Privacy

Privacy policy

Last updated: 3 November 2026

What we collect from dentists and their teams, why, who sees it, how long we keep it, and how to use your rights under India’s Digital Personal Data Protection Act, 2023.

The short version

We collect what we need to verify your practice, make your cases and bill you. Patient scans, photos and names never travel over WhatsApp. Your data is stored in India, shared only with providers who help us run the service, and never sold. You can see it, correct it or delete it by writing to [email protected].

Who we are

Jaw Experts is the trading name of Jaw Expert Solutions LLP, a digital dental lab with its registered office at 194, GF, Sector 56, Gurgaon, Haryana 122011, India. We make crowns, bridges, implant restorations and models for dentists, and we run the online service (the “app”) through which you sign in, submit cases, follow their progress and receive invoices.

For your own details (your account, your practice, your staff) Jaw Expert Solutions LLP decides why and how the data is used, so under India’s Digital Personal Data Protection Act, 2023 (“DPDP Act”) we are the Data Fiduciary. For your patients’ details inside a case, you are the Data Fiduciary and we handle the data on your behalf to make the work you ordered (see Patient information).

Our privacy contact and grievance officer is Dr. Priyanka Puri, [email protected].

What we collect

What	When
Name, clinic name, city, WhatsApp number, email address	When you sign up or add your details
State dental council and registration number	To verify that your practice is a registered dental practice
Staff WhatsApp numbers (and names, if you add them)	When the practice owner adds team members
Sign-up campaign source (for example, which link or advertisement you came from)	When you start signing up
Sign-in records: when you signed in, from which number, whether the code was verified, and the IP address when you accept our terms	Each time you sign in or accept terms
Case data: prescriptions, notes, patient names, scans and photos, messages about the case, and our decisions, status updates and invoices for it	When you submit or discuss a case
Unfinished sign-ups: whatever you had entered before stopping	If you start but do not finish signing up (kept as a “lead”)
Your contact consent choice (and any time you withdraw it)	At sign-up and whenever you change it

Why we use it

To run your account — signing you in, recognising your practice and your team, showing prices once your practice is verified.
To verify your practice — checking your dental council registration.
To do the lab work — designing and making what you ordered, and asking you questions about a case.
To keep you informed and bill you — case updates, decisions we need from you, and a per-case invoice when we accept a case.
To help you finish signing up — if you left a sign-up unfinished.
To improve our design software — using de-identified data only (see Improving our software).
To meet legal obligations — for example tax and accounting records.
To tell you about our services (marketing) — only if you ticked the separate consent box. This is never bundled into creating your account.

We do not use your details for anything incompatible with these purposes, and we do not sell them.

Marketing contact is a separate, optional tick-box. It is not required to sign up or to use the service. You can withdraw it at any time by choosing “Stop contacting me” in the app, or by writing to [email protected]. You can also do this from inside the app. Withdrawing is as easy as giving it, and it stops marketing only: we will still send the messages needed to run your account and your cases (sign-in codes, case updates, invoices).

We use the WhatsApp Business Platform from Meta to sign you in and to send you notifications.

Sign-in: you sign in with a WhatsApp message and a code. One WhatsApp number belongs to one practice.
Team members: the practice owner can add staff numbers. Staff can submit cases and send messages. Only the owner can approve, accept, confirm or answer a decision the lab asks for. The owner is responsible for their team’s use of the account and for telling team members how their numbers are used.
What we send over WhatsApp: case IDs, short status text and links to the app. We do not send scans, photos or patient names over WhatsApp, and we ask you not to send them to us there; use the app.
Requests: sign-in messages come from an automated number that does not read or handle requests. To make a request, use the contact options under Your rights.

WhatsApp messages are carried by Meta under WhatsApp’s own terms and privacy policy, and Meta’s network operates internationally.

Where your data is stored

The data we hold in the app is stored on servers in India (DigitalOcean, Bangalore region). Messages sent through WhatsApp, and visits to this website through Cloudflare (which speeds up and protects the site), pass through those companies’ own networks.

Only with providers we need to run the service, and only as much as they need:

hosting and storage (DigitalOcean);
messaging (Meta, for WhatsApp);
website delivery and security (Cloudflare);
our professional advisers and accountants, where needed to keep records or comply with law.

We may also disclose data where a law, court or government authority requires it. We never sell personal data and we do not share it for third-party advertising.

Patient information

Cases contain your patients’ personal data: names, scans, photographs and clinical notes. You, the dentist, are responsible for having your patient’s consent (or another lawful basis under the DPDP Act) to share that information with us so that we can make the restoration. Please send only what the work needs. We use patient data to carry out your order, we keep it secure, and we do not use it to contact patients.

We may also use patient data in de-identified form to improve our software (see Improving our software).

If you are a patient and want to know what is held about you, or want it corrected or deleted, please ask your dentist first. You can also write to us and we will help.

Improving our software

We may use de-identified scans and design data — with patient and dentist names removed — to improve our design software, including automated margin detection. We never sell this data and never share it for anyone else’s training.

How long we keep it

Account and practice details: while your account is active.
Case files (scans, designs, photos): available in the app for at least 90 days after delivery. After that they may be moved to archive storage, and they are deleted once we no longer need them for the product’s warranty or our quality obligations (not less than 2 years). We do not guarantee access to case files after 90 days, so please keep your own copies.
Basic case record (case ID, product, dates, warranty, invoice reference): kept for the warranty period of the product and as Indian tax law requires.
Warranty claims are made by case ID; you provide the proof needed to support the claim.
Delivered cases cannot be edited or deleted by the dentist.
Invoices: kept as required by Indian tax law, even if you close your account.
Unfinished sign-ups (leads): until you finish signing up, ask us to delete them, or ask us to stop contacting you.
Sign-in and consent records: while your account is active, and removed when it is deleted.

When we no longer need data, or you ask us to delete it and the law or the case retention above does not require us to keep it, we delete it or remove anything that identifies you. See Data deletion.

Security

We protect data with access controls, sign-in by one-time code and encrypted connections. No system is perfectly secure; if a breach affects your personal data we will tell you and the Data Protection Board of India as the law requires.

Your rights

Under the DPDP Act you can:

access a summary of the personal data we hold about you and how we use it;
correct or update data that is wrong or incomplete;
erase your data (how to ask);
withdraw consent at any time, including “Stop contacting me”;
make a grievance and have it answered;
nominate another person to exercise these rights for you if you die or cannot do so yourself.

To use any of them, email [email protected] or make the request from inside the app. We reply within 30 days. If you are not satisfied with our answer, you may complain to the Data Protection Board of India.

Grievances and contact

Grievance officer: Dr. Priyanka Puri
Jaw Expert Solutions LLP (trading as Jaw Experts)
194, GF, Sector 56, Gurgaon, Haryana 122011, India
Email: [email protected] (put “Privacy” in the subject)
General contact: +91 99101 78373

Changes to this page

If we change how we use your data we will update this page and its “Last updated” date, and tell signed-in users where the change is significant.