Privacy information

Public website information

When you request a demonstration, ConphiDent stores the contact and clinic information you provide so the team can respond to your enquiry. Do not submit patient health information through the demo form.

Clinic application data

Each clinic workspace is account-controlled and access is limited by staff role. Clinics remain responsible for entering accurate data, obtaining required patient permissions, and using the platform in accordance with applicable law and their agreement with ConphiDent.

Signing up and signing in with Google

If a dentist chooses “Continue with Google”, Google tells ConphiDent the name, email address and account identifier of the Google account they pick, and whether Google has verified that email. We use them only to create that dentist’s workspace, fill in their name on the sign-up form, and sign them in later. We ask Google for nothing else: no access to Gmail, contacts, Drive or any other Google data. We do not keep the profile picture Google offers, and we do not share what Google tells us with anyone.

Payments

The sign-up fee and the maintenance fee are collected by Razorpay Software Private Limited. Card, UPI and bank details are typed into Razorpay’s own payment window and go to Razorpay, not to ConphiDent. We keep only whether each payment succeeded and Razorpay’s reference numbers for it.

WhatsApp communications

Clinic staff must send WhatsApp messages only to confirmed numbers and with appropriate consent. A recipient may reply STOP, UNSUBSCRIBE, or an equivalent request to stop non-essential WhatsApp communications; they can reply START to opt in again.

Service providers

ConphiDent uses a small number of service providers, which process information only on our instructions and only in order to run the platform. The application and its runtime logs are hosted by Vercel. Clinic records, WhatsApp conversations and encrypted credentials are held in a managed PostgreSQL database provided by Supabase. Both run in the Mumbai (India) region, and each vendor may access that infrastructure remotely from the United States in order to support it. Resend delivers transactional email such as sign-up codes, password resets and laboratory notices. Where a clinic uses WhatsApp, Meta Platforms Ireland Limited and its affiliates operate the WhatsApp Business Platform that carries those messages: a patient’s WhatsApp number and the content of every message sent or received through it are transmitted to and processed by Meta, on Meta’s own infrastructure and under Meta’s terms, in order to deliver them. Message templates a clinic uses are submitted to Meta for review before they may be sent. When a patient asks on WhatsApp for their own latest bill or prescription, it is sent to them as a PDF through the WhatsApp Business Platform, and Meta processes it in order to deliver it. ConphiDent does not otherwise send clinical records, billing documents or imaging to Meta; other documents are shared as expiring links that open inside ConphiDent after the recipient is authenticated.

What we record about consent

For every patient WhatsApp number a clinic messages, ConphiDent keeps a consent ledger: what was consented to, when, how it was obtained, and every later change including a withdrawal. A patient who replies STOP is recorded as withdrawn and is excluded from further automated messages until they reply START. This record exists so a clinic can show, for any individual message, the basis on which it was sent.

Automated replies and AI processing

Where a clinic switches on the automated WhatsApp assistant, the patient’s message, the recent messages in that conversation, that patient’s own upcoming appointment dates, times and treatment names, and, when the patient asks what they owe, their name as recorded by the clinic and the numbers, dates and amounts of their unpaid bills are sent to OpenAI in the United States so that a reply can be generated. The patient’s WhatsApp phone number and the clinic’s Meta credentials are never sent, though the conversation history does include whatever the patient has typed, which may include their name. Staff can set any conversation to human replies or pause it, and nothing from that conversation is then sent to OpenAI.

Retention and deletion requests

We retain information only for as long as needed to operate the service, meet legal obligations, resolve disputes, and enforce agreements. A clinic or individual may request access, correction, or deletion by following our data deletion process. Requests are reviewed after identity and authority are verified.

Product previews

Public product screenshots use sanitized, fictional demonstration data and are not real patient records.

Contact

For privacy questions, email contact@conphident.live with the subject “Privacy request”.

Last updated: 10 October 2026.