Privacy policy
Last updated: 29 October 2026
DentoCRM (“we”, “us”) is clinic management software operated by [Company legal name], [registered address], India. This policy explains what information we handle when clinics use DentoCRM at app.dentocrm.com and in the DentoCRM mobile app, and when people visit dentocrm.com.
Who controls patient data
Each clinic decides what patient information it records and why. For patient records, the clinic is responsible for the data and we process it on the clinic’s behalf, only to provide the service.
What we collect
- Clinic account details: clinic name, address, staff names, email addresses, mobile numbers and roles.
- Records the clinic enters: patient names, contact details, appointments, clinical notes, dental charts, prescriptions, treatment plans, consents, documents and X-rays, invoices and payments.
- Messaging data: WhatsApp and SMS messages sent to patients on the clinic’s behalf, delivery status and patient replies.
- Technical data: device and browser information, notification tokens and logs needed to keep the service secure and working.
- Website visitors: information you send in enquiry or booking forms.
How we use it
- To provide the service: scheduling, reminders, billing, reports and notifications that the clinic switches on.
- To send messages the clinic sets up (appointment reminders, receipts and similar) through WhatsApp Business (Meta) and SMS providers.
- To support the clinic, keep the service secure, prevent misuse and meet legal obligations.
We do not sell personal data and we do not use patient records for advertising.
Messages are sent through the WhatsApp Business Platform operated by Meta, using the clinic’s own WhatsApp number or DentoCRM’s shared number. Patients can reply STOP or ask the clinic to stop messages; opted-out patients are not messaged.
Where data is stored and how it is protected
Data is stored on servers in India (Amazon Web Services, Mumbai region). Access is limited by role, connections are encrypted, stored secrets are encrypted, files are private and opened with short-lived links, and changes to bills and payments are logged.
Service providers
We use trusted providers to run the service: Amazon Web Services (hosting, storage and email), Meta (WhatsApp), [SMS provider], Razorpay (subscription payments) and Google Firebase (mobile notifications). They process data only to provide their service to us.
How long we keep it
We keep clinic data while the clinic’s account is active. When a clinic closes its account, we delete its data within [90] days, except where the law requires us to keep it longer. Clinics can export their data before closing.
Your rights
Patients should contact their clinic to see, correct or delete their records; we help the clinic do this. Clinic staff and website visitors can contact us at support@dentocrm.com. We handle requests in line with India’s Digital Personal Data Protection Act, 2023.
Data deletion
To delete a clinic account and its data, the clinic owner can email support@dentocrm.com from the account’s email address. If you connected a WhatsApp number with Facebook and want that connection removed, remove DentoCRM from your Meta Business settings or email us.
Changes
We will post any changes on this page and update the date above.
Contact
[Company legal name] · [registered address] · support@dentocrm.com · Grievance officer: [name, email]