Privacy Policy
Dental Software Services
Last Updated/Effective Date: March 18, 2026
1. Introduction – Who We Are and What This Policy Covers
Aranafy (We) provides Software as a Service (SaaS) solutions that enable users to manage clinical workflows, request professional interpretation of oral and maxillofacial imagery, request and track the manufacture and delivery of dental prosthetics and appliances, and facilitate collaboration among licensed dental and orthodontic professionals and dental practices located in the United States (collectively, our “Clients” or “you”). The platform also includes secure cloud storage for electronic data and files, as well as file-sharing capabilities to support coordinated care and case management.
This Privacy Policy explains how we collect, use, disclose, and safeguard Personal Information and Protected Health Information (PHI), includes but is not limited to, when you visit our website, register for, access, or use our Services, communicate with us, upload dental imaging studies/patient radiographs/scans for interpretation, and use (or will use) our mobile applications.
Important Note: Our primary relationship is with dental professionals and dental practices, not with their patients. We act as a Business Associate under the Health Insurance Portability and Accountability Act (HIPAA) when we receive, maintain, or process Protected Health Information (PHI) on behalf of our Clients.
2. Types of Information We Collect
We collect two broad types/categories of information. The first is information about you (the Dental Professional/Practice), which includes, but not limited to, practice and business name, professional name(s), titles, employee name(s), contact information such as email, phone, mailing addresses, professional credentials and NPI number when provided, account login credentials, billing and payment information, communication between you and our support team, and usage data of our platform, portals, or apps.
The second is Protected Health Information (PHI), such as patient information. This type/category is the most sensitive and is always handled as Business Associate Protected Health Information under our Business Associate Agreement (BAA). Typical PHI we may receive includes, but is not limited to, patient name, date of birth or age, dates of service, image acquisition, referring dentist, provider information, images, scans, radiographs, any clinical notes, indications, or history that you choose to provide.
3. How Do We Collect Information
We collect information from you directly, including, but not limited to, when you create an account, upload imaging studies, complete order and requisition forms, communicate with us, and pay invoices.
We collect information automatically when you use our website, portals, or applications, including, but not limited to, your IP address, browser and device, pages visited, session duration, referring URL, and other information you actively send to us.
4. How Do We Use Your Information
We use the information we collect only for the following business purposes, including but not limited to creating and managing your account, providing you with customer support, sending important service notifications and system updates, issuing invoices and processing payments, improving our services, and sending you marketing and educational materials about our services.
We use PHI to facilitate professional dental radiology services, prepare radiology reports, communicate results to you, perform peer review, technologist or technical improvements activities, or perform quality assurance. We will not use PHI for marketing, research (without prior authorization), or any purpose unrelated to the services we provide.
5. Cookies and Tracking
We utilize cookies, pixels, and similar technologies to collect usage data and remember preferences. You have the ability to manage cookie preferences through your browser settings.
6. Who We Share Information With
We DO NOT sell any information that is collected. We share information only as necessary to prove the Services we offer and only under strict confidentiality obligations.
Concerning PHI, shared information includes, but is not limited to; limited internal peer review and quality assurance; our backup/storage providers; and, when required by law, subpoena, or court order.
7. Cookies and Tracking
We utilize cookies, pixels, and similar technologies to collect usage data and remember preferences. You have the ability to manage cookie preferences through your browser settings.
8. Security of Protected Health Information
We utilize industry-standard security in the administrative, technical, and physical safeguards that are consistent with HIPAA Security Rule requirements, including, but not limited to, encryption of data in transit or in rest, business continuity and disaster recovery planning, regular security assessments and penetration testing, and access controls and role-based permissions.
9. Data Retention
PHI is only retained as long as necessary to provide the Services to you, comply with applicable law, and meet professional standards of care documentation requirements. Your account and practice information is retained while your account is active and for a reasonable time after the termination of your account to comply with tax, dispute resolution, or accounting needs.
10. Your Rights and Choices
As our Client, you may request that we cease sending marketing communications, request correction of inaccurate practice account information, request access to or copies of your practice account information, or request termination of your account (subject to payment of any outstanding invoices.
All access, amendments, restrictions, accounting, and other HIPAA patient rights are handled by you, the covered entity, not by us.
11. United States Only
Aranafy’s services are available only to dental professionals and practices located in the United States of America. We do not knowingly offer our services to, or collect information from, individuals or entities located outside the United States.
12. Changes to this Privacy Policy
We will notify you of material changes to this Privacy Policy by email and/or prominent notice on our website, client portal, or other medium where our Services are provided.
13. Contact Us
Questions about the Privacy Policy, HIPAA practices, or handling of data should be directed to:
Privacy & HIPAA Compliance
Ostiarius PLLC DBA Aranafy
10673 West Lake Hazel Road #28
Boise, ID 83709
Email: info@aranafy.com
We will respond to all inquiries as quickly as possible.