Privacy Policy

1. Controller

CuraDentes (Lucas Plens de Araujo Servicos Odontologicos LTDA, CNPJ 31.258.420/0001-04) is the controller of the personal data described here.

For anything about your data, use the support channel in section 11.

2. Data we process

• Patients who contact a practice: name, phone, the chosen practice, the dentist’s specialty, whether the “Urgent” button was used, the page the contact came from, and date and time. Older contacts may also include email and postal code.
• Registered dentists: name, title, CRO number and state, email, password (stored only as a cryptographic hash), photo, specialties, education, bio, addresses and opening hours, accepted insurance plans, WhatsApp, landline, social media and Google map, when provided.
• Any visitor: an identifier derived from the IP address through a keyed cryptographic function (the IP itself is not stored), used only to limit abuse. No advertising or analytics cookies.

3. Purposes and legal bases

• Forwarding your contact to the chosen practice and recording it — at your request, as a step prior to care (LGPD art. 7, V).
• Keeping the contact history to monitor the platform, avoid duplicates and prevent fraud and abuse — legitimate interest (art. 7, IX).
• Creating the dentist’s account and publishing the professional profile — performance of the platform terms (art. 7, V).
• Checking the CRO with the professional council before publishing — legitimate interest (art. 7, IX).
• Complying with legal obligations (art. 7, II) and exercising rights in proceedings (art. 7, VI).

4. Health data

CuraDentes does not ask for or store information about your health. The record that you contacted a practice of a given specialty, or used the “Urgent” button, may indirectly reveal something about your health; it is therefore restricted to the platform team and handled with the care required for sensitive data (art. 11).

5. Sharing

• The practice you chose receives your WhatsApp message with your name, and is responsible for what it does with your data from then on.
• WhatsApp (Meta), under its own privacy policy.
• Providers operating the platform on our behalf: Vercel (hosting and photo storage), Neon (database, São Paulo), OpenFreeMap (maps), OpenStreetMap/Nominatim (address to map point), ViaCEP/OpenCEP (postal code lookup during dentist registration).
• Google, when a profile shows an embedded Google map, under Google’s own policy.
• Public authorities, when legally required.

6. International transfers

Vercel and Google process data in the United States and OpenStreetMap in the United Kingdom, under LGPD art. 33.

7. Retention

• Patient contacts: as long as needed for the purposes above, or until you ask for deletion.
• Dentist data: while the account exists.
• Abuse-limiting identifier: only during the control window.

8. Cookies and browser storage

• Session cookie (cd_session), only for signed-in dentists and admins. Essential, not used for tracking.
• Browser storage for theme, location permission choice and the dentist registration draft (without password). It stays on your device.

9. Security

HTTPS, hashed passwords, restricted access to patient data, rate limiting and human review before publishing profiles. Relevant incidents will be reported to affected people and to ANPD (art. 48).

10. Your rights

• confirmation and access; correction; anonymization, blocking or deletion; portability; information about sharing; revocation of consent; objection to processing based on legitimate interest (art. 18).

11. How to exercise them

Write to us on WhatsApp at (15) 99779-6145 or by email at consulodonto@outlook.com, stating which right you want to exercise.

We reply within 15 days. You may also file a complaint with Brazil’s data protection authority (ANPD) at gov.br/anpd.

12. Children

Contacts for children’s care must be made by parents or legal guardians (art. 14).

13. Changes

The date at the top shows the last update.