Privacy Policy

Who this applies to

This Privacy Policy covers two different groups of people, and their rights and our obligations differ between them:

• Practice users — the doctors, administrators, and staff who sign up for and use the SculptIQ dashboard.
• Patients and prospective patients — people who interact with the AI consultation widget on a Practice's website. For this group, SculptIQ generally acts on behalf of the Practice, which is the party with the direct relationship to that patient. If you are a patient with questions about how your information is used, we encourage you to also contact the specific Practice you spoke with.

Information we collect

From Practice users, when you create an account and use the dashboard:

• Name and email address (via our authentication provider, Clerk)
• Practice information you provide during onboarding: practice name, address, phone number, website, procedures offered, and subscription plan
• Any data you enter into the dashboard (leads, patients, appointments, marketing campaigns, treatment information and images, etc.)

From patients and prospective patients, when you interact with the AI consultation widget on a Practice's website:

• Information you choose to share in conversation: your name, contact information (email and/or phone), the procedure(s) you're interested in, and the content of your messages
• If you book a consultation through the widget, the date/time you select and any details needed to create that appointment
• If you submit a review after your visit, your rating and review text

Automatically, when you use our services:

• Standard technical information (IP address, browser type, device information) collected by our hosting provider (Vercel) and authentication provider (Clerk) for security and functionality purposes
• Authentication cookies set by Clerk to keep you signed in

If a Practice connects their Google Calendar:

We request access to view availability (free/busy information) and create events on the connected calendar. We do not access, read, or store the content of any other events already on that calendar beyond what's needed to determine availability.

How we use this information

• To provide the core service: operating the AI consultation widget, qualifying leads, scheduling appointments, and displaying practice data on the dashboard
• To process conversations through our AI provider (Anthropic, maker of Claude) in order to generate responses
• To send appointment-related communications, including calendar invitations and review requests, via our email provider (Resend)
• To improve and maintain the security of our service
• To communicate with Practice users about their account

We do not sell personal information to third parties, and we do not use patient conversation data to train our own AI models or share it for advertising purposes.

Third parties we share information with

We use the following service providers, each of whom processes data only as needed to provide their specific function to us: Anthropic (processes widget conversation content to generate AI responses), Supabase (hosts our database), Clerk (authentication), Google (calendar availability and event creation, when a Practice connects their calendar), Resend (transactional email), and Vercel (application hosting).

We do not share information with data brokers, advertisers, or any party for marketing purposes unrelated to providing our service.

Minors

The AI consultation widget is designed to identify when someone indicates they are under 18 and to redirect the conversation toward parent/guardian involvement rather than continuing to discuss procedures, pricing, or booking with that individual directly. SculptIQ is not directed at children, and we do not knowingly collect personal information from children under 13 in connection with account creation.

Data retention

We retain Practice account data for as long as the account is active, and patient/conversation data for as long as reasonably needed to provide the service to the relevant Practice. Practices can request deletion of specific patient records; Practice users can request deletion of their own account by contacting us.

Your rights

Depending on where you live, you may have rights to access, correct, or delete your personal information, or to object to certain processing. To make a request, contact us at support@getsculptiq.online. If you are a patient, we may need to direct or coordinate your request with the relevant Practice, since they are typically the party with the direct relationship to you.

Security

We use industry-standard measures to protect information, including encryption in transit and at rest, and access controls limiting who can reach stored data. No system is perfectly secure, and we cannot guarantee absolute security.

Changes to this policy

We may update this policy from time to time. We'll update the “Last updated” date above when we do, and post the current version at this URL.

Contact us

Questions about this policy: support@getsculptiq.online