Your privacy is
protected.

When you use SuperbDent's services, we may collect the following types of information to provide and improve our products:

• Patient digital impressions and intraoral scans (STL files and proprietary scanner formats)
• Practice and clinician contact information (name, address, email, phone number)
• Treatment prescriptions, clinical notes, and case history
• Account credentials and portal usage data
• Billing and payment information (credit card numbers, bank account details)
• Device information, IP addresses, and browser type when accessing our portal

We use the information we collect strictly for legitimate business and clinical purposes:

• Manufacturing clear aligners, retainers, and other dental appliances to your specifications
• Processing orders, payments, and shipping logistics
• Communicating order status updates, delivery tracking, and support responses
• Maintaining patient case records for reorders and treatment continuity
• Improving our products, services, and portal experience through aggregated analytics
• Complying with legal, regulatory, and HIPAA obligations

We retain your data only as long as necessary to fulfill the purposes described in this policy, or as required by law:

• Patient scan data and case records are retained for the duration of the clinician-patient relationship plus 7 years, per HIPAA requirements
• Billing records are retained for 7 years in accordance with financial regulations
• Portal usage and analytics data are retained in anonymized form for up to 3 years
• Account information is retained while your account remains active, and for 90 days after deletion request
• You may request data deletion at any time by contacting our team — we will process requests within 30 business days

Protecting your data — and your patients' data — is fundamental to how we operate. SuperbDent implements comprehensive security measures:

• Full HIPAA compliance — we execute Business Associate Agreements (BAAs) with all covered entities
• AES-256 encryption for data at rest and TLS 1.3 for all data in transit
• PCI DSS Level 1 compliant payment processing — we never store raw credit card numbers on our servers
• Role-based access controls, multi-factor authentication, and regular access audits
• Regular penetration testing and vulnerability assessments by independent third parties
• Documented incident response plan with 72-hour breach notification to affected parties as required by HIPAA
• All data is stored in SOC 2 Type II certified data centers within the United States

We work with a limited number of trusted third-party services to operate our business. Each is bound by contract to protect your data:

• Payment processors (PCI DSS compliant) for secure credit card and ACH transactions
• Shipping carriers for order delivery and tracking
• Cloud infrastructure providers (U.S.-based, SOC 2 certified) for data storage and computing
• Analytics tools (see Cookies & Analytics section) for portal usage insights
• We do not sell, rent, or trade your personal information or patient data to any third party
• All third-party vendors with access to protected health information (PHI) sign HIPAA-compliant Business Associate Agreements

You have rights regarding your personal information and patient data. We are committed to helping you exercise them:

• Access — request a copy of the personal data we hold about you or your patients
• Correction — request that we update or correct inaccurate information
• Deletion — request deletion of your data, subject to legal and regulatory retention requirements
• Portability — request your data in a commonly used, machine-readable format
• Opt-out — unsubscribe from marketing communications at any time (this does not affect transactional notifications)
• To exercise any of these rights, contact us at privacy@superbdent.com or through the portal

We use cookies and similar technologies to understand how our portal is used and to improve the experience:

• Essential cookies — required for portal authentication, session management, and security
• Analytics cookies — we use Google Analytics to collect anonymized, aggregated usage data (page views, session duration, feature usage)
• Google Analytics data is anonymized at collection — we do not track individual patient information through analytics
• You can disable non-essential cookies through your browser settings at any time
• We do not use advertising cookies or participate in ad tracking networks
• Our portal respects Do Not Track (DNT) browser signals

SuperbDent's portal and services are designed for licensed dental professionals. We do not knowingly collect information from minors:

• Our portal is intended for use by licensed clinicians and authorized practice staff only
• Patient scan data submitted by clinicians may include minors' dental records — this data is protected under HIPAA and handled with the same security as all patient data
• We do not knowingly collect personal information directly from individuals under 16
• If we become aware that we have collected data from a minor without proper authorization, we will delete it promptly

We may update this privacy policy from time to time. When we do, we will ensure you are informed:

• Material changes will be communicated via email notification to all registered portal users
• The "Last updated" date at the top of this page will always reflect the most recent revision
• Continued use of our services after a policy update constitutes acceptance of the revised terms
• Previous versions of this policy are available upon request

If you have questions about this privacy policy, your data, or how we handle patient information, please reach out:

• Email — privacy@superbdent.com
• Phone — available during business hours through our main line
• Portal — use the built-in messaging feature for secure communication
• Mail — SuperbDent LLC, Attn: Privacy Officer, address available upon request
• We respond to all privacy-related inquiries within 5 business days