'Privacy Policy'

1. What we collect

Account details you give us: name, work email, practice or company name, locations, optional NPI, mobile number for text alerts, and the vendors, states and groups you watch.

Billing details are handled by our payment processor. We receive only the last four digits, card type and billing country.

Basic technical data: pages viewed, approximate region from IP address, browser type and errors, used to keep the site working.

2. What we never collect

We do not ask for, accept or store patient names, records, protected health information or any data from leaks. Do not upload such data in correction requests; we delete it on receipt.

3. Lookups and searches

"Was my dentist reported?" searches are not tied to your identity. We keep search terms only in aggregate, without IP addresses, to improve matching. Recent searches are stored on your own device.

4. How we use information

To deliver alerts, digests and reports you request; to operate and secure the site; to respond to corrections and support requests; and to send service notices. We send marketing email only if you subscribe, and every email has a one-click unsubscribe.

5. Sharing

We share information only with service providers that host the site, send email and text messages, and process payments, under contracts that restrict their use of it. We may disclose information if required by law. We do not sell or rent personal information, and we do not share it for cross-context advertising.

6. Retention

Account data is kept while your account is active and deleted within 90 days after closure, except where we must keep billing records for tax purposes. Correction requests and their outcome are kept as part of the public record’s change log.

7. Your choices and rights

You can access, correct, export or delete your account data from settings or by contacting us. Residents of states with consumer privacy laws, including California, may exercise rights to know, delete, correct and opt out. We will not discriminate against you for exercising them.

8. Security

Data is encrypted in transit and at rest. Access is limited to staff who need it, with multi-factor authentication. If a breach of our own systems affects your information, we will notify you as required by law and publish it on DDSBreach.

9. Children

DDSBreach is a professional service and is not directed to children under 16.