TreatPath is a web application for dental practices, operated by TreatPath Inc., a Delaware corporation. This Privacy Policy describes how TreatPath handles data collected through our website (gettreatpath.com) and our application.
When you visit gettreatpath.com, we may collect:
When a practice creates an account we keep the practice name, the account email, and a record of each acceptance of our Terms, this policy and our Business Associate Agreement (the version, the date and time, and the network address it came from). Account passwords are held by our sign-in provider, Google Firebase Authentication, and are never visible to TreatPath.
We do not sell or rent your contact information. The only third party we share it with for marketing is Meta, in scrambled form, to measure our ads as described above. Patient information is never shared with Meta or any advertiser.
TreatPath stores the following on its cloud infrastructure, isolated per practice:
What TreatPath does not collect or store: date of birth, Social Security number, insurance member or subscriber ID, medical or health history, clinical notes, x-rays or images beyond the treatment-plan region you capture, and payment card details. We keep only what is needed to present and record a treatment plan.
This data is held by TreatPath on cloud infrastructure operated by our hosting and database provider under an executed Business Associate Agreement, encrypted in transit and at rest, and isolated so that no practice can read another practice's records. Your practice retains ownership of its patient data at all times; TreatPath processes it solely to provide the service and never sells it, shares it for marketing, or uses it to train AI models.
TreatPath uses Anthropic's Claude API to process screenshot images for OCR (optical character recognition). When you use the image upload feature, the captured image is transmitted to Anthropic's servers for processing and the extracted text is returned to your application. Claude also receives a plan's procedures and fees, without the patient's name, to write the plain-language descriptions patients see. Questions your team asks the built-in help assistant and Practice Advisor are sent to Claude to answer; the Practice Advisor also receives your practice’s overall totals, never individual patient records.
The image may contain whatever is visible in your practice management software, including patient identifiers. This processing is covered by an executed Business Associate Agreement with Anthropic on a HIPAA-configured environment. Anthropic may keep submitted content for a limited period under its standard retention terms, and does not use it to train its models.
When a patient asks for a copy of their treatment plan — on the practice's tablet, or by asking the practice afterwards — it is emailed to the address provided through our mail provider, Google Workspace, which is also covered by an executed Business Associate Agreement. Nothing is emailed unless someone asks for it. The email may include a private link that lets the patient view their options, or their signed plan, on their phone until the end of the date stated in the email (7 days for options, 30 days for a signed plan). A copy of the options shows them as the patient left them on the tablet. On the phone the patient can try setting treatments aside or choosing between alternatives; nothing they do there is saved or sent to the practice. The link cannot be used to sign and can be turned off by the practice. TreatPath stores the link only as a one-way hash, and its record keeps the arrangement the patient left on the tablet as positions in the plan, never prices or procedure names. Replies to the email go to the practice’s own email address. The patient’s email address is used to send the copy and is kept only in the sending mailbox; our access log keeps a masked form (first letter and domain) to show that a copy was sent.
If your practice turns on financing estimates, the patient view asks your financing provider for monthly payment estimates using treatment dollar amounts only — never a name or anything else that identifies the patient.
Aside from these and the cloud storage described above, no patient data leaves the system. Our error monitoring is configured to exclude patient information, and we verify that.
Subscriptions are billed by card through Stripe, our payment processor. When a practice subscribes, Stripe collects the card details and billing address directly on its own secure pages; TreatPath receives only a customer reference, the subscription status and invoice records, and never sees or stores card numbers. The information Stripe holds is the practice's business billing information — it does not include any patient information, and Stripe has no access to treatment plans or the application. Stripe's handling of that data is described in its own privacy policy at stripe.com/privacy.
Free trials are limited to one per practice and per card. To enforce that, we keep a one-way hash of the card fingerprint Stripe provides for the card used to start a trial — not the card number, and not anything that can be turned back into it.
Because TreatPath stores and processes protected health information on behalf of your practice, TreatPath acts as a business associate as defined by HIPAA. Our Business Associate Agreement applies to every practice: you accept it on your practice’s behalf when you sign up, and that acceptance is your signature. A copy countersigned by TreatPath, or a version to sign separately, is available at support@gettreatpath.com.
HIPAA does not provide for certification of software, so no vendor can accurately describe itself as "HIPAA certified." TreatPath is built to support your practice's obligations: encryption in transit and at rest, per-practice data isolation, access logging, and automatic sign-out after inactivity. See our Security page for the current list of controls and their status.
TreatPath maintains executed Business Associate Agreements with its subprocessors and a documented risk analysis under its adopted security program, reviewed as the service changes. Practices with formal compliance programs are welcome to review these with their compliance officer; request the current documentation at support@gettreatpath.com.
Treatment plan data is retained for as long as your practice's account is active, so that signed plans remain available to you as a record of what the patient agreed to. A practice may request deletion of its data at any time by contacting support@gettreatpath.com, or its administrator can request it from Settings → Close your account in the dashboard. Where a signed plan forms part of your practice's own record-keeping obligations, retention is determined by your practice, not by TreatPath.
The private links sent to patients expire on their own (after 7 or 30 days) and the practice can turn them off sooner. Access-log entries are kept as part of the practice’s records, with its treatment plans.
Email addresses collected through our waitlist and demo forms are retained until you request removal. To request deletion, contact us at support@gettreatpath.com.
We may update this policy as the service evolves. Material changes are notified to the email on each practice's account before they take effect, and the date at the top of this page always reflects the current version.
TreatPath Inc., a Delaware corporation. 12879 Flintwood Way, San Diego, CA 92130. For any questions about this privacy policy or how TreatPath handles data, contact us at support@gettreatpath.com or (858) 215-4842.