) and Sentry (error monitoring, configured not to collect personal data by default). Neither uses your data for their own purposes. We don’t sell or share data with anyone else.
Account and order data is kept for the duration of the business relationship with a clinic. We don’t currently run an automated deletion schedule — if you need something removed sooner, contact us (below) and we’ll handle it directly.
If you hold an Ortooth account, you can download everything held under it at any time — no request needed — from your account menu (“Download my data”). To have it corrected or deleted, contact [privacy contact email].
If you are a patient of a clinic that uses Ortooth: Ortooth is not your point of contact. Please reach out to your clinic directly — they can request, correct, or delete your data on your behalf, or ask us to.
Data is encrypted in transit. Access is enforced at the database level (row-level security), so each account can only ever reach data it’s authorized for — not just what the app’s screens happen to show. We monitor for errors via Sentry.
We’ll update the date above when this changes. Significant changes will be announced to account holders directly.
Questions about this policy, or a request about your data: [privacy contact email].