This policy explains what we collect, why, and the control you have. The short version: your practice data stays with you, and we hold only what is needed to run your account.
Effective date: July 20, 2026
DentistOpFlow is operated by MarkR Management Inc. ("MarkR", "we", "us"), a company registered in Canada. This policy covers our website and the DentistOpFlow application. You can reach us about privacy at privacy@dentistopflow.com.
We deliberately collect very little. From you we collect your account email address and your mobile phone number (used to send the codes that verify your login), and optionally your practice name and number of licensed locations, plus your account or subscription status. It is designed not to collect patient health information.
Your practice's operational and financial data, your fees and costs, and any dentist or employee names you enter into DentistOpFlow stay in your own storage (a file you control or your own cloud drive). That data never reaches our servers. We also do not store your payment card details; those are handled entirely by our payment provider.
Subscriptions are sold and processed through Stripe Managed Payments, Stripe's Merchant of Record service, which acts as the Merchant of Record. When you subscribe, your payment details are collected and processed by Stripe under Stripe's own privacy policy. We receive only confirmation of your subscription status and the identifiers needed to manage it; we never see or store your full card number.
We use the limited information we hold to create and operate your account, to provide support, to send the login verification codes you receive by email and text message, to send service messages such as activation and billing notices, and to tell you about DentistOpFlow and relevant product updates. We do not sell, rent, or trade your information, and we do not use it for unrelated advertising.
We share the limited data we hold only with service providers who help us operate, each acting on our instructions: our database and authentication provider (Supabase, hosted in Canada), our application hosting provider (Vercel), our email delivery provider (Resend), our text-message (SMS) delivery provider for login codes (Twilio), and our payments provider and Merchant of Record (Stripe Managed Payments). We may also disclose information where required by law.
The account information we hold is stored in an access-controlled database hosted in Canada, protected by encryption in transit and at rest and by row-level security. Some providers listed above may process limited data outside Canada in order to deliver their service.
Sign-in is passwordless: at login you enter a code sent to your email and a code sent by text message to your mobile number, so there is no password to steal. Access is further protected by encryption and row-level security. No system is perfectly secure, but we keep the data we hold minimal by design, which is the strongest protection of all for your practice data.
You can access, correct, or delete the information we hold about you, and you can unsubscribe from product emails at any time. To make a request, email privacy@dentistopflow.com and we will respond promptly. You retain full control of your practice data because it lives in your own storage; you can delete it yourself at any time.
Our website and application use only the cookies and similar technologies needed to keep you signed in and to operate the service. We do not use them to track you across other websites.
DentistOpFlow is a business tool intended for dental practices and is not directed to children. We do not knowingly collect information from children.
We may update this policy from time to time. When we do, we will revise the effective date above and, for material changes, take reasonable steps to let account holders know.
For any privacy question or request, contact privacy@dentistopflow.com.