DentiByte Privacy Notice

1. Personal Information We Collect and How We Collect It

The term "Personal information" as used in this Notice means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with you. Personal information does not include information that is publicly available, deidentified, or aggregated.

We and our vendors may collect personal information from and about users of our Services from the following sources:

• Directly from you when you provide it to us.
• Automatically when you use the Website or Services.
• From our vendors who help us provide the Services such as Beehiiv (newsletter), Resend (transactional email), Cloudflare (hosting, workers, and web analytics), Google Analytics (GA4 — anonymized usage analytics), Groq (AI summarization — no user data is transmitted), Web3Forms (contact/billing inquiry forms), DentalXChange (insurance eligibility for Pro users), Tawk.to (live chat), and Stripe (Pro subscription billing).

Personal Information You Provide to Us. When you sign up for an Account or newsletter, submit a form, or use various features, we collect your email address and, for forms, basic details such as name, role, and billing scenario (never PHI). We do not collect, store, or transmit any Protected Health Information (PHI). DentiByte is not a HIPAA-covered entity. We process additional personal information when you use the Website and Services, such as your User Generated Posts, and messages when you communicate with other users via the Website or Services.

The Personal information we get from you includes: (1) Identifiers, such as name, email address, date of birth, unique personal identifier, online identifier, Internet Protocol address, or other similar identifiers; (2) Records and copies of your correspondence (including email addresses and phone numbers, if applicable), if you contact us. We also collect copies of your correspondence with us or other users when you use the Website and Services. We may also ask you for personal information when you report a problem with the Website or Services; and (3) Audio, visual and text information, including your text, images and voice recordings when you transmit content. Some of the personal information we collect from you helps us deliver a more personalized experience to you.

Personal Information Collected Automatically. We and our vendors use cookies, web beacons, pixels, SDKs, tags and other similar technologies (collectively, "Cookies") to collect personal information when you interact with our Website and Services. These Cookies may collect personal information about your usage and activities (such as your IP address and device identifier, the browser you are using, length and time of visit and pages visited), geolocation data and details about how you interact with our Website and Services. This data is used by us and our vendors for various purposes, including to: operate, enable and improve our Website and Services; analyze usage and performance; track bugs and errors; verify account credentials and enable logins; and identify fraud, as well as protect and secure our Website and Services. Our privacy-first manual calculators (PayIQ, CAC/LTV, and Practice Metrics) use only client-side processing in your browser; no user inputs, financial data, practice metrics, or salary details are ever transmitted to or stored on our servers or any third-party service.

Personal Information Collected From Our Vendors. We and our vendors may collect personal information about you from third-party sources that help us provide, authenticate, verify, and secure the Website and Services. This includes: (i) Authentication and login providers such as Apple and Google, from which we may receive identifiers (such as your name, email address, profile picture, or unique user ID) when you choose to sign up or log in using your account with these services; (ii) email service providers when you sign up for our newsletter or other email communications; (iii) Analytics and security vendors, which may share aggregated or device-related information (such as IP address ranges or fraud indicators) to support our fraud detection, service improvement, and security efforts; (iv) cloud, hosting and infrastructure vendors; (v) messaging and notification vendors; and (vi) compliance and authentication providers. We only receive the personal information from these vendors that is necessary to provide, maintain, and secure the Website and Services, and we process it in accordance with this Notice and any applicable agreements with such vendors.

2. Use of Personal Information We Collect

We may use the personal information we collect from you in the following ways:

• To set up and verify your Account with us.
• To send you updates, newsletters, and other informational communications.
• To personalize your user experience and to allow us to deliver the type of content and offerings in which you are most interested, including that which is based on data you have provided to us.
• To deliver messages and other services and content you request and send information related to your Account, the Website and the Services, including confirmations, technical notices, updates, security alerts, support and administrative messages, and enable user to user communication.
• To conduct an aggregated analysis of the performance of our Website and Services, including referral data if you arrive at our Website from an external source.
• To provide, maintain and improve the Website and Services.
• To conduct our business-related operations and functions, including preventing fraud, security, and legal reasons.
• For other internal business purposes such as recordkeeping and risk management.

3. How We Disclose Personal Information We Collect

We may disclose personal information as follows:

• With our Vendors. We may disclose your personal information to service providers that perform services on our behalf, such as analytics and payments providers.
• If we sell or transfer all or a portion of our business assets. We may disclose personal information when we do a business deal, or negotiate a business deal, involving the sale or transfer of all or a part of our business or assets. These deals can include any merger, financing, acquisition, or bankruptcy transaction or proceeding.
• To respond to lawful requests and legal processes.
• To protect the rights and property of DentiByte, our agents, customers, and others. This includes enforcing our agreements, policies, and Terms of Use.
• In an emergency. This includes protecting the safety of our employees and agents, our customers, or any person.
• With other service providers and contractors who perform services on our behalf, provided they are bound by contractual obligations to protect your personal information.

4. Data Retention

We endeavor to retain your personal information for as long as your Account is active or as needed to provide you the Website and Services, or where we have an ongoing legitimate business need. Additionally, we will retain and use your personal information as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements.

5. Security of Your Personal Information

Safeguarding personal information is very important to us. While no systems or websites are 100% secure, we take reasonable and appropriate steps to help protect personal information from unauthorized access, use, disclosure, alteration, and destruction. To help us protect personal information, we request that you use a strong password and never disclose your password to anyone or use the same password with other sites or accounts, applications, or websites.

6. Sales and Sharing of Personal Information

We do not sell or share personal information as defined under applicable U.S. state privacy laws, including for monetary consideration or cross-context behavioral advertising.

7. User Privacy Rights

Although we may not be subject to all US state data privacy laws due to applicability thresholds, we strive to operate in a transparent manner and to honor applicable privacy rights. Where required by law, you may have certain rights such as:

• Right to Know/Access (Categories): You may have the right to request we disclose to you the categories of personal information about you that we collected, including:
  • the categories of sources from which personal information was collected;
  • the business or commercial purposes for collecting, selling, sharing, or disclosing personal information;
  • the categories of third parties to whom we disclosed personal information;
  • the categories of personal information that we sold, and for each category identified, the categories of third parties to which we sold that particular category of personal information;
  • the categories of personal information that we disclosed for a business purpose in the prior 12 months, and for each category identified, the categories of recipients to which we disclosed that particular category of personal information.
• Right to Know/Access (Specifics): You may have the right to request we disclose to you free of charge the personal information we collected about you.
• Right to Delete: You may have the right to request we delete personal information we collected from you, unless applicable laws recognize an exception.
• Right to Correct: You may have the right to request that we correct the personal information we have about you if you believe that information is inaccurate.
• Right to Opt-Out of Sales: You may have the right to opt out of the sale of your personal information. To opt out, please contact us, or have your authorized agent contact us at, hello@dentibyte.com.
• Right to Limit Use and Disclosure of Sensitive personal information: You may have the right to direct us to limit our use and disclosure of your sensitive personal information to only what is necessary to perform the Services or Website reasonably expected by an average consumer who requests those, or for other limited purposes expressly permitted by law (such as detecting security incidents, protecting against malicious, deceptive, fraudulent, or illegal activity, or ensuring physical safety). Note that certain exceptions may apply, and we may continue to use or disclose sensitive personal information for purposes expressly permitted by law even after a limitation request.
• Right to appeal: If you are unsatisfied with our decision not to take action on your request to exercise one of your privacy rights, you may appeal our decision.

Shine the Light: California's "Shine the Light" law permits California residents to request certain information regarding our disclosure of personal information to third parties for their own direct marketing purposes. However, we do not disclose personal information to third parties for their own direct marketing purposes. If you are a California resident, you may request information about our compliance with the Shine the Light law by contacting us at hello@dentibyte.com. Any such request must include "California Shine the Light Request" in the first line of the description and include your name, street address, city, state, and ZIP code. Please note that we are only required to respond to one request per customer each calendar year.

Our Services are not configured to respond to "Do Not Track" (DNT) signals.

To exercise any of the above privacy rights, you or your authorized agent may contact us at hello@dentibyte.com. If you decide to exercise any of the privacy rights described above, we won't discriminate against you including but not limited to pricing, quality and service.

8. Third-Party Disclosure and Links

The Services may include links or integrations that lead to other websites and software platforms whose privacy practices may differ from those of DentiByte including, but not limited to, third-party websites used for identity verification checks and background information. If you use any of these third-party sites, your information is governed by their privacy statements. We encourage you to carefully read the privacy statement of any third-party websites or software you use.

9. Notice Concerning the Information of Minors

DentiByte is not directed to children under the age of 18 and does not intentionally collect any personal information from children under the age of 18. Please contact us if your child has provided personal information to us and we will delete the personal information by contacting us at hello@dentibyte.com detailing where the content or information is posted.

10. International Data Transfers

We may transfer personal information to countries other than the country in which the data was originally collected. These countries may not have the same data protection laws as the country in which you initially provided the personal information. When we transfer your personal information to other countries, we will protect that information as described in this Notice or as otherwise required by applicable law.

11. Changes to This Notice

We may change this Notice from time to time. If we make any changes to this Notice, we will change the "Effective Date" above. We encourage you to review this Notice whenever you visit the Website or Services to understand how your personal information is used.

12. Contact Us

If you have any questions about this Notice, please feel free to contact us at hello@dentibyte.com.