Privacy Policy

For your own account details — name, email, clinic name, billing records — Snanix decides how that information is used, and is responsible for it.

For the patient records inside your clinic, YOUR CLINIC decides what is collected and why. Snanix only stores and processes it on your instructions, as your service provider. We do not decide what goes into a patient file, and we do not use patient data for our own purposes.

Account information: your name, email address, clinic name, chosen language, role, and when you accepted these terms.

Billing information: the subscription's status and period. Card details are handled by our payment provider and never reach our servers.

Technical information needed to run and secure the Service: sign-in events, error logs, and basic request data.

Whatever your clinic records: patient identity and contact details, visit notes, tooth charts, treatments, appointments, payments and any files you attach, such as X-rays.

This is health information and is treated as sensitive. It is stored per clinic and separated so that one clinic cannot read another's records.

We access it only where necessary to run the Service — for example to investigate a fault you report, or where the law requires. We do not sell it, and we do not use it for advertising or for training external AI models.

We use a small number of providers to run the Service: cloud hosting and application delivery, a managed Postgres database, file storage for attachments, and an email provider for sign-in links and notifications. Payments are handled by our payment provider as merchant of record.

These providers process data on our behalf under their own contracts and security obligations. We do not add advertising or analytics vendors to your clinic's data.

Data is encrypted in transit. Access is restricted to what an account's role permits, and every request is scoped to a single clinic.

Sign-in uses emailed links or one-time codes rather than stored passwords, so there is no password database to leak.

No system is perfectly secure. If a breach affects your data we will tell you without undue delay and explain what happened.

Clinic and patient data is kept while the account is active. After an account closes it is retained for a limited period so it can be recovered or exported, then deleted.

Some records — invoices and payment history — are kept longer where accounting or tax law requires.

You can export your data yourself, at any time, from within the Service.

You may ask for a copy of the personal information we hold about you, ask us to correct it, or ask us to delete your account and its data.

Requests from a PATIENT about their own record should go to the clinic that holds it, not to us — the clinic decides what it keeps. We will support the clinic in answering.

To make a request, write to support@snanix.com.

If this policy changes materially we will notify account owners and publish the new version here with its version date.

Questions about privacy: support@snanix.com.