Privacy Policy
Last updated: 9/12/2025
1. Introduction
Caviti.ai (“we,” “our,” or “us”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered dental supply management platform.
By using Caviti.ai, you agree to the collection and use of information in accordance with this policy.
2. Information We Collect
Personal Information
We may collect the following types of personal information:
- Name and contact information (email address, phone number)
- Practice name and address
- Professional credentials and license numbers
- Account credentials (username and encrypted password)
- Billing and payment information
Practice Data
To provide our services, we collect:
- Inventory data and supply usage patterns
- Order history and supplier information
- Practice management system data (with your permission)
- Appointment and procedure data (anonymized)
Technical Information
We automatically collect:
- IP address and device information
- Browser type and version
- Usage data and analytics
- Cookies and similar tracking technologies
3. How We Use Your Information
We use the collected information to:
- Provide and improve our AI-powered supply management services
- Process transactions and manage your account
- Send administrative information and service updates
- Analyze usage patterns to enhance our AI predictions
- Provide customer support and respond to inquiries
- Comply with legal obligations and protect our rights
- Send marketing communications (with your consent)
4. Data Sharing and Disclosure
We do not sell your personal information. We may share your information with:
- Service Providers: Third-party vendors who assist in operating our platform
- Suppliers: Dental supply vendors (only with your explicit consent)
- Legal Requirements: When required by law or to protect our rights
- Business Transfers: In connection with mergers or acquisitions
- Aggregated Data: De-identified data for research and analytics
5. Data Security
We implement industry-standard security measures to protect your information:
- End-to-end encryption for data in transit and at rest
- Regular security audits and penetration testing
- Access controls and authentication protocols
- HIPAA-compliant infrastructure and processes
- Regular backups and disaster recovery procedures
6. HIPAA Compliance
As a healthcare technology provider, we maintain HIPAA compliance. We will enter into Business Associate Agreements (BAAs) with covered entities and implement appropriate safeguards for Protected Health Information (PHI).
7. Your Rights and Choices
You have the right to:
- Access, update, or delete your personal information
- Opt-out of marketing communications
- Request a copy of your data in a portable format
- Withdraw consent for data processing
- Lodge a complaint with a supervisory authority
8. Data Retention
We retain your information for as long as necessary to provide our services and comply with legal obligations. When you close your account, we will delete or anonymize your personal information within 90 days, except where retention is required by law.
9. International Data Transfers
Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place to protect your information in accordance with this Privacy Policy.
10. Children's Privacy
Our services are not intended for individuals under 18 years of age. We do not knowingly collect personal information from children.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the “Last updated” date.
12. Contact Us
If you have questions about this Privacy Policy or our data practices, please contact us at: