How Oralytix handles data
This covers what we collect from a practice account, what happens to imaging data that passes through the product, and the choices a practice and its patients have over both.
Template notice
This policy is written for a pre-pilot product and describes intended practice, not a finished legal document. Before real patient or practice data is processed, this should be reviewed and finalized by qualified legal counsel familiar with healthcare data regulation in each jurisdiction Oralytix operates in.
Three categories, kept separate
Oralytix collects and processes three distinct kinds of information, and they are stored separately rather than in one combined record.
- Practice account information — practice name, contact details, chair count, and the names and roles of team members with product access.
- Imaging data — radiographs and intraoral photographs uploaded for AI review, along with the AI findings and the dentist's confirm, dismiss, or modify decisions on each one.
- Usage data — how the product is used: pages visited, features used, and error or performance logs, collected to keep the service reliable.
Operating the product, not selling access to it
Information is used to run the AI review workflow, maintain the audit trail behind every finding, improve model accuracy using de-identified and aggregated data, respond to support requests, and meet legal and regulatory obligations. Imaging data is never used to train models across practices without a separate, explicit agreement, and it is never sold or shared with advertisers — there are none.
Encrypted, access-controlled, monitored
Radiographs and intraoral images are encrypted in transit and at rest in Amazon S3. Operational metadata — audit records, model version history, tooth-numbering schemas — is stored separately in Amazon RDS, isolated from clinical imaging content. Access is role-based: a practice's data is only visible within that practice's account, and system health is monitored continuously through Amazon CloudWatch so issues are caught early. Full detail is on the infrastructure section of the homepage.
Kept as long as the account is active
Imaging data and findings are retained for as long as a practice's account is active, since the imaging timeline and historical comparison features depend on prior studies remaining available. If a practice closes its account, data is retained for a limited window to allow export, then deleted according to a documented schedule — details are confirmed in the practice agreement signed before onboarding.
Access, correction, and export
A practice administrator can request an export of everything stored under their account, ask for specific records to be corrected, or request account and data deletion subject to any regulatory retention requirements that apply to clinical records. Patients should direct questions about their own imaging records to their dental practice directly, since the practice — not Oralytix — is the data controller for patient care records.
Minimal, and functional first
The marketing site uses essential cookies to remember basic preferences and lightweight, privacy-respecting analytics to understand which pages are useful. No third-party advertising trackers are used.
We'll say what changed
If this policy changes in a way that affects how practice or imaging data is handled, practices will be notified directly rather than being expected to check this page for updates.
Questions about this policy
Reach the team at hello@oralytix.ai or through the contact page. See also the Terms of Use and the Trust & Review page for how AI findings themselves are handled.
Ask us directly on a walkthrough
Procurement and compliance questions are easier to answer in a real conversation than in a static policy page.