Privacy Policy

1. Introduction

This Privacy Policy explains how ODIN Verified (“we,” “our,” or “us”) collects, uses, and protects information when you use our public registry, apply for verification, or access the practice portal at odinverified.com.

2. Information We Collect

2.1 Information from Dental Practices

When you apply for verification or access the practice portal, we collect:

• Contact Information: Practice name, contact name, email address, and phone number.
• Authentication Data: Email addresses used to request secure sign-in links, along with login timestamps and session tokens.
• Verification Data: Information provided to attest to Patient Shield, Team Certified, or ODIN Verified standards.

2.2 Information from Public Visitors

When you search the public registry or view a verification mark on a practice’s website, we collect:

• Analytics Data: We use a privacy-safe beacon to count page views and credential sightings. This data is aggregated and does not include personally identifiable information.
• Technical Data: Standard server logs including IP addresses (used strictly for rate limiting and security) and browser types.

3. How We Use Your Information

We use the information we collect to:

• Process verification applications and communicate with practice representatives.
• Authenticate authorized users into the practice portal.
• Maintain and display the public registry of verified practices.
• Monitor system performance, prevent abuse, and enforce rate limits.
• Track aggregated analytics on how often verification marks are viewed.

4. Information Sharing

We do not sell your personal information. We only share information in the following circumstances:

• Service Providers: With vendors who provide essential infrastructure (e.g., database hosting via Railway, email delivery).
• Public Registry: Practice names and verification statuses are explicitly designed to be public.
• Legal Requirements: If required by law, subpoena, or other legal process.

5. Cookies and Tracking

We use essential session cookies to keep practice administrators logged in. We do not use third-party advertising cookies or cross-context behavioral trackers. Our analytics beacon operates without setting tracking cookies on consumer devices.

6. Data Security and Retention

We implement technical safeguards, including encryption in transit (TLS) and at rest, to protect your data. Access to the practice portal requires secure, single-use magic links.

We retain practice contact and verification data for as long as the practice maintains an active relationship with ODIN Verified. Session data and magic link tokens are deleted or invalidated immediately after use or expiration.

7. Your Rights

Depending on your jurisdiction, you may have the right to request access to, correction of, or deletion of your personal information. Practice administrators can update their information directly within the portal or by contacting us.

8. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us at:

Email: practices@patientvault.ai