Privacy Policy

This Privacy Policy ("Policy") describes how ODENVO ("ODENVO", "we", "us" or "our") collects, uses, discloses, retains and protects information relating to you ("personal data") when you visit odenvo.com, contact us through this website, submit an enquiry or early-access request, or use ODENVO services as they are made available. It applies to information processed by or on behalf of ODENVO as a data fiduciary under the Digital Personal Data Protection Act, 2023.

ODENVO is committed to handling personal, professional and business information lawfully, fairly and transparently, in accordance with applicable Indian law — including the Digital Personal Data Protection Act, 2023 ("DPDP Act"), the Information Technology Act, 2000 and the rules and regulations made under it — and, where we offer services to data principals located outside India, comparable international frameworks to which those processing activities are subject, such as the EU and UK General Data Protection Regulation (GDPR).

Please read this Policy carefully. By using this website or submitting information to us, you acknowledge the practices described in this Policy. If you do not agree with them, please do not use the website or submit information through it.

In this Policy: "data principal" means the individual to whom personal data relates (also referred to as "you"); "data fiduciary" means the entity that determines the purpose and means of processing personal data (in relation to this Policy, ODENVO); "processing" means any operation performed on personal data, including collection, storage, use, disclosure or erasure; and "consent" has the meaning given under the DPDP Act — a free, specific, informed, unconditional and unambiguous indication of your wishes, given through a clear affirmative action.

Words and expressions used but not defined in this Policy have the meanings given to them in the DPDP Act and the Information Technology Act, 2000.

Information you give us. When you use the contact form or the early-access form on this website, we collect the details you choose to provide: your name (contact form), your email address, the role or category you select, and the content of any message you send us. We use this information only to respond to your enquiry or, where you have given separate consent, to notify you when ODENVO opens registration. Fields that are not required for the purpose are optional, and you are never required to provide more than is needed for that purpose.

Professional and business information. When registration opens for ODENVO services such as Practice, Marketplace, Careers or Education, we will collect the professional and business details needed to provide each service — for example qualifications, professional registration details, clinic or business profiles, billing details, and preferences you choose to share. These services are not yet open; this Policy will be updated, and fresh notice and consent obtained where required, as each service launches.

Patient-related information. This website does not collect patient information. Within ODENVO Practice, patient records are created and managed by the dental clinics and dentists that use the platform. Clinics and dentists remain responsible for the patient data they choose to store in the platform and for their own compliance with their professional and legal obligations; ODENVO's role in relation to such data is to process it only on the clinic's documented instructions to provide, secure and support the service. See our Data Protection Policy for detail.

Technical information. Like most websites, our servers may process standard technical logs — such as IP address, browser and device type, referring pages and pages requested — to operate, secure and troubleshoot the website. We use this information for the strictly limited purposes of security, capacity and error diagnostics, and not to build advertising profiles.

We process personal data for the following purposes, on the following bases: to respond to your enquiry (your consent, and our legitimate interest in replying to you); to send launch notifications you have asked for (your consent, which you may withdraw at any time); to operate, secure, troubleshoot and improve the website (our legitimate interest); to provide ODENVO services once you register for them (performance of a contract, and further lawful bases where applicable law requires them); to comply with our legal obligations, including tax, accounting and record-keeping duties (legal obligation); and, in the limited circumstances described in this Policy, other purposes where applicable law permits or requires processing without consent.

We do not sell or rent personal data, and we do not use your contact details for advertising or marketing communications unless you have separately, specifically agreed to receive them. Essential service communications (for example, transactional or account-related messages) are kept separate from marketing communications, as described in our Communication & Notification Consent Policy. If you withdraw consent, we stop the relevant processing, subject to any overriding legal obligation to retain or process the data.

This website currently uses only what is strictly necessary to operate and does not set analytics, advertising or profiling cookies. If we add analytics or similar tools in future, they will be disclosed in our Cookie Policy beforehand and will only run with your prior consent, managed through a consent control on the site. You can change or withdraw your cookie consent at any time through that control, or by contacting us at the address given in this Policy.

We share enquiry details only with the service providers that help us operate this website and deliver email communications, and only to the extent necessary to respond to you or provide the service you asked for. These providers act as our processors (or sub-processors, as applicable): they process data on our documented instructions, under contractual confidentiality and security obligations, and do not use it for their own purposes. We do not otherwise disclose personal data except where required by law, legal process or a competent authority, or where necessary to establish, exercise or defend legal claims.

Where personal data is transferred outside India — for example, to a service provider located abroad — we will carry out the transfer only as permitted by applicable law (including any government notification restricting transfers to particular countries) and with appropriate safeguards such as contractual protections, and we will describe the transfer in this Policy or our Third-Party Services Policy.

Within ODENVO Practice, dentists and clinics are responsible for the patient information they record, including obtaining any consents required under their professional, ethical and legal obligations (including the DPDP Act, where applicable, and applicable clinical-establishment and medical-records requirements) and maintaining patient confidentiality. ODENVO processes patient data solely to provide, secure and support the service, on the clinic's instructions, and does not determine the purposes of that processing.

ODENVO does not use identifiable patient information to train, fine-tune or improve AI models unless a valid legal basis and appropriate consent or authorisation have first been established. Clinic administrators remain responsible for configuring user access and for the accuracy of the patient records their staff enter into the platform.

ODENVO AI capabilities, when launched, will process the information you input in order to provide assistance such as documentation support and summaries. AI output is assistive only: it may be inaccurate or incomplete, it does not replace the professional judgement or clinical responsibility of a qualified dentist, and clinical decisions remain with the treating professional. See our AI Usage & Clinical Disclaimer for full detail.

Subject to applicable law, you have the right to: access the personal data we hold about you and receive a summary of how it is processed; request correction, completion or updating of inaccurate or incomplete data; request erasure of your data where it is no longer necessary for the purpose collected; withdraw consent at any time, without affecting the lawfulness of processing before withdrawal; nominate another individual to exercise your rights in specified circumstances (including on death or incapacity, as recognised under the DPDP Act); and, where applicable law grants them, exercise additional rights such as restriction of processing, objection and data portability.

To exercise any of these rights, write to support@odenvo.com. We will respond within a reasonable period and in any case within the timelines applicable law provides, and will tell you if we cannot act on a request and why. If you use ODENVO from outside India and applicable law grants you additional rights — such as access, rectification, erasure, restriction, objection or portability under the EU or UK GDPR — we will honour those rights in accordance with that law, and you may also complain to your local supervisory authority.

We keep personal data only as long as necessary for the purposes described in this Policy, unless a longer period is required or permitted by applicable law (for example, statutory record-keeping or dispute-handling requirements). When data is no longer needed, we delete it or anonymise it so it can no longer be linked to you. Our Data Retention & Deletion Policy sets out the detail.

We apply reasonable technical and organisational safeguards appropriate to the nature of the information we hold, designed to protect it against loss, misuse, unauthorised access, disclosure, alteration or destruction. If a security incident affects your personal data, we will assess, contain and remediate it, and notify affected individuals and regulators as and to the extent applicable law requires. See our Data Security Policy.

ODENVO's services are intended for dental professionals, businesses and adults engaging with our services. We do not knowingly collect personal data from children. Where the DPDP Act applies to a child's data (a child being an individual under the age of eighteen), we will process it only in the manner and with the consents the Act requires, including verifiable parental consent where applicable. If you believe a child has provided us personal data, contact us and we will delete it.

We may update this Policy as ODENVO grows or as the law, our services or our processing activities change. The version number, effective date and last-updated date at the top of this page always reflect the current version. Where a change materially affects your rights or how we use your information, we will take reasonable steps to bring the change to your attention — for example, by a notice on this website — before or when it takes effect.

For privacy questions, requests or complaints, contact support@odenvo.com. If you are not satisfied with our response, you can escalate to founder@odenvo.com, and you may also have the right to complain to the Data Protection Board of India or another applicable authority. See our Grievance Redressal Policy for how complaints are handled, including the response timelines we aim to meet.

The name and contact details of our grievance officer, once appointed as required by applicable law, will be published on our Grievance Redressal Policy page.