Dentigma · Terms and policies
Privacy and data protection notice
Parallax Software
Updated:
Scope and responsibilities
This notice explains the Dentigma website, business account, subscription, payment and support activities of Parallax Software. Its registration details appear below. The clinic determines the purposes of processing its patient and CRM records and is the controller for those records. Dentigma processes those records to provide the service under the clinic’s instructions. This notice does not replace the clinic’s notice to its patients.
Data and purposes
Account and authorised-user details, business contact details, billing data, order/payment references, support requests and technical/security records are processed to operate accounts, provide subscriptions, handle payments and invoices, support customers and protect the service. Clinic records may include contacts, appointments, treatment/offers, messages, attachments and enabled call recordings. We do not request patient files beyond authorised service needs.
Lawful grounds
For its own account, billing and support activities, Parallax Software relies on contract performance, legal obligations and legitimate interests balanced against individual rights under GDPR article 6. Separate consent is obtained where required for optional processing. Clinics identify the applicable GDPR article 9 condition and local requirements for health data. Clinic records are processed under the data processing agreement and documented instructions.
Payments and recipients
Payments for this region are processed through Stripe. Necessary data is shared with the payment provider, authorised infrastructure/support providers, relevant accounting/legal advisers and legally authorised authorities. Clinic-enabled communication and AI providers receive data only for the relevant feature and instruction. Do not include full card numbers or CVV in support messages.
AI and integrations
When an AI feature is enabled and authorised, relevant text or audio may be sent to the selected provider for the requested translation, summary, draft or transcription. Provider log retention depends on platform settings and provider terms; we do not promise that every request has zero retention. These terms do not authorise reuse for general model training. The account connection data policy also applies to Google/Meta integrations.
International transfers
Parallax Software operates in the Netherlands. Enabled infrastructure, AI, communication and authorised support services may involve processing outside the EEA, including access from Türkiye. An applicable GDPR chapter V transfer mechanism and any necessary supplementary measures must be in place. Contact us for information about providers and safeguards. An EEA-based provider does not mean that every part of the processing chain remains in the EEA.
Retention and deletion
Account and service records are retained for the active service and necessary support; invoice/transaction records for applicable tax and commercial retention periods; security records for periods proportionate to risk and investigation needs. Clinic records follow clinic instructions and data processing terms. Cancelling a subscription or disconnecting an integration does not automatically erase all history. Deletion requests distinguish active records, backup cycles and legal retention duties.
Your rights and requests
Where applicable under GDPR, you may request access, rectification, erasure, restriction and portability, and object to processing. You may withdraw consent for consent-based processing without affecting earlier lawful processing. You may complain to the Dutch Autoriteit Persoonsgegevens or another competent local supervisory authority. Requests are generally answered within one month, subject to lawful extensions and exceptions.
Contact and updates
For support and data requests, contact [email protected] and identify the relevant supplier and scope. For patient records, contact the responsible clinic first. Do not email passwords, payment secrets or patient files. Material changes are communicated through the relevant service channel; this page shows the current version date.
Google Limited Use
Parallax CRM’s use and transfer to any other app of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Google user data is not used for advertising targeting or training generalised AI models. Human access is limited to explicit permission for a specific operation, security/abuse investigation, legal duties or aggregated uses permitted by Limited Use. Connections send only data needed for the selected Google/Meta service and authorised action. This notice does not replace providers’ own privacy policies.
Account connections
Authorised connections may process account/business identifiers, advertising campaigns and performance, Analytics measurements, email subjects/content/headers/attachments, and messaging contacts, messages, files and delivery information. Google Ads uses adwords and Analytics uses analytics.readonly. Gmail API connections use gmail.readonly to receive and gmail.send only for user-approved messages; the earlier Gmail IMAP type uses mail.google.com. Gmail messages are not permanently deleted. Meta permissions locate authorised business accounts, read reports and perform approved messaging actions. Raw mail is parsed; derived aggregated/anonymised records remain subject to the same use and retention limits. Removing a connection clears its stored connection credentials and stops new incoming/outgoing operations; existing conversations, attachments and reports are not automatically deleted. Revoke provider permissions separately.