Privacy policy

1. Data controller

The controller responsible for the data processing described below is La Côte Dentaire SA(IDE CHE-283.452.725), Rue de la Gare 1, 1162 Saint-Prex, Switzerland, contact: molinaroortho@gmail.com.

2. Data collected

Depending on your use of the Application, we process:

• Account data: email address, password (stored encrypted);
• Session data: technical authentication cookie (session token);
• Clinical data entered: periodontal statuses (patient identity entered by the practitioner, probing measurements, notes), entered manually or via voice dictation;
• Billing data: credit purchase history, processed by our payment provider, Stripe. We do not store any payment card data on our servers;
• Technical data: usage logs required for the proper functioning and security of the service.

3. Health data and the practitioner's role

Data entered in a periodontal status (a patient's identity and clinical measurements) constitutes health data under applicable law (Swiss nFADP and, where applicable, the GDPR for patients residing in the European Union). In this context, the practitioner using the Application acts as the data controller for their patients' data; PerioVoice AI acts as a data processor, processing this data solely to provide the service (displaying, saving, exporting the status) and according to the practitioner's instructions.

4. Artificial intelligence and transparency

Despite its name, PerioVoice AI currently uses no external artificial intelligence or natural language processing service to interpret, analyze, or process the data entered. Periodontal status entry is done manually or via the browser's native speech recognition (see section 8), without automated analysis by an AI model. No clinical or personal data is transmitted to an artificial intelligence provider (such as OpenAI, Google, Anthropic, or any other), nor used to train any model. This policy will be updated before any future introduction of an AI-based feature.

5. Purposes of processing

• Creating and managing the user account;
• Providing the service (entering, saving, and viewing periodontal statuses);
• Managing credits and payments;
• Security, fraud prevention, and technical maintenance;
• Improving the service.

6. Legal basis

Processing is based on the performance of the contract between the user and the publisher (providing the service), on the publisher's legitimate interest (security, service improvement), and, for patients' health data, on the instructions of the practitioner acting as data controller.

7. Retention period

Account data is retained as long as the account is active. Periodontal statuses are retained for the period necessary for clinical use as determined by the practitioner, unless deletion is requested. Billing data is retained in accordance with applicable accounting and tax obligations.

8. Recipients and processors

Data is accessible to the publisher's technical team within the scope of their duties, as well as to the technical providers necessary for the service to function, in particular:

• Stripe (payment processing);
• Clever Cloud SAS, 4 rue Voltaire, 44000 Nantes, France (hosting of the application and databases, HDS-certified);
• Resend (sending transactional emails, e.g. password reset);
• Google Analytics (Google LLC) — anonymized audience measurement, only with your consent (see cookie policy).

Voice dictation relies on the browser's native speech recognition (Web Speech API): audio is processed directly by the browser vendor (e.g. Google for Chrome), without passing through the publisher's servers.

No data is sold to third parties.

9. Security

Technical and organizational measures are implemented to protect data (password encryption, secure session cookies, restricted access), proportionate to the sensitivity of the data processed.

10. Your rights

Under the Swiss nFADP (and, where applicable, the GDPR), you have the right to access, rectify, erase, restrict, object to, and port your data. For patient data entered by a practitioner, these rights are exercised with the practitioner concerned, who acts as data controller. To exercise your rights regarding your account, contact us at molinaroortho@gmail.com. You also have the right to lodge a complaint with the Federal Data Protection and Information Commissioner (FDPIC, www.edoeb.admin.ch) or, where applicable, the CNIL (www.cnil.fr) for EU residents.

11. Changes

This policy may be updated; the last-updated date appears at the top of this page.