Privacy Policy

1. Who we are

DentiPlan is dental clinic management software. It is a product of YAMX LLC, a limited liability company registered in Wyoming, USA, and it is built in Jordan. In this policy, "we", "us" and "DentiPlan" mean YAMX LLC.

DentiPlan is used by dental clinics in Jordan, the Gulf (Saudi Arabia, the United Arab Emirates, Kuwait, Qatar, Bahrain and Oman), the Levant and Egypt.

2. Your clinic's data and ours

Data protection law separates the party that decides why and how personal data is used (the controller) from the party that handles it on someone else's behalf (the processor). Which one we are depends on the data.

• Patient data. The clinic is the controller of its patients' data. We process it on the clinic's behalf, only to run DentiPlan for that clinic and on its instructions.
• Clinic account and contact data. We are the controller of the details we hold about clinics and their staff as our customers, such as names, email addresses and phone numbers.
• Demo requests from this website. We are the controller of what you send us when you ask for a demo.

If you are a patient, your clinic decides what is recorded about you and is the right place to start with any question or request. See Your rights.

3. What data we handle

• Patient records the clinic enters. For example contact details, appointments, medical history, dental and gum charts, treatment notes, photos, invoices and insurance claims. The clinic chooses what to record.
• Staff accounts. The name, email address, phone number and role of each person the clinic adds, and the clinic's own details.
• WhatsApp messages. If a clinic connects its WhatsApp Business number, messages between the clinic and its patients, including voice notes sent to the booking assistant, pass through DentiPlan so that reminders and bookings can work.
• Demo requests. The demo form on this website has no server behind it. It opens your own email app with your details filled in, and we receive only the email you choose to send.
• Sign-in session. When you sign in, your browser keeps your session so you stay signed in. This website uses no advertising or analytics trackers.

4. How we use it

• To run DentiPlan for the clinic: appointments, records, charting, reminders, billing and the other features the clinic uses.
• To set up the clinic's account, give support and answer questions.
• To bill the clinic for its subscription.
• To keep the service secure and working.
• To reply to demo requests and other messages you send us.

We use patient data only to provide DentiPlan to the clinic that entered it, and on that clinic's instructions.

5. AI features

Two parts of DentiPlan use artificial intelligence:

• DentiAI, the in-app assistant. Only the text the clinic sends to it is shared with the AI provider.
• The WhatsApp booking assistant, which writes replies to patients and turns voice notes into text.

Their outputs are suggestions. The dentist decides. Clinical features elsewhere in DentiPlan, such as the suggested gum disease classification and medical risk alerts, follow fixed rules and are not AI.

6. Service providers we use

We rely on these companies to run DentiPlan. Each one receives only what it needs for its part.

• Supabase: database, sign-in and file storage.
• Vercel: hosting for this website and the DentiPlan web app.
• Anthropic: the DentiAI assistant, and only the text the clinic sends to it.
• OpenAI and Deepgram: replies from the WhatsApp booking assistant and transcription of voice notes.
• Infobip: sends and receives the clinic's WhatsApp messages on its connected number. It receives patient phone numbers and message content.
• Meta: WhatsApp Business messages, when the clinic connects WhatsApp.

Demo requests travel through your own email provider, because the form opens your own email app.

7. Where the data is stored

DentiPlan's database is hosted by Supabase in Singapore, on Amazon Web Services (region ap-southeast-1). The website and web app are hosted by Vercel.

This means data entered in Jordan or elsewhere in the region leaves that country and is stored in Singapore. The service providers listed above may also handle data in other countries to do their part. Clinics should take this into account when they tell their patients how their data is handled.

8. How we protect it

• Each clinic's data is separated from every other clinic's at the database level (row-level security), so one clinic cannot read another's records.
• Each staff member sees only what their role allows.
• Patient photos are opened through links that expire every hour.
• All traffic to DentiPlan is encrypted with HTTPS.

No system is perfectly secure, but these protections are built into how DentiPlan works, not added on top.

9. How long we keep it

We keep a clinic's data while its account is open. A clinic can export or delete its data.

When a clinic closes its account, we delete its data within 90 days, or sooner if the clinic asks. Backups held by our database provider are removed on that provider's own schedule.

10. Your rights

Jordan's Personal Data Protection Law No. 24 of 2023 applies to DentiPlan. Depending on where you are, other laws may give you rights too, such as the right to see, correct or delete data about you.

• Patients exercise their rights through their clinic, because the clinic controls their records. If you contact us directly, we will pass your request to the clinic and help it respond.
• Clinic staff, clinic contacts and people who asked for a demo can write to us at yaman@dentiplan.pro.

11. If something goes wrong

If a security breach affects personal data, we will notify the affected clinics without undue delay and within 72 hours of becoming aware of it, as Jordan's Personal Data Protection Law requires. The clinic then notifies its patients.

12. Changes to this policy

When this policy changes, we update the date at the top of this page. For significant changes, we will also tell clinics directly.

13. Contact us

YAMX LLC, maker of DentiPlan.
Privacy questions and requests: yaman@dentiplan.pro