Privacy Policy
Last updated 8 September 2026
This policy sets out how DentiStack AI handles personal data, including the clinical data practices trust us with. It is written to be read rather than skimmed past.
01Who we are
DentiStack AI provides practice management software to dental practices in the Kingdom of Saudi Arabia. This policy explains what we do with personal data when you use our website, book a demonstration, or run your practice on our platform.
Where your practice uses DentiStack to manage its own patients, the practice is the data controller and DentiStack acts as a data processor on its instructions. Where you deal with us directly — as a visitor to this site or a prospective customer — we are the controller.
02What we collect
We collect only what is needed to provide and support the service:
- Contact details you give us, such as your name, work email, phone number and practice name.
- Account and usage data, including who signed in, when, and what was changed — the same audit trail the platform shows you.
- Clinical and billing data entered by your practice, held on its behalf.
- Technical data such as IP address, browser and device type, collected to keep the service secure and working.
We do not buy personal data from third parties, and we do not collect special-category data about you as a website visitor.
03How we use it
Personal data is used to deliver the platform, to respond when you contact us, to provide support, to meet legal and regulatory obligations including e-invoicing requirements, and to improve the reliability and security of the service.
We do not sell personal data. We do not use clinical data to train artificial-intelligence models. Data entered by a practice operates that practice and nothing else.
04Legal basis
We process personal data where it is necessary to perform a contract with you, where you have given consent, where processing is necessary to meet a legal obligation, or where we have a legitimate interest that does not override your rights.
Where processing depends on consent, you may withdraw that consent at any time without affecting the lawfulness of what came before.
05Sharing and disclosure
We share personal data only with service providers who help us run the platform — hosting, communications and payment processing — and only under contract terms that restrict their use of it.
We may disclose data where required by law, court order or a competent regulator, and where necessary to establish or defend a legal claim.
06Storage and transfers
Data is hosted in the Kingdom of Saudi Arabia. Where any processing takes place outside the Kingdom, it is subject to the safeguards required by the Personal Data Protection Law and its implementing regulations.
We keep personal data only as long as needed for the purpose it was collected for, or as long as record-retention rules applying to healthcare and tax records require.
07Security
Access is governed by role-based permissions, encrypted in transit and at rest, and recorded in an audit trail. Staff access is limited to what each role needs, and every action against a record is attributable to the person who took it.
No system is perfectly secure. If a breach occurs that is likely to affect your rights, we will notify you and the competent authority within the timeframes the law requires.
08Your rights
Under the Saudi Personal Data Protection Law you have the right to be informed, to access your data, to request that it be corrected, and to request its destruction where the law allows.
To exercise any of these, contact us using the details below. If your data is held by a practice using DentiStack, we will refer your request to that practice as the controller and support them in answering it.
09Cookies
This website uses only the cookies needed to make it work and to understand aggregate usage. We do not use advertising cookies or cross-site tracking. Your browser can block cookies, though parts of the site may not function if you do.
10Changes and contact
We may update this policy as the service or the law changes. The revision date at the top of this page always reflects the current version.
Questions about this policy, or about how your data is handled, can be sent to info@dentistack.com.
See what an AI-operated practice looks like
The full workflow from the first call to the closing entry.
Book a demo→





