Privacy policy
Updated 16 September 2026
This page describes how the service actually works today. The definitive contractual terms are being drawn up with legal counsel; where they differ, they prevail. No identifiable patient photograph is processed until the framework applicable to the practice's country has been validated.
Who processes the data
The dental practice is responsible for the photographs it uploads and the contacts it records. NewSmile acts as a processor, on its behalf and on its instructions.
On a practice's public patient page, that same practice is responsible for the data a visitor sends it.
What is processed
A photograph of the smile, the retouch area chosen, the result produced, and the contact details a visitor voluntarily leaves to receive their result or ask for an appointment.
Image metadata, including location when present, is stripped before anything is stored.
For how long
Photographs and results are kept for thirty days by default. Each practice can shorten or extend this between one and three hundred and sixty-five days from its settings.
A requested deletion removes the record and then the stored file. Audit trails, which contain no image, are kept longer so that an operation can be accounted for.
Who else is involved
Hosting, storage and the database are provided by Cloudflare. Practice account authentication is provided by Clerk. Payments are handled by Stripe. Image generation is entrusted to a model provider, which receives the area sent and does not retain it.
The named list of processors, with each one's country of processing, is available on request at [email protected].
Your rights
Access, rectification, erasure, restriction, objection and portability are exercised with the practice holding the data. Write to it directly, or to [email protected] if you do not know whom to contact: the request will be passed to the practice concerned.
Consent given on a patient page can be withdrawn at any time, with no need to give a reason.
What the service does not do
No photograph is used to train a model. No data is sold. No advertising tracker is placed on the patient page.
A simulation is an indicative aesthetic projection. It is neither a diagnosis nor a promise of outcome: only a practitioner can assess what is actually possible.