Privacy Policy

This policy applies to visitors of clinafix.com and to the staff accounts of dental clinics ("Customers") that use the ClinaFix application. It does not apply to a Customer's own patients directly — see "Patient data entered by Customers" below for how that's handled.

Site visitors: if you request a demo, start a trial, or contact us, we collect the name, email, phone number, and clinic name you provide.

Customer accounts: account holder name, email, clinic name and locations, staff usernames, and billing contact information. Payment card details are handled directly by our payment processor (Stripe) — we never see or store full card numbers.

Patient data entered by Customers: when a clinic uses ClinaFix to record patient records, visits, treatment plans, or billing, that data belongs to the clinic. The clinic is the data controller for its own patients' information; ClinaFix acts only as a data processor, storing and processing that data solely as instructed by the clinic that entered it.

To provide and operate the ClinaFix application for Customers.

To respond to demo requests, trial signups, and support inquiries.

To send account-related notices (billing, security alerts, product updates a Customer has opted into).

We do not sell personal information, and we do not use a clinic's patient data for our own marketing or analytics purposes.

ClinaFix runs on Vercel (application hosting) and Neon (PostgreSQL database hosting), with encryption in transit and at rest as provided by those platforms.

Every clinic's data is scoped to that clinic's own account at the database level — one clinic's records are never visible to another. See our Security page for more detail on how this is enforced.

Passwords are stored as one-way hashes, never in plain text. Third-party integration tokens (such as a connected Google Calendar) are encrypted separately from the rest of a clinic's data.

We use a small number of sub-processors to operate the service, each limited to what it needs to perform its function: Vercel (application hosting), Neon (database hosting), Stripe (subscription billing and payment processing), Resend (transactional email delivery), and Google (Calendar sync, only for clinics that explicitly connect a Google account).

We do not share Customer or patient data with any other third party except as required by law or as necessary to provide the service.

We retain a Customer's account and patient data for as long as the account is active, and for a reasonable period after cancellation in case of reactivation, unless the Customer requests earlier deletion. Site-visitor contact information (demo requests, trial signups that don't convert) is retained only as long as reasonably needed to follow up.

You may request access to, correction of, or deletion of personal information we hold about you by contacting us at the address below. Clinic Customers can export or delete their own account's data directly; requests concerning a specific clinic's patient should generally go to that clinic, since the clinic — not ClinaFix — controls that data.

We use essential cookies to keep you signed in and to remember basic preferences (such as your language choice on this marketing site). We do not use third-party advertising cookies.

clinafix.com and the ClinaFix application are intended for dental-practice staff and administrators, not for use directly by children. A clinic's patient records may of course include information about pediatric patients, entered and controlled by the clinic itself as described above.

Allea Solutions is based in Canada, and our infrastructure providers operate data centers in multiple regions. By using ClinaFix, you acknowledge that information may be processed outside the country where you or your clinic is located.

We may update this policy from time to time. We'll post the revised version here with an updated effective date.

Questions about this policy can be sent to hello@alleasolutions.com.