Privacy Policy

Dentral operates a practice management platform for dental clinics in Egypt. For account data of clinic owners, staff and DentralHub members, Dentral is the data controller. For patient data entered by clinics, the clinic is the controller and Dentral processes that data on the clinic's behalf (see our Data Protection statement).

Depending on how you use the Service, we collect:

• Account data — name, email address, phone number, password (stored as a salted hash), role and organization.
• Clinic data — clinic name, branches, addresses, staff lists, services and pricing.
• Patient data entered by clinics — demographics, contact details, medical and dental history, clinical notes, dental charts, imaging, prescriptions, appointments, invoices and payments.
• Billing data — subscription plan, seat counts, payment references and receipts you upload (e.g. Instapay proof of payment). Card payments, where offered, are processed by Stripe; Dentral does not store card numbers.
• Technical data — log data such as IP address, browser type and timestamps, used for security and troubleshooting.

We use personal data to:

• provide, operate and secure the Service;
• process subscriptions and payments;
• send service communications — appointment reminders, verification emails, billing notices (transactional messages, not marketing, unless you opt in);
• respond to support requests;
• monitor performance, prevent abuse and comply with legal obligations.

We process data to perform our contract with you, to comply with legal obligations, and for legitimate interests such as securing the platform. Where consent is required (for example, marketing communications), we ask for it separately and you may withdraw it at any time.

We do not sell personal data. We share data only with service providers needed to run the platform — hosting infrastructure, email delivery, SMS/WhatsApp messaging and card payment processing — under agreements limiting their use of the data, and with authorities where required by law.

Within the platform, your data is visible to members of your own organization according to their roles, and to patients only for their own records where patient-facing features apply.

Account and clinic data are retained while your account is active. After cancellation, data is kept in read-only state so you can export it, and is deleted upon your written request or after an extended inactivity period, except where retention is required by law (e.g. tax and accounting records, medical-record retention rules applicable to clinics).

We apply technical and organizational measures appropriate to health-related data: encrypted transport (TLS) for all traffic, hashed passwords, role-based access control per organization, encrypted storage of platform secrets, isolation between tenant organizations, and routine backups. See the Data Protection statement for more detail.

Subject to the PDPL, you may request access to, correction of, or deletion of your personal data, object to certain processing, and receive a copy of data you provided. Patients should direct requests about their medical records to their treating clinic (the data controller); we assist clinics in fulfilling such requests.

To exercise these rights, contact support@dentral.co. We respond within the timeframes required by applicable law.

The Service uses strictly necessary cookies and local storage for authentication sessions and preferences (language, theme). We do not use third-party advertising cookies.

We may update this Policy from time to time; material changes will be announced through the Service or by email. Questions or requests: support@dentral.co.