AtlasVibe Technologies Private Limited ("AtlasVibe", "we", "us") operates atlasvibetechnologies.com and the OdontoOS / SmileSetu software. We act as a Data Fiduciary for personal data we collect about visitors and account holders, and as a Data Processor for patient data that dental clinics (our customers) manage using our software. This policy covers the former; our handling of clinic-controlled patient data is governed by the Data Processing terms in our Terms of Service.
1. Personal data we collect
- Identity & contact data — name, email, phone, clinic/organisation, role, when you enquire, register or subscribe.
- Billing data — GST details and payment references. Card/UPI credentials are handled by our PCI-DSS-compliant gateways (Razorpay/Cashfree); we do not store full card numbers.
- Usage & device data — pages viewed, approximate location (from IP), browser/device type, collected via strictly necessary logs and — only with your consent — analytics cookies.
- Communications — messages you send us and support correspondence.
2. Itemised consent & purpose
We process personal data for specific, limited purposes. Where the law requires consent, we ask for it separately for each purpose, and you may withdraw any consent at any time without affecting the others:
- To provide the service (account creation, billing, support) — necessary to perform our contract with you.
- Transactional communication (service, security and billing notices) — necessary for the service.
- Analytics cookies— only if you enable the "Analytics" category in our cookie banner. Withdraw any time via Cookie preferences.
- Marketing communication (product updates, offers) — only with your explicit opt-in; every message includes an unsubscribe link.
Withdrawing consent is as easy as giving it. To withdraw, use the cookie preferences control, the unsubscribe link in any email, or write to privacy@atlasvibetechnologies.com.
3. How we share data & our processors
We do not sell your personal data. We share it only with vetted processors under contract, strictly to run the service:
- Cloud hosting (India-region infrastructure)
- Payment gateways — Razorpay, Cashfree
- Messaging — Msg91 (SMS/WhatsApp, via TRAI DLT), Zoho ZeptoMail (email)
- Analytics — only if you consent
We may also disclose data where required by law or to protect our legal rights.
4. Data retention
We keep personal data only as long as needed for the purposes above or as required by law (e.g. tax and accounting records under Indian law, typically up to eight years). When data is no longer required, we delete or irreversibly anonymise it. Indicative periods:
| Category | Retention |
|---|---|
| Enquiry / contact messages | Up to 24 months from last contact |
| Account & profile data | For the life of the account + 90 days |
| Invoices & tax records | As mandated by Indian tax law |
| Analytics data (with consent) | Up to 14 months |
5. Your rights
Subject to law, you have the right to:
- Access — a summary of the personal data we hold about you and how it is processed.
- Correction & updation — fix inaccurate or incomplete data.
- Erasure — request deletion of your personal data, except where we must retain it by law.
- Data portability — receive your data in a structured, commonly used, machine-readable format, or have your account data exported to you.
- Withdraw consent and nominate another person to exercise your rights in the event of death or incapacity.
- Grievance redressal — escalate concerns to our Grievance Officer (below) and, if unresolved, to the Data Protection Board of India.
To exercise any right, email privacy@atlasvibetechnologies.com. We respond within the timelines required by law after verifying your identity.
6. How we protect your data
- Encryption in transit (TLS 1.2+) and at rest
- Least-privilege, role-based access and audit logging
- India-region data residency for primary storage
- Regular backups and a documented incident-response process
7. Children's data
Our website and account services are intended for professionals and not directed at children. Where a clinic records data of a minor patient in the software, the clinic is responsible for obtaining verifiable parental consent as required by law; we process such data only on the clinic's instructions.
8. Cookies
We use cookies as described in our Cookie Policy. No analytics or marketing cookies are set until you consent.
9. Grievance Redressal Officer
In line with the DPDP Act and applicable IT Rules:
- Name: [PLACEHOLDER: Grievance Redressal Officer name]
- Designation: Grievance Redressal Officer
- Email: grievance@atlasvibetechnologies.com
- Phone: [PLACEHOLDER: Business phone, e.g. +91-XXXXX-XXXXX]
- Address: [PLACEHOLDER: Registered office address line 1], AtlasVibe Technologies, Ravet, PCMC, Pune, Maharashtra, India
We acknowledge grievances within 48 hours and resolve within 30 days.
10. Changes to this policy
We may update this policy from time to time. Material changes will be notified on this page with a revised "last updated" date and, where appropriate, by email.
11. Contact
Questions about privacy? Email privacy@atlasvibetechnologies.com or our Data Protection contact at dpo@atlasvibetechnologies.com.