Privacy Policy — ChairLeaf Pro

The short version: ChairLeaf Pro is designed so that no patient data ever touches our servers. We collect only what's needed to run your subscription. We never sell your data. We never will.

1. Who we are

ChairLeaf Pro is an AI-Powered Personalised Patient Home Care Plan Generator for Dental Clinicians. ChairLeaf Pro is operated by Mediazity Technologies.

You can contact us at legal@chairleaf.pro for any privacy-related queries.

2. What data we collect and why

Account and billing data

When you subscribe to ChairLeaf Pro, we collect:

Practice name and contact name — to identify your account and personalise your experience.
Email address — to send your magic login link, subscription receipts, and service communications.
Billing information — handled entirely by Stripe. ChairLeaf Pro never sees, stores, or processes your card number or payment details. Stripe's privacy policy governs that data.
Subscription plan and usage counts — to manage your access tier and daily document limits.
IP address and session token — to authenticate your session securely and prevent abuse.

Clinical inputs and generated documents

ChairLeaf Pro never stores patient data. Clinical inputs you type into the generator (risk levels, bleeding sites, medical history, habits) are sent directly from your browser to the AI API to generate the document. They are not logged, stored, or retained by ChairLeaf Pro at any point. Once the document is returned to your browser, the inputs are discarded. No patient names or identifying information are ever collected.

Usage analytics

We log the number of documents generated per day per account (a simple integer count) to enforce plan limits. We do not log the content of any document.

3. Third-party services

ChairLeaf Pro uses the following third-party services that may process your data:

Stripe (stripe.com) — payment processing and subscription management. Stripe is PCI-DSS compliant. Stripe's Privacy Policy →
Anthropic (anthropic.com) — AI document generation. Clinical inputs are sent to Anthropic's Claude API to generate documents. Anthropic does not use API inputs to train its models by default. Anthropic's Privacy Policy →
Email delivery — Magic link emails are sent via Bluehost's mail servers.
Web hosting — ChairLeaf Pro is hosted on Bluehost servers located in the United States.

4. Data retention

We retain your account data for as long as your subscription is active. If you cancel:

Your account record is retained for 90 days in case you wish to reactivate, then permanently deleted.
Billing records (invoices, transaction IDs) are retained for 7 years as required by tax law.
Session tokens and magic link tokens are deleted immediately on use or expiry.

5. Your rights

Depending on your location, you may have the right to:

Access the personal data we hold about you.
Correct inaccurate data.
Delete your account and associated data ("right to be forgotten").
Export your data in a portable format.
Object to or restrict certain types of processing.
Withdraw consent at any time where processing is based on consent.

To exercise any of these rights, email us at legal@chairleaf.pro. We will respond within 30 days.

6. Cookies

ChairLeaf Pro uses one functional cookie: a session cookie that keeps you logged in. It contains no personal information, expires when you close your browser or log out, and is strictly necessary for the service to function. We do not use advertising cookies, tracking pixels, or analytics cookies.

7. Data security

We take reasonable technical and organisational measures to protect your data, including:

All traffic encrypted via HTTPS/TLS.
API keys and database credentials stored above the web root, never accessible via browser.
Passwords stored as bcrypt hashes — never in plain text.
Session tokens are cryptographically random and expire after use.
Magic link tokens are single-use and expire after 15 minutes.

See our Security page for more detail.

8. International data transfers

Some data is processed by US-based third parties (Anthropic, Stripe). These transfers rely on Standard Contractual Clauses or the EU-US Data Privacy Framework where applicable.

9. Children's privacy

ChairLeaf Pro is a professional tool intended for licensed dental clinicians. It is not directed at children under 18. We do not knowingly collect data from minors.

10. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page and, for material changes, notify subscribers by email. Continued use of ChairLeaf Pro after changes constitutes acceptance of the updated policy.

11. Contact and complaints

For any privacy concerns, email us at legal@chairleaf.pro.