Who is responsible
- Patient data: the clinic is the controller. DentGrow acts as processor, under the data processing agreement in the “General Terms”, section 3.
- Account and billing data: DentGrow is the controller.
Protection
- Each patient's identifier is encrypted (AES-256) before it is stored.
- Isolation between clinics is enforced by the database itself.
- Operations on clinical data are logged.
Export: in your profile, “Clinic & billing” tab, choose “Export all clinic data (JSON)”. Any member can export.
Delete
- One patient: on the patient record, choose “Delete patient (GDPR)” and then “Confirm permanent deletion”.
- The whole organisation: in “Team”, choose “Delete organisation” (administrator only, after exporting the data and confirming the second step).
Good to know: the details are on the “Privacy Policy” and “Security” pages. For privacy questions, write to privacidade@dentgrow.pt. After the subscription ends, the data stays available to view and export for 12 months; we email you before deleting it.