Privacy policy

Who we are

Svamai Healthtech Private Limited (CIN U21000UP2026PTC249689), registered in Uttar Pradesh, India, operates this website and the Osdent and 1Dentist applications. For clinical records created by a clinic, the clinic is the data fiduciary and SVAMAI is its data processor. For this website and for patient accounts on 1Dentist, SVAMAI is the data fiduciary.

What we collect

• Account information: name, email address, mobile number, and for clinicians, professional registration details.
• Clinical information: only where you or your clinic enters it — history, findings, treatment plans, prescriptions, images and invoices.
• Usage information: pages and screens visited, device type, approximate region derived from IP address, and error diagnostics.
• Communication: messages you send us through forms, email or in-app support.

Why we process it

• To provide the service you or your clinic asked for.
• To keep records secure, available and recoverable.
• To send service messages such as appointment confirmations and recalls, through DLT-registered channels.
• To detect and prevent fraud, abuse and security incidents.
• To meet legal and regulatory obligations in India.

What we do not do

• We do not sell personal data, ever.
• We do not share identifiable clinical records with advertisers or data brokers.
• We do not train AI models on identifiable patient data.
• We do not use clinical data for any purpose the clinic or patient has not agreed to.

Artificial intelligence

Where AI features assist a clinician, processing is limited to the record the clinician is authorised to see, and outputs are drafts that require explicit human acceptance. Evaluation datasets are built from de-identified cases under agreement with the custodian clinic, and any clinic may opt out without losing product functionality.

Where data is stored

Personal and clinical data is stored in Indian regions of our cloud providers, encrypted at rest with AES-256 and in transit with TLS 1.3. Backups are encrypted and geographically redundant within India. A small number of processors — for error reporting, messaging delivery and payments — may process limited technical data outside India under contractual safeguards; we list them on request.

How long we keep it

Clinical records are retained for as long as the custodian clinic requires them, and in line with medical record retention expectations in India. Account data is retained while the account is active and for a limited period afterwards to meet legal obligations. Diagnostics and logs are retained for up to twenty-four months. Access logs on clinical records are retained for the life of the record.

Your rights

• Access a copy of the personal data we hold about you.
• Correct information that is inaccurate or incomplete.
• Export your records in a portable format.
• Withdraw consent, and where you are the patient, revoke a clinic’s access to your record.
• Request erasure where retention is not required by law.
• Nominate another person to exercise these rights on your behalf.

Making a request

Write to hello@svamai.in with the subject line “Data request”. We verify identity before acting and respond within thirty days. If your record was created by a clinic, we will route the request to that clinic and support them in fulfilling it. If you are not satisfied, you may escalate to the Data Protection Board of India.

Children

Accounts are for adults. Where a child is treated, a parent or guardian holds the account and provides consent. We do not knowingly create accounts for children, and we do not use children’s data for tracking or advertising.

Changes

When this policy changes materially we notify account holders by email and in-app at least fourteen days before it takes effect, and we keep previous versions available on request.