Privacy Policy

1. Data we collect

• Account data: your mobile number, used to sign you in via a one-time passcode.
• Profile data you provide: your name, clinic/practice details, city and state, role and specialisation, and preferences — captured during setup or in chat.
• Content you submit: your questions, and any images you upload (e.g. a photo of a product to identify or reorder). Images are processed to answer your request and are not used to identify patients.
• Usage data: interactions with the Service (such as questions asked and items saved) used to keep your experience relevant, plus standard technical logs.

We do not ask for, and you should not submit, any patient personal or health data, or special-category data about identifiable individuals.

2. How we use your data

• to provide, secure and improve the Service;
• to personalise answers and recommendations to your practice;
• to send you notifications and updates you have opted into;
• to respond to your requests and provide support;
• to comply with law and enforce our Terms.

3. Consent and your choices

We process your data based on the consent you give, or as otherwise permitted under the DPDP Act. Consent is specific — for example, marketing and WhatsApp updates are optional and asked for separately during setup. You can withdraw consent or change your choices at any time in Settings, or by contacting us; withdrawing consent does not affect processing already carried out.

4. Messaging

If you opt in, we may send you SMS or WhatsApp messages using DLT-registered templates and approved channels. You can opt out at any time in Settings or by following the instructions in the message.

5. Service providers and AI processing

We share data only with processors who help us run the Service, under contract and only as needed — for example: cloud hosting and database (Supabase), SMS/OTP delivery (MSG91), and AI model providers that power the assistant and search. When you ask the assistant a question, the content of that request (and any attached image) is sent to our AI providers to generate a response, and the assistant may query the public web to answer you.

We do not sell your personal data. We may disclose data if required by law or to protect rights and safety.

6. Storage, security and retention

We use reasonable technical and organisational safeguards, including access controls, to protect your data. No system is perfectly secure. We retain personal data for as long as your account is active and as needed for the purposes above or to meet legal obligations, after which we delete or anonymise it.

7. Your rights as a Data Principal

Subject to the DPDP Act, you have the right to:

• access a summary of your personal data and how it is processed;
• correct, complete or update inaccurate data;
• request erasure of your data and closure of your account;
• withdraw consent;
• nominate another individual to exercise your rights in the event of death or incapacity;
• raise a grievance with us, and to approach the Data Protection Board of India.

To exercise any of these, use the controls in Settings or contact us using the details below.

8. Children

The Service is intended for dental professionals aged 18 and above and is not directed at children. We do not knowingly collect data from children.

9. Cookies and local storage

We use only the cookies and local storage needed to keep you signed in and to run the Service (for example, your session and preferences). We do not use them for third-party advertising.

10. Grievance Officer

For any privacy question, request or complaint, contact our Grievance Officer (who also serves as our data protection contact):

• [Grievance Officer name]
• grievance@heybattis.com
• [Registered office address]

We aim to acknowledge and resolve grievances within the timelines required by law.

11. Changes to this policy

We may update this policy from time to time. If a change is material, we will take reasonable steps to notify you. The "Effective" date above shows when this version took effect.

12. Contact

Questions about your privacy? Write to support@heybattis.com.