Data Protection Policy

ODENVO is building digital infrastructure for dental practice. Protecting the information entrusted to us is part of that responsibility.

This policy explains how data protection applies to this website today and how ODENVO services are being designed with data protection in mind, in line with applicable Indian law, including the Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000 and rules made under it, and comparable international frameworks where we serve users who benefit from them.

This marketing website collects only what you choose to share through the contact and early-access forms: your name (where asked), email address, role and message. It is used to respond to your enquiry or, with your consent, to notify you when registration opens.

This website does not create accounts, process payments or host clinical records.

For information you share with us directly, ODENVO decides how it is used within the purposes in our Privacy Policy and is responsible for protecting it.

For patient records stored in ODENVO Practice, the dental clinic and dentist are responsible for the patient data they create and for meeting their own professional and legal confidentiality obligations. ODENVO will process that data on the clinic's instructions to provide, secure and support the service, and will assist clinics in meeting their data protection duties. Access to patient records will be restricted to the clinic's authorised users.

ODENVO Practice is being developed so that clinic records remain accessible securely within the clinic, following established security practices for access control, encryption in transit and careful handling of clinical data.

As ODENVO Practice moves towards launch, detailed data protection commitments for the product — including hosting, retention and clinic control over records — will be published before any practice relies on it for patient records.

We apply reasonable technical and organisational measures appropriate to the data we hold, and we do not claim security certifications or specific encryption standards until they are verified and published. If a security incident affects personal information, we will assess, contain and remediate it, and notify affected individuals and regulators as applicable law requires. Detail is set out in our Data Security Policy.

ODENVO does not use identifiable patient information to train AI models unless a valid legal basis and appropriate consent or authorisation have been established. ODENVO AI features are assistive only and do not replace the professional judgement or clinical responsibility of a qualified dentist. See our AI Usage & Clinical Disclaimer.

We keep information only as long as needed for the purpose it was collected or as required by law. Our Data Retention & Deletion Policy and Account Deletion Policy explain timeframes and how deletion works when accounts exist.

You can ask to access, correct, export or delete the personal information we hold about you, or withdraw a consent, by writing to support@odenvo.com. Where you use ODENVO from outside India, we will honour comparable international privacy rights (such as access, rectification, erasure, restriction, objection and portability) in accordance with applicable law.

Where ODENVO serves users outside India, we will apply the safeguards required by the applicable law of those users, including lawful transfer mechanisms where data crosses borders. As international availability develops, this policy will be updated with the specific safeguards that apply.

For data protection questions, requests or complaints, contact support@odenvo.com; unresolved concerns can be escalated to founder@odenvo.com and, where applicable, to the Data Protection Board of India. See our Grievance Redressal Policy for how complaints are handled.