DentIA1. Nexus and your practice
NexusCenter IA operates DentIA and is the contact for account data, support and service operation: nexus@getnexusia.com. The practice caring for a patient decides the purposes of its records and care; Nexus provides the tool to manage them under applicable instructions, permissions and agreements.
Patients should direct questions about their records or treatment to their practice. Nexus can help identify the appropriate contact and address account, security or operational matters after verifying identity and authority.
2. Information processed
Depending on the enabled features, the platform processes account and contact details, organisations and sites, permissions, appointments, records, treatments, prescriptions, administrative transactions, uploaded files, support requests and subscription references.
Sign-in creates necessary account and access records, which may include the date, device type and area accessed. Authentication and hosting providers may also process technical connection metadata, including IP addresses, to run and protect the service. When optional analytics are allowed in this browser, we record module categories, app openings or installation, activity, device type, approximate country or region, and their association with the account or session. These analytics do not include record contents, patient names, full page addresses or search text. They are not anonymous.
Do not enter real clinical information in an evaluation environment designated for fictional data. Do not attach credentials or unnecessary information to a support enquiry.
3. Purposes
Information is used to provide the requested service, manage accounts and permissions, retain authorised transactions, administer subscriptions, provide support, and prevent or investigate incidents. The practice determines the care-related use of its patients' information.
Navigation and activity analytics are used to understand and improve the product only when that category is allowed in the browser. The choice applies to the browser profile and domain, may affect accounts used there and is not synchronised across devices. Use separate profiles or choose Necessary only on shared devices. You can withdraw your choice in Cookie preferences; this stops future measurement without signing you out.
Accepting the terms or using the service does not give Nexus permission to sell patient records, advertise with clinical data or reuse them to train AI models. Any additional purpose requires the applicable basis, information and authorisation, separately from access to the tool.
4. Providers and disclosures
The service uses Vercel for hosting and Supabase for its database, authentication and storage. Stripe handles checkout and subscriptions; DentIA retains billing references, plan status and subscription periods, but not the full card number or security code.
If you choose to sign in with Google, that provider takes part in authentication. If your practice enables communication channels or other external services, those providers' terms and notices and the practice's permissions also apply. Links to external sites lead to their own policies.
These providers may process information in countries other than yours. The scope depends on the services purchased and applicable agreements. Authorities may require information under the law; exclusive data residency in Guatemala is not promised, and no unverified certification is claimed.
5. Retention
Account and operational data are retained as needed to provide the service and meet applicable obligations. Patient records are retained under the practice's instructions and record-keeping duties. The end of a trial or subscription does not automatically delete them.
Granular module analytics reports exclude records older than 90 days. Deletion runs during ingestion or queries; without activity, older records may remain until the next clean-up. Necessary access records and app-opening or installation events follow different criteria: they are retained as needed for operation, security or analysis and applicable duties. We do not promise their deletion after 90 days. Withdrawal prevents new records; to request review or deletion of earlier ones, contact the address above. Backups and legally retained records may follow their respective retention cycles.
Cookie preferences are remembered for up to 180 days. The legal package acceptance record stores the version, cryptographic hash of the accepted text and date for each account; it contains no patient record, IP address or browser user agent. It may be retained for as long as appropriate for the account and applicable obligations.
6. Enquiries and rights
You can request information about your data, correction, access, export or deletion where applicable. You can also withdraw consent for optional purposes. Write to nexus@getnexusia.com with the type of request and your account email; do not send passwords or complete patient records. The practice handles requests concerning the care information it controls.
We verify identity, authority and scope before providing or changing data. Retention duties, other people's rights or applicable rules may limit some requests; if so, the reason will be explained. Withdrawing analytics does not affect necessary account functions.
7. Protection and shared devices
DentIA limits access according to accounts, organisations, sites and permissions. Protect your devices and credentials, use the sign-out controls and report suspected unauthorised access. Technical safeguards reduce risk but cannot guarantee that incidents will never happen.
Some features store preferences or local drafts in the browser, including dental viewer markers that may contain clinical text and remain after sign-out. Do not share the browser profile with unauthorised people. The cookie policy explains this storage and how to manage it.
8. Updates
The date and version of this policy identify the current text. Changes of purpose or new optional categories will be explained before they are enabled. Analytics consent is not inferred from browsing, accepting terms or creating an account.