Privacy Policy

Odantio Flow operates the website and the SaaS platform. For your clinic login, billing contact, and demo requests, we are the controller of that account data.

For patient records, bookings, and messages that a clinic stores in Odantio Flow, the clinic is the controller. We process that data on the clinic’s instructions to provide the service.

Account and clinic data: name, clinic name, email, phone, role, login credentials, and settings you configure.

Usage data: logs needed to operate, secure, and improve the service (for example IP address, device, and pages or actions in the app).

Demo and support requests: the name, clinic, WhatsApp number, and email you submit on our website.

Patient data entered by clinics: names, contact details, appointments, treatment notes, and related clinic records the clinic chooses to store.

Clinics decide what patient information to enter and how to use it (including reminders and WhatsApp messages). Clinics must have a lawful basis to process that data under applicable law.

We do not sell patient data. We only process it to host the product, provide support the clinic requests, and meet legal obligations.

Paid subscriptions are processed by Paddle (Paddle.com Market Limited and related Paddle entities), which is the merchant of record. Paddle collects payment details, tax information, and billing address as needed to charge your subscription.

We receive subscription status, customer and transaction identifiers, and invoices from Paddle so we can activate, renew, or cancel clinic access. We do not store full card numbers on our servers.

If a clinic connects WhatsApp, messages and related metadata are processed through Meta’s WhatsApp Business APIs according to Meta’s terms and the clinic’s WhatsApp setup.

Connecting WhatsApp is optional (typically on Pro). We process those messages only to provide the connected features the clinic enables.

We use cookies and similar storage that are needed to run the site (for example language, session, and authentication). We may use analytics cookies if configured, such as Google Analytics when a measurement ID is present.

You can control cookies through your browser. Blocking some cookies may affect login or language preferences.

We use personal data to create and manage clinic accounts, provide the product, process subscriptions via Paddle, send operational emails, respond to demos and support, improve and secure the service, and comply with law.

We share data with service providers that help us run Odantio Flow (hosting, email, analytics if enabled, and Paddle for payments). We may share data if required by law or to protect rights, safety, or the service.

We do not sell personal information.

We keep account and billing records for as long as the clinic account is active and as needed for invoices, disputes, and legal requirements. Patient records remain until the clinic deletes them or the account is closed, subject to backups and legal holds.

After closure we delete or anonymize data within a reasonable period unless we must keep it longer by law.

Depending on where you live, you may have rights to access, correct, delete, or export personal data, or to object to certain processing. Clinic admins can update much of their account data in Settings.

Patients should contact their clinic first about records the clinic stored. You can also email us using the contact details below and we will help as the processor or controller, as applicable.

Privacy questions can be sent to the contact details at the bottom of this page.