Privacy Policy

Tony OS ("we," "us") provides patient-inquiry response and recall software for dental clinics. This page explains what data we collect and how we actually use it.

What we collect

• Clinic account data: the clinic's name, contact details, and login credentials for the staff who use Tony OS.
• Patient contact data: only what your clinic provides or what patients send in through the channels you connect (SMS, missed calls, email, web forms) — used solely to log inquiries, draft replies, and send opt-in recall reminders on your clinic's behalf.
• Billing data: handled directly by Stripe; we do not store your card details.

How it's used

Patient contact data is used to operate the product you signed up for: logging inquiries in your activity feed, drafting replies (reviewed by your staff for anything flagged as higher-risk), and sending recall reminders you've opted into. We do not sell patient or clinic data.

Who we share it with

Only the vendors needed to run the service: Stripe (billing), Resend (transactional email delivery), Twilio (SMS/calling), and Anthropic (drafts AI-assisted reply text — no patient data is used to train third-party models). Each processes data only as needed to provide their service to us.

How long we keep it

For as long as your clinic's account is active, so your activity feed and reporting stay accurate. If you close your account or ask us to delete your data, contact us and we'll remove it.

Security

Data is encrypted in transit, and access to clinic data is restricted to authenticated staff of that clinic plus the Tony OS team for support and operation of the service.

Your rights

You can ask to see, correct, or delete the data we hold about your clinic or your patients at any time by emailing raouf@tonyosagency.com.