Privacy Policy

1. Introduction

CleverDent ("we", "our", "us") is a cloud-based dental clinic management platform operated by WebWest Werbeagentur. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform at cleverdent.io and our mobile applications.

2. Information We Collect

2.1 Account Information

When you register, we collect your name, email address, phone number, clinic name, and professional credentials.

2.2 Patient Data

Clinic administrators may store patient records including names, contact details, appointment history, treatment plans, and dental imaging. This data is stored on behalf of the clinic (data processor) and the clinic remains the data controller.

2.3 Facebook & Instagram Data

When you connect your Facebook Page or Instagram account via our Social Media integration, we access:

• Page names, IDs, and profile pictures
• Page engagement metrics and insights
• Instagram business account information
• Lead form submissions from Meta Lead Ads
• Ad campaign performance data

We use this data solely to display your social media performance within the CleverDent dashboard and to import leads into your CRM. We do not sell, share, or use this data for any purpose other than providing our services to you.

2.4 Usage Data

We automatically collect device information, browser type, IP address, and usage patterns to improve our service.

3. How We Use Your Information

• To provide and maintain our dental CRM platform
• To manage appointments, treatments, and patient records
• To display social media insights and import leads
• To send appointment reminders via WhatsApp, SMS, or email
• To generate AI-powered smile design visualizations
• To improve our services and user experience

4. Data Storage & Security

All data is stored on encrypted MongoDB Atlas servers (AWS EU region). We implement industry-standard security measures including:

• TLS/SSL encryption for all data in transit
• AES-256 encryption for data at rest
• Multi-tenant isolation — each clinic's data is strictly separated
• Role-based access control (RBAC)
• Regular security audits and vulnerability assessments

5. Data Sharing

We do not sell your personal data. We may share data with:

• Service providers: MongoDB Atlas (hosting), OpenAI (AI features), Meta (social media integration), Twilio (messaging)
• Legal requirements: When required by law or to protect our rights

6. Facebook Data Deletion

You can disconnect your Facebook/Instagram account at any time from Settings > Social Media. Upon disconnection, we delete all stored Facebook tokens and page data within 24 hours. You may also request complete data deletion by contacting us at office@webwest.info.

Facebook Data Deletion Callback URL: https://cleverdent.io/api/social/auth/facebook/deletion

7. Your Rights (GDPR)

Under the General Data Protection Regulation (GDPR), you have the right to:

• Access your personal data
• Rectify inaccurate data
• Erase your data ("right to be forgotten")
• Restrict processing
• Data portability
• Object to processing
• Withdraw consent at any time

8. Data Retention

We retain your data for as long as your account is active. Upon account deletion, all personal data is permanently removed within 30 days. Patient records follow local healthcare data retention regulations.

9. Cookies

We use essential cookies for authentication and session management. We do not use tracking or advertising cookies.

10. Children's Privacy

Our service is intended for dental professionals aged 18 and older. We do not knowingly collect data from children under 16.

11. Changes to This Policy

We may update this policy from time to time. We will notify registered users of significant changes via email.

12. Contact Us

WebWest Werbeagentur
Email: office@webwest.info
Website: cleverdent.io