Privacy Policy
Effective Date: 02/01/2026
Last Updated: 02/24/2026
1. Introduction
This Privacy Policy ("Policy") governs the collection, use, disclosure, storage, and protection of information by The Digital Implant Laboratory and its affiliated entities (collectively, "Company," "we," "us," or "our") in connection with the use of our web-based laboratory management platform, websites, portals, and related services (collectively, the "Platform").
The Platform is hosted and operated on infrastructure provided by Base44 ("Base44" or "Hosting Provider"), an independent third-party hosting and software infrastructure provider.
By accessing or using the Platform, you agree to the terms of this Policy.
2. Scope of Policy
This Policy applies to:
- Licensed dental professionals and practices
- Authorized staff users
- Administrative users
- Visitors to our website
- Any other individual or entity accessing the Platform
This Policy does not govern third-party services that may integrate with the Platform.
3. Information We Collect
We may collect the following categories of information:
3.1 Account Information
- Name
- Practice name
- Email address
- Phone number
- Billing information
- Login credentials
3.2 Case and Patient Information
Users may upload or submit:
- Patient initials or identifiers
- Treatment plans
- Case notes
- Radiographs
- Photographs
- Medical or dental records
- Digital scans and related files
Such information may constitute Protected Health Information ("PHI") under applicable laws.
3.3 Usage Data
- IP address
- Device identifiers
- Browser type
- Access timestamps
- Platform usage analytics
3.4 Payment and Transaction Data
- Invoicing information
- Payment confirmations (Processed via third-party payment processors, if applicable.)
4. Purpose of Data Processing
We process information for the following lawful purposes:
- To provide dental laboratory services
- To facilitate case submission and tracking
- To communicate with users
- To process invoices and payments
- To improve Platform functionality
- To maintain system security
- To comply with legal obligations
5. Hosting and Third-Party Infrastructure
The Platform is hosted by Base44, a third-party hosting and infrastructure provider.
5.1 Infrastructure Responsibility
Base44 is solely responsible for:
- Server infrastructure
- Data storage systems
- System-level security controls
- Network security
- Cloud environment integrity
- Infrastructure-level data protection
5.2 Allocation of Liability
To the fullest extent permitted by law:
- Any data breach, cybersecurity incident, infrastructure compromise, or unauthorized access occurring at the hosting, server, database, or infrastructure level shall be the sole responsibility of Base44.
- The Company shall not be liable for any data breach, loss, corruption, interception, or unauthorized disclosure resulting from Base44's systems, infrastructure, or hosting environment.
- Users acknowledge that the Company does not control Base44's internal security architecture.
6. Data Security
We implement commercially reasonable administrative safeguards. However:
- The Company does not own or control the physical servers.
- Infrastructure-level security is managed by Base44.
- No method of transmission over the Internet is 100% secure.
- Users transmit data at their own risk.
7. HIPAA and Healthcare Compliance
Where applicable:
- Users are responsible for ensuring lawful disclosure of patient information to the Company.
- If required, Business Associate Agreements (BAAs) shall govern PHI handling.
- Infrastructure-level HIPAA safeguards, if required, are the responsibility of Base44 pursuant to its hosting terms.
- The Company makes no independent representation regarding Base44's HIPAA compliance.
8. Data Retention
We retain information:
- For as long as necessary to provide services
- As required by dental, tax, or regulatory obligations
- Until account termination, subject to legal retention requirements
Base44 may retain backup data pursuant to its own infrastructure policies.
9. Third-Party Services
The Platform may integrate with third-party services (e.g., payment processors, analytics providers). The Company is not responsible for the privacy practices of such third parties.
10. Limitation of Liability
To the maximum extent permitted by law, the Company shall not be liable for:
- Data breaches originating from Base44's infrastructure
- Cybersecurity incidents outside Company's direct control
- Unauthorized access resulting from user credential compromise
- Service interruptions caused by hosting failures
11. Indemnification
Users agree to indemnify and hold harmless the Company from any claims arising out of:
- Improper patient data submission
- Unauthorized PHI disclosure
- Violation of applicable healthcare laws by the user
12. Governing Law
This Policy shall be governed by the laws of the State of Tennessee, without regard to conflict of law principles.