Privacy Policy

1. Who We Are

2. What Data We Collect

• Account Information – name, email address, login credentials.
• Usage Data – IP address, browser type, device identifiers, pages visited, session duration.
• Content You Provide – data entered into tools (e.g., marketing inputs in Grader, presentation materials in Accept).
• Communications – inquiries, feedback, and support requests.
• Cookies & Tracking Data – information collected through cookies and similar technologies (see Section 5).

Note: We do not intentionally collect sensitive health data. If you upload treatment-related materials in Accept, ensure no personally identifiable patient data is included unless necessary and legally permitted.

3. How We Use Your Data

• Provide and operate our tools (Grader, Planner, Accept, Huddle).
• Improve our platform through analytics and performance monitoring.
• Personalize your experience and recommend relevant features.
• Respond to your support queries and communication requests.
• Prevent misuse, detect fraud, and maintain security.
• Send service updates or, with your consent, marketing communications.

4. Legal Bases for Processing

• Contractual Necessity – to provide you access to our services.
• Legitimate Interests – to improve services, ensure security, and analyze usage (balanced with your rights and expectations).
• Consent – for optional cookies, newsletters, or marketing communications.
• Legal Obligation – to comply with applicable law and regulatory requirements.

5. Cookies & Tracking

We use cookies and similar technologies to enable core website functionality, measure performance, and provide a more personalized experience. You can control preferences via your browser or our cookie banner. Non-essential cookies will only be set with your consent.

6. Sharing Your Data

• Service Providers – hosting, analytics, email delivery, and customer support (bound by GDPR-compliant contracts).
• Legal Authorities – where required by law or to protect rights.
• Business Transfers – in case of a merger, acquisition, or restructuring, subject to appropriate safeguards.

We do not sell your personal data.

7. Data Retention

We retain personal data only as long as necessary for the purposes described in this Policy or as required by law.

• Account data: until you request deletion or the account becomes inactive for a defined period.
• Usage data: typically anonymized or deleted within a reasonable timeframe.
• Support records: retained according to legal and operational requirements.

8. International Transfers

If your data is transferred outside your country, we ensure appropriate safeguards (e.g., EU Standard Contractual Clauses) where required by law, and only share with parties that provide adequate protections.

9. Security

• Encryption in transit (TLS/HTTPS).
• Role-based access controls and secure storage.
• Monitoring and vulnerability management.

No method of transmission or storage is completely secure; we cannot guarantee absolute security.

10. Your Rights (GDPR)

• Access – request a copy of your personal data.
• Rectification – correct inaccurate or incomplete data.
• Erasure – request deletion (“right to be forgotten”).
• Restriction – limit processing in certain circumstances.
• Portability – receive data in a machine-readable format.
• Objection – object to processing based on legitimate interests or for direct marketing.
• Withdraw Consent – at any time, without affecting prior lawful processing.

To exercise these rights, contact us at privacy@oralgrid.com. We will respond within applicable legal timeframes.

11. Children’s Privacy

Our services are not intended for individuals under 16 years of age. We do not knowingly collect personal data from children. If we learn we have done so, we will delete such data promptly.

12. Changes to this Policy

We may update this Policy periodically. Updates will be posted on this page with an updated “Last Updated” date. Where required, we will notify you via email or an in-product notice.

13. Contact Us