Privacy Policy

Effective date: TBD Last updated: July 22, 2026

Bitechart AI, Inc. ("Bitechart," "we," "us") respects your privacy. This Privacy Policy explains what information we collect, how we use it, and the choices you have. It applies to the Bitechart AI website and platform ("Service"). Protected Health Information (PHI) handled on behalf of dental practice customers is governed by our Business Associate Agreement (BAA) and the customer's policies.

1. Who We Are

Bitechart AI, Inc. is a Delaware corporation. Our primary place of business is in California. For patient data flowing through the Service, our customer (your dental practice) is the "covered entity" under HIPAA and Bitechart is the "business associate."

2. Information We Collect

Website visitors

Basic analytics (page views, browser type, referrer, approximate location by IP).
Information you submit via forms (name, email, practice name, message).

Practice customers (Practice Users)

Account details: name, email, role, practice name, PMS vendor.
Usage data: features used, sync activity, log events.

Patient Portal Users

Identifiers your practice provides (name, DOB, contact) so we can present your records to you.
Communication preferences.
Content you generate in the portal (chat questions, appointment confirmations, treatment-plan acknowledgments).

Protected Health Information (PHI)

To power the portal, your practice may send us PHI including treatment plans, radiographs, insurance eligibility, and appointment history. We process this data only under a signed BAA and only to provide the Service.

3. How We Use Information

To operate, maintain, and secure the Service.
To generate patient-facing educational summaries via GPT-5 with Vision, deployed under our HIPAA BAA with OpenAI.
To communicate with practice administrators about their account.
To improve the Service (aggregated, de-identified data only).
To comply with legal obligations.

We do not sell your personal information or PHI. We do not use PHI to train foundation models.

4. AI Processing

Bitechart uses OpenAI's GPT-5 model with vision capabilities under a Business Associate Agreement that prohibits use of PHI for model training. AI outputs are educational only and are not diagnostic; see our Terms of Service for details.

5. How We Share Information

Sub-processors (only those necessary to run the Service): cloud infrastructure (AWS or Vercel), OpenAI (under BAA), email/SMS delivery vendors, error monitoring. A current list is available on request.
Your practice: patient data is visible to the practice that provided it.
Legal requirements: when required by law or a valid legal process.
Business transfers: in connection with a merger, acquisition, or asset sale, with notice to you.

6. Security

We use industry-standard safeguards including encryption in transit (TLS 1.2+) and at rest (AES-256), access controls, audit logging, and least-privilege administrative access. No system is perfectly secure; we cannot guarantee absolute security. A SOC 2 Type II audit is planned for 2026.

7. Your Rights

Depending on where you live, you may have rights to access, correct, delete, or port your personal information, or to opt out of certain processing. Patients: please make these requests through your dental practice, which is the record custodian. Website visitors and Practice Users: contact privacy@bitechart.ai.

8. Retention

We retain personal information as long as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce agreements. PHI retention is governed by the BAA with your practice.

9. Children's Privacy

The Service is designed for use by adult patients and by dental practice staff. When a practice provides pediatric records, that information is handled under the practice's consent framework and HIPAA.

10. International Users

Bitechart operates from the United States. If you access the Service from outside the U.S., you consent to processing in the U.S.

11. Changes

We will post material changes on this page and, where required, notify you directly.

12. Contact

Bitechart AI, Inc. — privacy@bitechart.ai