Last Updated: January 1, 2025

INTRODUCTION

Dentacloud Technology Inc. (“Dentacloud,” “we,” “us,” or “our”) operates the Dentacloud Connect platform and related services (collectively, the “Platform” or “Services”). We are committed to protecting your privacy and handling your personal information responsibly.

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Platform. Please read this policy carefully. If you do not agree with the terms of this Privacy Policy, please do not access or use the Platform.

Our Address:

Dentacloud Technology Inc.

1500 Royal York Road

Toronto, ON M9P 3B6

Canada

Email: info@dentacloud.ai

INFORMATION WE COLLECT

We collect information that you provide directly to us, information we obtain automatically when you use our Platform, and information from third-party sources.

1. Account Information

When you create an account with Dentacloud Connect, we collect:

• Name and contact information (email address, phone number, physical address)

• Business information (practice name, location, ownership preferences)

• Login credentials (username and password)

• Communication preferences

2. Practice Data and Financial Information

To provide practice valuations and M&A advisory services, we collect detailed information about your dental practice, including:

• Financial documents: Bank statements, asset lists, invoices, tax filings, and Notice to Reader financial statements for the prior three years

• Practice management software reports: Production reports, collection reports, and accounts receivable reports for the prior three years

• Employee information: Employment agreements (including associate agreements), employee details, and payroll information

• Operational data: Chart audits, inspections, patient volume and demographics

• Lease agreements: Current lease agreements binding the practice

• Physical location information: Practice blueprints, Ministry of Health requirement approvals, and facility details
• Equipment and asset information: Lists and valuations of practice equipment and assets

• Other business-related information: Any additional data relevant to practice valuation

3. Data Extraction Software Information

When you install our data extraction software on your practice management systems, we automatically collect:

• Data specified in our Terms of Use necessary for generating practice valuations

• System information required for software operation and troubleshooting

• Usage logs and performance data related to the software

4. Usage Information

We collect information about how you interact with our Platform, including:

• Features and services you use

• Pages and content you view

• Actions you take (uploading documents, requesting valuations, etc.)

• Time, frequency, and duration of your activities

• Search queries and results

5. Device and Technical Information

We automatically collect certain information from the devices you use to access our Platform:

• IP address

• Browser type and version

• Device type, operating system, and unique device identifiers

• Internet service provider

• Referring/exit pages and URLs

• Date and time stamps

• Clickstream data

• Geographic location information (based on IP address)

6. Cookies and Similar Technologies

We use cookies, web beacons, pixel tags, and similar tracking technologies to collect information about your browsing activities. These technologies help us:

• Remember your preferences and settings

• Understand how you use our Platform

• Improve our Services

• Deliver relevant content and advertisements

• Analyze Platform performance

You can control cookie settings through your browser, but disabling cookies may limit your ability to use certain features of our Platform.

7. Communications and Feedback

We collect information when you:

• Contact us via email, phone, or other means

• Participate in surveys or provide feedback

• Subscribe to newsletters or marketing communications

• Request customer support

HOW WE USE YOUR INFORMATION

We use the information we collect for the following purposes:

Service Delivery

• Provide, operate, and maintain the Platform

• Generate practice valuations and reports

• Process and complete transactions

• Provide M&A advisory services

• Deliver customer support and respond to inquiries

• Install, operate, and maintain our data extraction software

Platform Improvement and Development

• Analyze usage patterns and trends

• Develop new features and services

• Improve our valuation algorithms and methodologies

• Conduct research and analytics

• Test and troubleshoot new products and features

Communication

• Send you service-related announcements and updates

• Respond to your comments, questions, and requests

• Provide technical support

• Send marketing and promotional communications (with your consent)

• Notify you about changes to our Services

Business Operations

• Create aggregated, anonymized data for benchmarking and industry analysis

• Comply with legal obligations and enforce our Terms of Use

• Protect against fraud, security threats, and illegal activity

• Resolve disputes and enforce agreements

• Conduct internal audits and quality assurance

Legal Basis for Processing (for users in jurisdictions requiring this disclosure)

We process your personal information based on:

• Consent: Where you have given explicit consent for specific processing activities

• Contract: To fulfill our contractual obligations to provide Services to you

• Legitimate interests: For our business operations, improving Services, and fraud prevention

• Legal obligations: To comply with applicable laws and regulations

How We Share Your Information

We do not sell your personal information to third parties. We may share your information in the following circumstances:

Service Providers and Business Partners

We share information with trusted third-party service providers who perform services on our behalf, including:

• Cloud storage and hosting providers

• Data analytics providers

• Customer support services

• IT and security services

• Marketing and communication platforms

These service providers are contractually obligated to use your information only as necessary to provide services to us and are required to maintain the confidentiality and security of your information.

Business Transfers

If we are involved in a merger, acquisition, reorganization, sale of assets, bankruptcy, or other business transaction, your information may be transferred as part of that transaction. We will notify you via email and/or a prominent notice on our Platform of any change in ownership or uses of your personal information.

Legal Requirements and Protection

We may disclose your information when required by law or when we believe in good faith that disclosure is necessary to:

• Comply with legal obligations, court orders, or government requests

• Enforce our Terms of Use or other agreements

• Protect the rights, property, or safety of Dentacloud, our users, or the public

• Prevent fraud, security threats, or illegal activity

• Respond to claims that content violates third-party rights

With Your Consent

We may share your information with third parties when you explicitly consent to such sharing.

Aggregated and Anonymized Data

We may share aggregated, anonymized data that cannot identify you personally with:

• Industry researchers and analysts

• Potential business partners

• The public, for benchmarking and industry reporting purposes

Data Storage and Security

Data Location

Your information is stored on secure cloud servers. Data may be stored and processed in Canada and other jurisdictions where our service providers operate. By using our Platform, you consent to the transfer and processing of your information in accordance with this Privacy Policy and applicable privacy laws, including the Personal Information Protection and Electronic Documents Act (PIPEDA).

Security Measures

We implement commercially reasonable security measures to protect your information from unauthorized access, use, alteration, and disclosure. However, no method of transmission over the internet or electronic storage is completely secure. While we strive to protect your personal information, we cannot guarantee absolute security.

Your Responsibility

You are responsible for maintaining the confidentiality of your account credentials and for all activities that occur under your account. Please notify us immediately of any unauthorized use of your account.

Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

Account Data: We retain your account information and practice data for as long as your account is active or as needed to provide you Services.

Deleted Accounts: If you request deletion of your account, we will initiate deletion of your information within 30 days. However:

• Some information may remain in our backup systems for a limited period

• We may retain certain information as required by law, to resolve disputes, enforce our agreements, or for legitimate business purposes
• Aggregated, anonymized data derived from your information may be retained indefinitely

Legal and Business Records: We may retain certain information for longer periods when required for legal compliance, tax purposes, or legitimate business operations.

Your Privacy Rights and Choices

Depending on your location, you may have certain rights regarding your personal information:

Access and Portability

You have the right to:

• Access the personal information we hold about you

• Request a copy of your information in a structured, machine-readable format

• Export your practice data from the Platform

Correction and Update

You can:

• Update your account information through your account settings

• Request corrections to inaccurate or incomplete information

• Contact us to update information you cannot change yourself

Deletion

You may request deletion of your personal information by emailing info@dentacloud.ai. Please note that:

• We will review and process deletion requests in accordance with our policies

• Some information may be retained as described in the Data Retention section

• Deletion may limit or prevent your ability to use the Platform

Objection and Restriction

You may:

• Object to certain processing activities

• Request restriction of processing in specific circumstances

• Withdraw consent for processing based on consent (without affecting prior processing)

Marketing Communications

You can opt out of marketing communications by:

• Clicking the “unsubscribe” link in marketing emails

• Updating your communication preferences in your account settings

• Contacting us at info@dentacloud.ai

Do Not Track

Some browsers have “Do Not Track” features. Our Platform does not currently respond to Do Not Track signals.

Exercising Your Rights

To exercise any of these rights, please contact us at info@dentacloud.ai. We will respond to your request within the timeframe required by applicable law. We may need to verify your identity before processing your request.

Third-Party Services and Links

Our Platform may contain links to third-party websites, services, or applications that are not owned or controlled by Dentacloud. This Privacy Policy does not apply to third-party services.

We are not responsible for the privacy practices of third parties. We encourage you to review the privacy policies of any third-party services before providing them with your information.

If you connect third-party services to your Dentacloud account (such as through APIs), those third parties’ use of your information will be governed by their own privacy policies.

Children’s Privacy

Our Platform is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If we learn that we have collected information from a child under 18, we will delete that information promptly. If you believe we have collected information from a child, please contact us at info@dentacloud.ai.

International Data Transfers

If you are accessing our Platform from outside Canada, please be aware that your information may be transferred to, stored, and processed in Canada and other countries where our service providers operate. These countries may have data protection laws that differ from those in your country.

By using our Platform, you consent to the transfer of your information to Canada and other jurisdictions as described in this Privacy Policy. We take steps to ensure that your information receives adequate protection in accordance with applicable privacy laws.

Privacy Laws Compliance

Canadian Privacy Laws (PIPEDA)

We comply with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy laws. Under PIPEDA, you have rights regarding your personal information, including the right to access, correct, and challenge our compliance with privacy laws.

Quebec Residents

If you are a resident of Quebec, you have additional rights under Quebec’s privacy legislation, including Law 25. You have the right to access, rectify, and request deletion of your personal information, as well as the right to data portability.

Additional Rights for International Users

Depending on your location, you may have additional privacy rights under local laws, including the EU General Data Protection Regulation (GDPR), California Consumer Privacy Act (CCPA), or other applicable privacy legislation.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make changes, we will update the “Last Updated” date at the top of this policy.

Material Changes: If we make material changes that significantly affect your privacy rights, we will notify you by:

• Sending an email to the address associated with your account

• Posting a prominent notice on our Platform

• Other appropriate means

Your Continued Use: Your continued use of the Platform after changes to this Privacy Policy constitutes your acceptance of the updated policy. We encourage you to review this policy periodically.

Contact Us and Complaints

If you have questions, concerns, or complaints about this Privacy Policy or our privacy practices, please contact us:

Email: info@dentacloud.ai

Mail:

Dentacloud Technology Inc.

1500 Royal York Road

Toronto, ON M9P 3B6

Canada

Privacy Complaints

We are committed to resolving privacy complaints in accordance with applicable privacy laws. If you have

• complaint:

1. Contact us first: Please submit your complaint to info@dentacloud.ai.

2. Office of the Privacy Commissioner of Canada: If you are not satisfied with our response, you have the right to file a complaint with the Office of the Privacy Commissioner of Canada:

o  Website: www.priv.gc.ca

o  Toll-free: 1-800-282-1376

3. Provincial Privacy Commissioners: Depending on your location in Canada, you may also contact your provincial privacy commissioner.

Data Protection Authorities

If you are located outside Canada, you may have the right to lodge a complaint with your local data protection authority.

Additional Information

Automated Decision-Making

We may use automated processes, including algorithms and machine learning, to generate practice valuations. These automated decisions are based on the data you provide and our proprietary valuation methodologies. You have the right to request human review of automated decisions that significantly affect you.

Sensitive Information

We may collect financial and business information that you consider sensitive. We handle this information with heightened security measures and use it only for the purposes described in this Privacy Policy.

By using Dentacloud Connect, you acknowledge that you have read and understood this Privacy Policy and agree to its terms.