Privacy Policy
Effective date: June 13, 2026
This policy explains what information Dental X Bridge collects, why we collect it, and the choices you have. Questions? Email hello@dentalxbridge.com.
1. Who we are
Dental X Bridge operates the marketplace at dentalxbridge.com that connects sellers of dental practices with qualified buyers and the specialists (attorneys, lenders, CPAs, real-estate agents, photographers) who help close transactions.
2. Information we collect
Account information
When you sign up we collect your name, email address, and (if you sign in with Google) your Google profile ID. Your password is salted and hashed (bcrypt) before storage — we never see or store the plain text.
Practice & deal information
If you list a practice we collect details such as location, collections, overhead, patient count, specialty, and any documents you upload. If you engage in a deal we collect the messages, tasks, and documents you exchange with other participants inside the deal room.
Documents and AI processing
Documents and figures you upload may be processed by Luna, our automated AI deal coordinator, to generate summaries, checklists, and valuation ranges. To do this we send the relevant content to our AI provider (Anthropic) under contractual confidentiality terms; it is not used to train their models. AI output is software-generated, may be inaccurate, and is not professional advice — see our Terms.
Patient information (HIPAA)
Please do not upload protected health information (PHI) or individual patient records. Dental X Bridge is built to exchange business information about a practice (collections, overhead, patient counts, payer mix) — not patient charts, treatment records, or anything that identifies a patient. You are responsible for redacting PHI before uploading. If you must share PHI with a buyer during diligence, use a HIPAA-compliant channel covered by an appropriate Business Associate Agreement, not the deal room.
Usage data
We use Plausible Analytics, a privacy-friendly analytics service that does not use cookies and does not collect personal data, together with a first-party page-view counter that records only the page path and referrer. We do not fingerprint or track users across the web.
Storage
Listing data, deal-room documents, messages, and account records are stored in Netlify Blobs, Netlify's managed key-value blob storage. Data is encrypted at rest and served exclusively over TLS. Netlify Blobs are scoped to our site deployment and are not publicly accessible without an authenticated request through the Dental X Bridge API.
Payments and the 5% commission
Annual membership fees ($1,000 Professional / $2,000 Elite) are processed by PayPal. We do not see or store your card or bank details — PayPal handles card tokenization, PCI-DSS compliance, and charge processing. We receive only a transaction reference and the payment status.
When a deal closes, the 5% success fee (calculated on the gross sale price) is also invoiced and collected via PayPal. The fee amount, the party responsible for payment, and the PayPal invoice reference are recorded in our accounting ledger tied to your deal room. This record is retained for seven years for tax and dispute-resolution purposes.
3. How we use your information
- Operate the marketplace — match sellers to buyers, coordinate specialists, transmit messages and files.
- Authenticate you and keep your account secure.
- Send transactional email (sign-up confirmations, password resets, deal notifications).
- Improve our matching algorithms and deal-flow tooling.
- Comply with legal obligations (tax, anti-fraud, lawful requests).
4. How we share information
- Inside a deal: other participants you invite (buyers, sellers, attorneys, CPAs, lenders, photographers, real-estate agents) see the content you contribute to that deal.
- Service providers: hosting (Netlify), AI processing (Anthropic), email delivery (Resend), analytics (Plausible and our own first-party page-view counter), payment processing (PayPal).
- Legal: when required by law, subpoena, or to protect our users.
- We do not sell personal information.
5. How long we keep it
Account and deal records are retained while your account is active. Closed-deal records are retained for 7 years to satisfy tax and dispute-resolution needs. You can request earlier deletion (see §7).
6. Security
All traffic is served over TLS. Passwords are salted and hashed by our authentication provider (we never see the plain text). Session tokens (JWTs) expire after a set period and you can sign out at any time. Database backups are encrypted at rest. No system is perfectly secure — please use a strong, unique password.
7. Your rights
You can request a copy of your data, correct inaccuracies, export your listings, or delete your account by emailing hello@dentalxbridge.com. Deletion requests are fulfilled within 30 days unless we're legally required to retain specific records.
8. California, EU/UK residents
If you reside in California, the EU, or the UK, you have additional rights under CCPA, GDPR, and UK GDPR (access, rectification, erasure, portability, objection). Contact us to exercise them.
9. Changes to this policy
We'll post material changes to this page and update the "Last updated" date. Continued use after changes means you accept the updated policy.
10. Contact
Dental X Bridge · hello@dentalxbridge.com · contact form