Privacy Policy
We believe privacy is a right, not a feature. Here's exactly how we handle your data.
1. Information we collect
We collect information you provide directly (such as your name, email address, clinic name, and payment details when you register), information we collect automatically when you use our services (including log data, device information, and usage analytics), and information from third parties where you have authorised such sharing.
Patient health data entered into AmritSmile is collected and stored on behalf of the dental practice. AmritSmile acts as a data processor for such data under the Digital Personal Data Protection Act, 2023 (DPDPA).
2. How we use your information
We use the information we collect to provide, maintain and improve our services; process transactions and send you related information including purchase confirmations and invoices; send you technical notices, updates, security alerts and support messages; respond to your comments and questions; and monitor and analyse trends, usage and activities.
We do not sell, trade or rent your personal information to third parties. We do not use patient health data for advertising or profiling purposes.
4. Data retention
We retain personal data for as long as necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying legal, regulatory, accounting or reporting requirements. Patient health records are retained for a minimum of seven years from the date of the last clinical entry, consistent with Indian medical practice regulations.
You may request deletion of your account and associated data by contacting us at privacy@amritsmile.in. Requests will be processed within 30 days.
5. Security
We implement and maintain appropriate technical and organisational measures to protect your personal data against unauthorised or unlawful processing, accidental loss, destruction or damage. These measures include AES-256 encryption at rest, TLS 1.3 in transit, role-based access controls, and regular third-party security audits.
While we take commercially reasonable precautions, no security system is impenetrable. We encourage you to maintain strong passwords and report any suspected security incidents to security@amritsmile.in immediately.
6. Your rights
Under the DPDPA and applicable Indian law, you have the right to: access the personal data we hold about you; correct inaccurate or incomplete personal data; erase your personal data where there is no compelling reason for us to continue processing it; and withdraw consent where processing is based on consent.
To exercise any of these rights, contact us at privacy@amritsmile.in. We will respond within 30 days and will not charge a fee for responding to a reasonable request.
8. Changes to this policy
We may update this Privacy Policy from time to time. We will notify you of any significant changes by posting the new policy on this page and updating the effective date below. We encourage you to review this Privacy Policy periodically.
Continued use of our services after the effective date of a revised policy constitutes your acceptance of the revised terms.
9. Contact us
If you have questions about this Privacy Policy, please contact our Data Protection Officer at: privacy@amritsmile.in
AmritSmile Technologies Pvt. Ltd. Bengaluru, Karnataka, India
Email our Data Protection Officer at privacy@amritsmile.in. We respond within 30 days.