Privacy Policy

Effective Date: December 17, 2025
Last Updated: December 17, 2025

1. Introduction

Welcome to Fixmysmile AI ("we," "our," or "us"). Fixmysmile AI is an AI-powered dental lead generation platform that helps users visualize potential dental treatments through advanced AI simulation technology and connects them with qualified dental professionals. We are committed to protecting your privacy and ensuring the security of your personal information.

This Privacy Policy explains:

What information we collect and why
How we use, store, and protect your data
Who we share your information with
Your rights and choices regarding your information
How to opt-out of communications
How we comply with TCPA, GDPR, CCPA, and other privacy regulations

By using Fixmysmile AI, you agree to the collection and use of information in accordance with this policy.

2. TCPA Consent and Telephone Contact Disclosure

2.1 Telephone Consumer Protection Act (TCPA) Notice

IMPORTANT: PLEASE READ CAREFULLY

By submitting your phone number on our website, you expressly consent and agree to the following:

Consent to Contact: You provide prior express written consent to receive telephone calls (including calls made using an automatic telephone dialing system or prerecorded voice) and text messages (SMS/MMS) from Fixmysmile AI and our third-party partners, dental networks, and affiliated dental professionals regarding:
- Dental treatment consultations
- Appointment scheduling
- Follow-up communications
- Promotional offers related to dental services
Multiple Contacts: You understand and agree that you may be contacted by multiple dental professionals, dental networks, or marketing partners who may provide dental services in your area.
Message Frequency: Message frequency varies. Standard message and data rates may apply.
Not Required for Purchase: Consent is not a condition of purchasing any goods or services. You may proceed without providing consent by not submitting your phone number.
Revocation of Consent: You may revoke your consent at any time by:
- Replying "STOP" to any text message
- Emailing us at [email protected] with the subject "Opt-Out"
- Calling us and requesting removal from our contact list

3. Information We Collect

3.1 Information You Provide to Us

Contact Information (Lead Capture)

Phone Number (Primary): Required when requesting a callback from a dental specialist
Email Address: For appointment confirmations and follow-up communications
Name: To personalize your experience and communications
Zip Code/Location: To match you with local dental professionals

Account Information (If Registered)

Name, email address, and password
Profile information (optional: profile picture)
Payment information for premium features (we utilize secure third-party processors like Stripe; we do not store full credit card details)

User-Generated Content

Facial Images: Photos you upload for AI smile simulation
Generated AI Images: Simulation results showing potential dental treatments
Comments, feedback, and communications with our support team

Treatment Preferences

Type of dental treatment interested in (Invisalign, dental implants, veneers, teeth whitening, etc.)
Budget range preferences
Timeline preferences

3.2 Information We Collect Automatically

Usage Data

Pages viewed, features used, and time spent on the platform
AI simulation requests and activities
Button clicks, navigation patterns, and interaction data

Device and Technical Information

IP address, browser type, and version
Device type, operating system, and screen resolution
Cookies and similar tracking technologies (see Section 8)
Referral source and campaign tracking data

Performance Data

Error logs and diagnostic information
API response times and service performance metrics
Feature adoption and engagement analytics

3.3 Information from Third Parties

Authentication Providers

If you sign in using Google, we receive basic profile information (name, email, profile picture) as permitted by the provider

Payment Processors

Payment confirmation and subscription status from payment providers
We do not store your full credit card numbers

4. How We Use Your Information

We use the collected information for the following purposes:

4.1 Connecting You with Dental Professionals

Lead Distribution: Share your contact information with qualified dental professionals in your area who can provide the services you're seeking
Callback Services: Facilitate callbacks from dental specialists as requested
Appointment Coordination: Help coordinate consultations and appointments

4.2 Providing and Improving Our Services

AI Processing: Process your uploaded images and generate AI smile simulations
Account Management: Create and manage your account, authenticate your identity
Platform Optimization: Improve AI accuracy, user interface, and feature performance
Customer Support: Respond to your inquiries and provide technical assistance

4.3 Communication

Service Updates: Send important notifications about service changes, maintenance, or security updates
Treatment Information: Share educational content about dental treatments you've expressed interest in
Marketing: Send promotional emails about dental services and offers (with your consent; opt-out available)

4.4 Analytics and Research

Usage Analytics: Understand how users interact with our platform to improve the service
A/B Testing: Test new features and design improvements
Market Research: Anonymized data may be used for research (never shared without aggregation)

4.5 Legal and Security

Fraud Prevention: Detect and prevent unauthorized access, abuse, or security breaches
Legal Compliance: Comply with legal obligations, court orders, or government requests
Terms Enforcement: Enforce our Terms of Service and protect user safety

5. Information Sharing and Disclosure

5.1 Third-Party Partners and Dental Networks

We share your information with the following categories of partners:

Dental Professionals and Networks

Licensed dentists and dental specialists in your geographic area
Dental practice management networks
Dental service organizations (DSOs)
Orthodontists, prosthodontists, and cosmetic dentistry specialists

Purpose of Sharing: To connect you with qualified dental professionals who can:

Provide consultations for the treatments you're interested in
Offer pricing and treatment plan information
Schedule appointments and follow-up care

What We Share:

Your name and contact information (phone number, email)
Your location/zip code
Type of dental treatment you're interested in
Any preferences you've indicated (budget, timeline, etc.)

5.2 Marketing Partners

We may share your information with marketing partners who provide:

Dental financing options
Dental insurance information
Related health and wellness services

5.3 Service Providers

Technology and Infrastructure

AI Providers: For image generation and smile simulation (e.g., Replicate). Only image data for the necessary duration of processing is utilized.
Cloud Hosting: Vercel, Supabase (for secure database and infrastructure)
Analytics: Google Analytics, Plausible (for usage analytics and privacy-focused metrics)
Email Services: For transactional and marketing emails

All service providers are bound by strict data protection agreements.

5.4 We Do Not Sell Your Data for Unrelated Marketing

We do not sell your personal information to third parties for purposes unrelated to dental services. Our data sharing is limited to connecting you with dental professionals and related service providers.

5.5 Legal Requirements

We may disclose your information:

To comply with valid legal processes (subpoenas, court orders)
To protect our rights, safety, or property
To investigate fraud or security issues

5.6 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred (you will be notified).

6. How to Opt-Out

6.1 Opt-Out of Phone Calls and Text Messages

You have the right to opt-out of receiving calls and text messages at any time:

To Stop Text Messages:

Reply "STOP" to any text message you receive from us or our partners
You will receive a confirmation message and no further texts will be sent

To Stop Phone Calls:

Email: Send an email to [email protected] with:
- Subject: "Opt-Out Phone Calls"
- Include your phone number
Request removal during any call with a dental partner
Call our support line and request removal

Response Time: We will process your opt-out request within 10 business days. Please note that dental partners who have already received your information may need to be contacted separately.

6.2 Opt-Out of Email Communications

Marketing Emails:

Click the "Unsubscribe" link at the bottom of any marketing email
Email us at [email protected] with subject "Unsubscribe"

Transactional Emails:

Service-related emails (account security, appointment confirmations) cannot be disabled while you maintain an account

6.3 Do Not Call Registry

If you are on the National Do Not Call Registry and wish to revoke your consent to be called:

Email [email protected] with subject "Do Not Call Request"
Include your phone number and full name

6.4 Request Data Deletion

To have your data removed from our systems:

Email [email protected] with subject "Delete My Data"
Include your email address, phone number, and name
We will process your request within 30 days

7. AI Data Processing and Content Privacy

7.1 How We Process Your Content with AI

When you upload images for smile simulation:

Processing: Your content is sent to our AI providers (such as Replicate) for processing.
Purpose Limitation: We process your content solely to generate the requested simulation.
No Training: We adhere to policies ensuring your specific content is not used to train general public AI models without your explicit consent.
Temporary Storage: AI providers may temporarily cache your content for the duration of the processing but are contractually required to delete it appropriately.

7.2 Content Ownership

You Own Your Content: You retain all intellectual property rights to the content you upload.
Generated Content: AI-generated simulations based on your inputs are also owned by you.
License to Us: You grant us a limited license to store, process, and display your content to provide our services.

7.3 Content Security

All uploaded files are encrypted at rest and in transit.
Access to your content is restricted to authorized personnel for support purposes only.
You can delete your content at any time.

8. Cookies and Tracking Technologies

8.1 Types of Cookies We Use

Essential Cookies (Required)

Authentication tokens to keep you logged in
Session management and security

Functional Cookies (Optional)

Remember your preferences (theme, language)
Save your simulation settings

Analytics Cookies (Optional)

Google Analytics to understand user behavior
Performance monitoring
Plausible Analytics (Privacy-focused, no personal data collection)

Marketing Cookies (Optional, with consent)

Track ad campaign effectiveness
Retargeting and conversion tracking

8.2 Your Cookie Choices

You can control cookies through:

Browser Settings: Most browsers allow you to block or delete cookies
Cookie Banner: Manage your cookie preferences when you first visit the site
Opt-Out Links:
- Google Analytics: https://tools.google.com/dlpage/gaoptout

9. Data Storage and Security

9.1 Where We Store Your Data

Primary Servers: Hosted on secure cloud infrastructure (Vercel, Supabase).
Geographic Location: Data is primarily stored in the United States.
Backups: Regular encrypted backups are maintained for disaster recovery.

9.2 Security Measures

We implement industry-standard security practices:

Encryption: TLS/SSL encryption for data in transit; AES-256 encryption for data at rest.
Access Controls: Role-based access controls and multi-factor authentication for staff.
Monitoring: Security monitoring and intrusion detection systems.
Audits: Regular security audits.

9.3 Data Retention

User Uploaded Images & AI Generations: Deleted from our immediate processing servers within 24 hours. We prioritize your privacy and do not retain facial imagery longer than necessary for the simulation session and your immediate viewing.
Lead Information: Retained for up to 2 years or until you request deletion, to facilitate the connections with dental providers you requested.
Account Data: Retained as long as your account is active.
Usage Logs: Retained for 12 months for analytics and security purposes.
Backups: Deleted backups are purged within 90 days.

10. Your Rights and Choices

10.1 Access and Portability

View Your Data: Access all personal information we hold about you
Download Your Data: Export your account data in standard formats

10.2 Correction and Update

Edit Profile: Update your account information at any time
Correct Inaccuracies: Request corrections to inaccurate data

10.3 Deletion (Right to be Forgotten)

Delete Content: Remove individual uploaded images or generated content
Close Account: Permanently delete your account and all associated data
Automated Deletion: All data is removed within 30 days of account closure

10.4 How to Exercise Your Rights

Email us at [email protected] with:

Subject line: "Data Rights Request"
Your account email address and phone number
Specific request (access, deletion, correction, etc.)
We will respond within 30 days (or as required by law)

11. California Privacy Rights (CCPA)

California residents have additional rights:

Right to Know: What personal information we collect and how it's used
Right to Delete: Request deletion of your personal information
Right to Opt-Out: Opt out of the "sale" of personal information
Right to Non-Discrimination: We will not discriminate against you for exercising your rights

Do Not Sell My Personal Information: While we share information with dental partners to facilitate services you've requested, if you wish to opt out of any data sharing, email [email protected] with "CCPA - Do Not Sell" in the subject line.

12. International Data Transfers

Fixmysmile AI operates globally and may transfer your data across borders:

EU to US Transfers: We comply with GDPR requirements using Standard Contractual Clauses (SCCs)
Data Protection: All international transfers meet applicable data protection laws
Your Rights: EU users retain all GDPR rights regardless of where data is processed

13. Children's Privacy

Fixmysmile AI is not intended for children under 13 years old (or 16 in the EU).

We do not knowingly collect data from children
If we discover we have collected data from a child, we will delete it immediately
Parents/guardians can contact us at [email protected] to request deletion

14. Third-Party Links and Services

Fixmysmile AI may contain links to third-party websites (e.g., dental practice websites, financing providers).

We are not responsible for the privacy practices of external sites
We encourage you to review their privacy policies before providing information

15. Legal Bases for Processing (GDPR)

For EU users, we process your data under the following legal bases:

Contract Performance: To provide services you've requested
Legitimate Interest: For analytics, security, and service improvement
Consent: For marketing communications, data sharing with partners, and optional tracking (you can withdraw anytime)
Legal Obligation: To comply with laws and regulations

16. Changes to This Privacy Policy

We may update this Privacy Policy periodically:

Notification: We will notify you via email or prominent website notice for material changes
Effective Date: Changes take effect on the date specified at the top of this policy
Continued Use: Your continued use after changes constitutes acceptance

Version History:

Version 1.1 (December 17, 2025): Updated retention policies and third-party provider details.
Version 1.0 (December 15, 2025): Initial TCPA compliant policy for Fixmysmile AI

17. Contact Us

Privacy Inquiries

Email: [email protected]
Response Time: Within 30 days

Opt-Out Requests

Email: [email protected]
Subject: "Opt-Out Request"
Response Time: Within 10 business days

General Inquiries

Website: https://fixmysmile.ai
Support Email: [email protected] Mailing Address: Fixmysmile.ai, 1209 Orange Street, Wilmington, DE 19801, United States

Data Protection Authorities

California Users: Contact the California Attorney General:

Website: https://oag.ca.gov/privacy

EU Users: Contact your local supervisory authority:

List: https://edpb.europa.eu/about-edpb/board/members_en

18. Summary of Key Points

| What We Collect | Who We Share With | How to Opt-Out | |-----------------|-------------------|----------------| | Phone Number | Dental professionals, dental networks, marketing partners | Reply "STOP" to texts, email [email protected] | | Email Address | Dental professionals, dental networks, marketing partners | Click "Unsubscribe" or email us | | Name & Location | Dental professionals in your area | Request data deletion | | Treatment Preferences | Dental networks matching your needs | Request data deletion |

Thank you for trusting Fixmysmile AI with your dental journey. Your privacy is our priority, and we are committed to protecting your data while connecting you with qualified dental professionals.

Last Reviewed: December 17, 2025