1. What We Collect

When you submit a report request, we collect:

• Practice information — practice name, owner name, city, state, practice type, staff counts, and insurance mix (as provided in the intake form)
• Email address — used to deliver your report
• P&L document — the financial document you upload for analysis
• Payment information — processed by Stripe; we do not store card numbers or payment credentials

2. How We Use Your Data

Your data is used to:

• Generate your benchmarking report
• Deliver your report to your email address
• Send you a confirmation and any follow-up communication you request
• Contribute anonymized, aggregated metrics to the DentalPNL benchmark database (see Section 3)

3. Anonymized Benchmark Database

DentalPNL is building a proprietary dental benchmarking database powered by real practice data contributed by dentist-owners like you. When you submit a report, a small set of fully anonymized metrics may be retained to improve the accuracy of industry benchmarks over time.

What is stored in aggregate (anonymized):

• Overhead percentage, collections range, net income %, practice score
• State, practice type (GP or specialty), years in practice range
• Period type (monthly, quarterly, annual)
• Key category percentages (staff, supplies, lab, facility, marketing)

What is never included in the anonymized benchmark database:

• Practice name, owner name, or email address
• Exact dollar amounts or total collections figures
• The original P&L document
• Any information that could identify your specific practice

This anonymized data helps DentalPNL build the most accurate dental-specific benchmarks in the industry — powered by real practice data from dentist-owners, not generic business surveys. You are contributing to a resource that benefits every dental practice owner who uses this platform.

This data is never sold to third parties and is used solely to improve DentalPNL's benchmarking accuracy.

4. P&L Document — Not Stored

Your Profit & Loss document is processed in real time by our AI analysis system and is never stored after your report is generated. It is not saved to any database, file system, or cloud storage. Once your report is emailed to you, the original document is gone.

The generated benchmarking report PDF (the output we create and email to you) is stored in Supabase Storage and linked to your submission record. This allows you to re-access your report in the future. The report contains only the benchmarking analysis — it does not contain your raw P&L data. You may request deletion of your stored report at any time by contacting us at hello@dentalpnl.com.

5. Email Retention

We retain your email address and practice name for transactional purposes — specifically to be able to contact you if there is a delivery issue with your report. We do not send unsolicited marketing emails. If you would like your email removed from our records, contact us at hello@dentalpnl.com copy.

6. Third-Party Services

We use the following third-party services to operate DentalPNL:

• Anthropic — AI analysis of your P&L. Your document is sent to Anthropic's API for processing. Anthropic's privacy policy governs their handling of API data.
• Supabase — Database and file storage. Your submission record (practice name, email, financial metrics, and generated report PDF) is stored in Supabase's infrastructure, hosted in the United States.
• Resend — Email delivery of your report. Your email address and report content are transmitted via Resend.
• Stripe — Payment processing. Stripe handles all payment data; we never see or store your card information.
• Vercel — Hosting and infrastructure. Your submission passes through Vercel's servers in the United States.

We do not sell, rent, or share your data with any other third parties.

7. Security

All data is transmitted over encrypted HTTPS connections. Our infrastructure runs on Vercel's enterprise-grade platform. Your original P&L document is never stored — data that isn't stored can't be breached. Generated report PDFs stored in Supabase Storage are protected by Supabase's access controls and are accessible only via a unique URL tied to your submission.

8. HIPAA

DentalPNL processes financial data (Profit & Loss statements), not patient health information. P&L documents do not constitute Protected Health Information (PHI) under HIPAA. However, we encourage you to ensure your P&L does not contain any patient-identifying information before uploading.

9. Children's Privacy

DentalPNL is a professional business service intended for dental practice owners. We do not knowingly collect data from anyone under the age of 18.

10. Your Rights

You may contact us at any time to:

• Request deletion of your email and practice name from our records
• Ask what information we have on file for you
• Request deletion of your stored report PDF
• Request a copy of any report we have sent you

11. Changes to This Policy

We may update this Privacy Policy periodically. The "Last updated" date at the top reflects the most recent revision. Continued use of the Service after changes constitutes acceptance of the updated policy.

12. Contact

Privacy questions or requests: hello@dentalpnl.com copy