Privacy Policy

Last Updated: July 11, 2026

At Orion Dentals, we understand that medical and clinical data requires the highest tier of security and confidentiality. This Privacy Policy outlines how we collect, protect, and handle data within our multi-tenant practice management platform.

---

A. Information We Collect

• Account Information: When a clinic administrator registers for an account or requests access, we collect basic corporate details including the lead doctor�s name, clinic name, email address, phone number, and billing details.
• Patient Data (Operational Content): Any patient records, medical histories, appointment timelines, or inventory logs you input into the dashboard are securely hosted in isolated database tables. You retain full ownership of this data.

B. Security Architecture & Data Isolation

• Row-Level Security (RLS): Our platform architecture utilizes strict database layer Row-Level Security (RLS) policies. This guarantees absolute data isolation; your staff can only interact with data mapped exclusively to your clinic identifier, preventing cross-tenant leaks.
• Encryption: All communication between your web browser and our platform is protected using Industry-Standard Transport Layer Security (TLS/SSL) encryption. Data at rest is securely encrypted on cloud servers.

Third-Party Disclosures

We do not sell, trade, or transfer clinical patient data to outside marketing parties. Data is only shared with trusted infrastructure partners necessary to run your application (such as secure cloud hosting environments and verified payment gateways like Stripe or Razorpay).