Privacy Policy

1. Who we are

GrowthOS is a software-as-a-service platform that helps dental clinics manage their practice and grow their patient base. The Service is operated by The Masked Marketers. For any privacy matter, our contact details are:

Business name

The Masked Marketers (operating the GrowthOS platform)

Registered address

Flat No. 103, Nivas Regency, Silicon City, Indore, Madhya Pradesh, India

Email

utsavgoyal1981@gmail.com

Phone

+91 92036 71926

2. Information we collect

We collect the following categories of information:

• Account information — name, email, phone number, password (stored in hashed form) and role, when a clinic owner or staff member registers.
• Clinic information — clinic name, address, location, Google Business Profile details, rate cards and settings you provide during onboarding.
• Patient records you enter — patient names, contact numbers, appointment, visit, treatment-plan and payment information that a clinic records in the Service (see Section 3).
• Usage data — log data, device and browser information, feature usage and diagnostic data, used to operate and improve the Service.
• Cookies and similar technologies — as described in our Cookie Policy.
• Payment information — when you subscribe, payment is processed by a third-party payment gateway. We do not store full card details on our servers; we retain records of plan, status and transaction references.

3. Patient data & our role

For information a clinic enters about its own patients, the clinic is the data fiduciary (it decides why and how that data is processed) and GrowthOS acts as a data processor on the clinic's behalf, processing that data only to provide the Service. Each clinic is responsible for obtaining any consent required from its patients — including consent to receive WhatsApp reminders, recalls and campaign messages — and for complying with applicable law when using the Service.

Patient messaging in GrowthOS is sent via one-tap WhatsApp deep links initiated by clinic staff from their own device; we do not send messages to patients automatically on the clinic's behalf through a messaging API.

4. How we use information

• To provide, maintain and secure the Service and your account;
• To enable features such as appointments, billing, recalls, reviews, content generation and visibility tracking;
• To process subscriptions, credits and payments;
• To send service-related communications (for example trial reminders, billing notices and important updates);
• To provide support and respond to your requests;
• To detect, prevent and address fraud, abuse and technical issues;
• To improve and develop the Service.

5. Legal bases

We process personal data on the basis of your consent, the performance of our contract with you, our legitimate interests in operating and improving the Service, and to comply with legal obligations, as applicable under the DPDP Act and other applicable law.

6. Sharing & sub-processors

We do not sell your personal data. We share information only with service providers who help us run the Service, under appropriate confidentiality and data-protection obligations. These include, for example, cloud hosting and database infrastructure, AI content providers used to generate marketing content, mapping and search-data providers, email delivery, and our payment gateway. We may also disclose information where required by law or to protect rights and safety.

7. Data security

We apply technical and organisational measures appropriate to the risk, including tenant isolation so each clinic's data is separated at the database level, access controls, encryption in transit, and restricted administrative access. No method of transmission or storage is completely secure, but we work to protect your information and to promptly address any issues.

8. Retention

We retain personal data for as long as your account is active and as needed to provide the Service, comply with legal obligations, resolve disputes and enforce our agreements. On account closure, we delete or anonymise personal data within a reasonable period, subject to any legal retention requirements. Clinics can request export or deletion of their data as described below.

9. Your rights

Subject to applicable law, you may have the right to access, correct, update or erase your personal data, to withdraw consent, and to raise a grievance. Clinics can manage much of their data directly in the Service, and can request a full export or deletion by contacting us. To exercise any right, contact us using the details in this policy; we will respond within the timelines required by law.

10. Grievance officer

Grievance officer

Utsav Goyal

Email

utsavgoyal1981@gmail.com

Address

The Masked Marketers, Flat No. 103, Nivas Regency, Silicon City, Indore, Madhya Pradesh, India

11. Changes & contact

We may update this Privacy Policy from time to time. Material changes will be notified through the Service or by email, and the "last updated" date above will change. Continued use of the Service after an update means you accept the revised policy. For any question, contact us at utsavgoyal1981@gmail.com.