Privacy Policy

Trust AI, Inc.

Effective Date: February 1, 2025

Trust AI, Inc. ('Trust AI,' 'we,' 'us,' or 'our') is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Isaac dental AI assistant platform, including our mobile application, website, and related services (collectively, the 'Services').

Please read this Privacy Policy carefully. By accessing or using our Services, you agree to the terms of this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not access or use the Services.

1. Information We Collect

2. How We Use Your Information

We use the information we collect for the following purposes:

• •Provide Services: To deliver AI-powered clinical assistance, treatment planning, diagnostic support, insurance verification, and practice management features
• •Improve Services: To train and improve our AI models, enhance accuracy, develop new features, and optimize user experience
• •Personalization: To customize your experience, remember your preferences, and provide relevant recommendations
• •Communication: To send service updates, technical notices, support messages, and marketing communications (which you may opt out of)
• •Compliance and Safety: To comply with legal obligations, enforce our terms, protect against fraud, and ensure the safety and security of our Services
• •Analytics: To analyze usage patterns, measure effectiveness, and conduct research to improve dental care outcomes

3. HIPAA Compliance and Protected Health Information

Trust AI operates as a Business Associate under the Health Insurance Portability and Accountability Act (HIPAA). When dental professionals use our Services to process Protected Health Information (PHI), we comply with applicable HIPAA requirements.

• •Business Associate Agreements: We execute Business Associate Agreements (BAAs) with covered entities and business associates as required by HIPAA
• •Security Safeguards: We implement appropriate administrative, physical, and technical safeguards to protect PHI
• •Limited Use and Disclosure: We use and disclose PHI only as permitted by HIPAA, our BAAs, and applicable law
• •De-identification: When using data for AI training and improvement, we de-identify PHI in accordance with HIPAA standards

Important: Healthcare providers using our Services remain responsible for complying with HIPAA and determining appropriate uses and disclosures of PHI.

4. How We Share Your Information

We do not sell your personal information. We may share your information in the following circumstances:

• •Service Providers: With third-party vendors who perform services on our behalf (cloud hosting, payment processing, analytics) under strict confidentiality obligations
• •Professional Advisors: With our advisors who provide legal, accounting, or consulting services, subject to confidentiality requirements
• •Business Transfers: In connection with a merger, acquisition, or sale of assets, where the acquiring entity will honor this Privacy Policy
• •Legal Requirements: When required by law, court order, or government regulation, or to protect our rights and safety
• •With Your Consent: When you explicitly authorize us to share specific information with third parties

5. Data Security

We implement industry-standard security measures to protect your information from unauthorized access, disclosure, alteration, and destruction. These measures include encryption, access controls, secure data storage, regular security assessments, and employee training on data protection practices.

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee absolute security.

6. Data Retention

We retain your information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Retention periods vary based on:

• •Active account data is retained while your account remains active
• •Clinical data may be retained longer to comply with healthcare recordkeeping requirements
• •De-identified data used for AI training may be retained indefinitely
• •Backup data may persist for a limited time before permanent deletion

7. Your Privacy Rights

Depending on your location, you may have certain rights regarding your personal information:

• •Access: Request access to the personal information we hold about you
• •Correction: Request correction of inaccurate or incomplete information
• •Deletion: Request deletion of your personal information, subject to legal and contractual limitations
• •Portability: Request a copy of your data in a structured, machine-readable format
• •Opt-Out: Opt out of marketing communications or certain data processing activities
• •Restrict Processing: Request restriction of how we process your information in certain circumstances

To exercise these rights, please contact us at support@trustdentistry.ai. We will respond to your request within the timeframe required by applicable law.

8. International Data Transfers

Our Services are operated in the United States. If you access our Services from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States where our servers and databases are located. By using our Services, you consent to the transfer of your information to the United States.

9. Children's Privacy

Our Services are designed for dental professionals and are not intended for children under the age of 18. We do not knowingly collect personal information from children under 18. If we become aware that we have collected personal information from a child under 18, we will take steps to delete such information.

10. Third-Party Services and Links

Our Services may contain links to third-party websites, applications, or services not operated by us. We are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any third-party services you access.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on our website and updating the 'Effective Date' at the top. Your continued use of our Services after changes become effective constitutes acceptance of the updated Privacy Policy.

12. California Privacy Rights

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• •Right to know what personal information we collect, use, disclose, and sell
• •Right to request deletion of your personal information
• •Right to opt out of the sale of personal information (we do not sell personal information)
• •Right to non-discrimination for exercising your CCPA rights