Privacy Policy

1. Who operates this portal

Aligneazy Healthcare Private Limited operates Aligneazy Portal for registered partner dentists and authorised staff to manage aligner cases, treatment files, approvals, payments and dispatch. This policy explains how information is handled through the portal. For privacy questions, contact aligneazy@gmail.com.

2. Information we handle

• Account and professional details: name, email, telephone number, clinic, address, registration and tax details, and communication preferences.
• Patient case information supplied by dentists: patient name, age, gender, clinical notes, treatment instructions, scans, photographs, documents and treatment plans.
• Operational records: case history, approvals, quotations, payment amounts and references, courier details, and staff activity records.
• Technical and communication records: sign-in verification records, session cookies, request/security logs and notification delivery history.

Dentists should submit only information needed for the case and must have the necessary authority and patient permissions to share it. Patient information requires particular care, including information concerning children.

3. How information is used

We use information to authenticate users, administer dentist accounts, assess and fulfil cases, exchange treatment plans and approvals, reconcile payments, coordinate delivery, send service notifications, provide support, prevent misuse and maintain operational and legal records.

4. Google and Gmail user data

The portal connects to an authorised sending Gmail account using the gmail.send permission to send transactional notifications on that account’s behalf. The sender address is configured by the portal operator. The portal prepares outgoing recipients, subjects and message bodies from its own account and case records; notification content can contain case or payment information needed by the recipient. The current integration does not retrieve the Gmail profile or list, search, or read existing mailbox messages, their bodies, or attachments.

OAuth credentials and refresh tokens are held server-side to authorise this connection; they are not exposed to dentists through the portal. Access tokens are used to call Google’s API. Sent-message identifiers and delivery records may be retained to track delivery and avoid duplicate sends.

Google user data is used only to provide and support this email functionality, not for advertising, sale to data brokers or training general-purpose AI models. Access is limited to authorised personnel and service providers as necessary for operation, support, security or legal obligations.

Aligneazy Portal’s use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

The owner of the connected Google account can revoke access through Google Account connections. Revoking access stops future Gmail API access but does not automatically delete business records or messages already delivered. Contact us to request deletion of retained data.

5. Service providers and disclosures

For the Hostinger-hosted portal, providers include Hostinger for hosting, Supabase for database services, Google Cloud Storage for private files, Google/Gmail for notifications, Resend for sign-in emails, and Razorpay for payment processing. Providers process relevant information under their own applicable terms and privacy policies. Payment credentials entered in Razorpay’s payment interface are handled by Razorpay; the portal records payment references and statuses rather than full card details.

Case information is available to the submitting dentist and authorised staff as needed for fulfilment. Necessary dispatch information may be shared with delivery providers. We may also disclose information where required by law or to address fraud, security threats or legal claims.

6. Storage and security

Controls include authenticated access, role-based permissions, private file storage, time-limited file-access links and encrypted network connections. No system can guarantee absolute security. Keep sign-in codes private and avoid forwarding case-file links. Provider infrastructure may process data outside your location; contact us with questions about processing locations.

7. Retention and deletion

We retain account, case, payment and communication records for operational needs and applicable clinical, accounting, legal and dispute-resolution obligations. Retention depends on the record and purpose; this policy does not promise a single fixed deletion period. Backups and legally required records may remain after an account closes. Contact us to request deletion or details about retention for a particular record.

8. Your requests and choices

You may contact aligneazy@gmail.com to request access, correction or deletion, raise a privacy concern, or withdraw consent where applicable. We may verify your identity and authority before responding, and legal obligations may limit a request. Patients may contact their treating dentist or us; do not send clinical files or sign-in codes in an initial privacy enquiry.

9. Cookies

The portal uses session cookies needed to keep users signed in. Blocking or clearing these cookies can prevent sign-in or end your session.

10. Changes and contact

Updates will be published on this page with a revised date. Please review this policy when using the portal. Privacy contact: Aligneazy Healthcare Private Limited, aligneazy@gmail.com.