Effective Date: March 30, 2026 | Last Updated: March 30, 2026
1. Introduction
Beau Sparkman DDS PA, doing business as Bridge Dental AI ("Company," "we," "us"), is committed to protecting the privacy of our users. This Privacy Policy describes how we collect, use, disclose, and safeguard your information when you use the Bridge Dental AI platform ("Service").
2. Information We Collect
Account Information
- Name, email address, and phone number
- Organization name and role
- Authentication credentials (managed by Microsoft Entra External ID)
Practice Data
- Patient demographics, appointments, and treatment records synced from your dental practice management system
- Insurance and billing information
- Practice performance metrics (production, collections, appointments)
Usage Information
- Log data, device information, and browser type
- Feature usage and interaction patterns
- IP address and approximate location
SMS and Communication Data
- Mobile phone number (when you opt in to SMS notifications)
- SMS opt-in/opt-out status and preferences
- Message delivery status
3. How We Use Your Information
| Purpose | Data Used |
|---|
| Provide and operate the Service | Account info, practice data |
| Send daily practice digest SMS | Phone number, practice metrics |
| Send system alerts and notifications | Email, phone number |
| Insurance verification and claims processing | Patient insurance data |
| Practice analytics and reporting | Appointment, production, and billing data |
| Improve the Service | Usage information |
| Comply with legal obligations | As required by law |
4. SMS Privacy
When you opt in to SMS notifications:
- We collect your mobile phone number solely to deliver messages you have requested
- We do not sell, rent, or share your phone number with third parties for marketing purposes
- We do not send SMS messages containing patient-identifiable health information
- SMS data (phone numbers, opt-in status) is stored securely and encrypted at rest
- You may opt out at any time by replying STOP or updating your Account Settings
- Message frequency: up to 2 messages per day
- Message and data rates may apply
We use Twilio as our SMS delivery provider. Twilio processes your phone number and message content solely for delivery purposes, governed by their Privacy Policy.
5. HIPAA and Protected Health Information
Bridge Dental AI processes protected health information (PHI) as a Business Associate under HIPAA. We:
- Execute Business Associate Agreements (BAAs) with all covered entity clients
- Encrypt PHI in transit (TLS 1.2+) and at rest (AES-256)
- Restrict access to PHI to authorized personnel only
- Maintain audit logs of all PHI access
- Do not use PHI for marketing, analytics, or any purpose beyond providing the Service
- Do not include PHI in SMS messages — digest messages contain only aggregate practice metrics
6. Data Sharing and Disclosure
We do not sell your personal information. We may share information only in the following circumstances:
- Service Providers: Third-party vendors who assist in operating the Service (hosting, email delivery, SMS delivery), bound by data processing agreements
- Legal Requirements: When required by law, subpoena, or court order
- Business Transfers: In connection with a merger, acquisition, or sale of assets, with prior notice
- With Your Consent: When you explicitly authorize sharing
7. Data Security
We implement industry-standard security measures including:
- Encryption in transit and at rest
- Microsoft Entra External ID for authentication
- Role-based access controls
- Regular security assessments
- Audit logging of data access
8. Data Retention
We retain your data for as long as your account is active or as needed to provide the Service. Upon account termination, we will delete or anonymize your data within 90 days, except where retention is required by law or for legitimate business purposes (e.g., audit trails).
9. Your Rights
You have the right to:
- Access your personal information
- Correct inaccurate data
- Request deletion of your account and associated data
- Opt out of SMS notifications at any time
- Export your data in a machine-readable format
- Withdraw consent for optional data processing
10. Children's Privacy
The Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. The Service processes pediatric patient records only as part of dental practice operations, under the authority of the dental practice.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by email or through the Service. The "Last Updated" date at the top indicates when the policy was last revised.
12. Contact Us
For questions about this Privacy Policy or to exercise your privacy rights, contact us at:
Beau Sparkman DDS PA
dba Bridge Dental AI
Email: support@bridgedental.ai