ProfitSocket Privacy Policy

ProfitSocket Analytics LLC (“ProfitSocket” or “we” or “us”) is committed to respecting and protecting your privacy. ProfitSocket employs cloud-based profit analytics, document management, and support services (the “Services”) to enable ProfitSocket subscribers (“Subscribers”) to view deep practice financial insights. This Privacy Policy (“Policy”) explains the types of data we collect from visitors to our application (“site”) and people with whom we communicate and interact in the course of providing the Sites and Services. This Policy also describes how we use practice data, the purpose for sharing and recipients of practice data, your rights and choices, and how you can contact us about our privacy practices. Please read this Policy carefully to understand our policies and practices regarding your practice data and how we will process it

Practice Data We Collect
1. Practice Data You Provide
  Practice data is any information that relates to an identified or identifiable dental practice. We collect several types of practice data from and about users of our Sites and Services. In many cases, the practice data that you provide directly to us through our Services will be apparent from the context in which you provide the data:
  - Account Information. When you register for a ProfitSocket account, we collect your full name, email address, phone number, organization name and other related information such as account login credentials.
  - Profile Information. You may choose to add information to your profile on the Services, which may be made public. Such information may include your username, biographical or professional details, and profile photo. Please do not upload any profile information you would not want to be made public.
  - Demographic Data. You may include demographic information to your profile on the Services, such as your city, state, country of residence, postal code, and age.
  - Inquiry Information. When you fill-in our online form to contact our sales team, we ask for your name, contact information, country, and other information about your interest in our Services
  - Billing, Payment and Transactional Information.If you are a Subscriber, you will provide your contact information and financial information as part of your business relationship with us. This may also include information relating to or needed to complete your orders on or through the Services, including order numbers and transaction history.
  - Communications. When you communicate with us or other End Users through the Sites and Services or otherwise communicate with us by email, text, chat features, or otherwise, we collect information about the communication and any other information you provide in your response.
2. Third-party Sources. We may combine practice data we receive from you with practice data falling within one of the categories identified above that we obtain from other sources, such as:
  - Public sources, such as government agencies, public records, social media platforms, and other publicly available sources.
  - Data providers, such as information services and data licensors.
  - Partners, such as marketing partners and event co-sponsors.
  - Service providers that provide services on our behalf or help us operate the Service or our business.
  - Business transaction partners. We may receive practice information in connection with an actual or prospective business transaction. For example, we may receive your practice information from an entity we acquire or are acquired by, a successor, or assignee or any party involved in a business transaction such as a merger, acquisition, sale of assets, or similar transaction, and/or in the context of an insolvency, bankruptcy, or receivership.
  - Third-party services, such as Google and Microsoft, that you use to log into, or otherwise link to, your Service account. This data may include your username, profile picture and other information associated with your account on that third-party service that is made available to us based on your account settings on that service.
3. Information Collected Automatically
  As you navigate through and interact with the Sites and Services, we may use cookies and similar tracking technologies that automatically collect certain information about you, including:
  - Browser and device data, such as your IP Address, device type, operating system and Internet browser type, operating system name and version, device manufacturer and model, language, plug-ins, add-ons and the language version of the Sites you are visiting.
  - Usage data, such as times spent on the Sites and Services, pages visited, links clicked, language preferences, and the pages that led or referred you to our Sites.
How We Use practice Data
We use practice data to pursue our legitimate business interests, to enter into a business relationship with prospective Subscribers and perform contractual obligations that we have with them, and to comply with our legal obligations. We also use practice data with your consent. More specifically, we use practice data in the following ways:
1. To provide the Sites and Services to you;
2. To provide you with information about the Services, at your request;
3. To help us improve the functionality of the Sites and Services;
4. To help us understand your usage of the Sites and Services in order to improve them;
5. To communicate with you regarding customer service matters, questions, and other various comments or feedback you may send to us;
6. To provide you with notices about your account;
7. To carry out our legal obligations, such as protecting our and our users’ safety, property, or rights, complying with legal requirements, and protecting against malicious, deceptive, fraudulent, or illegal activity;
8. To enforce our rights arising from any agreement or contract entered into between you and us, including for billing and collections;
9. To notify you about changes to our Sites and Services, our products or any other services we offer;
10. To inform you about products, services, offers and events we offer or sponsor, and to provide news and other information that may be of interest to you;
11. To communicate various technical and administrative messages regarding the Sites and Services, including notices of technology updates; and
12. To offer you the opportunity to participate in contests or surveys regarding the Sites and Services.
13. For any other purpose that you consent to at the time the practice data is collected.
How We Disclose practice Data
We may disclose your practice data as described below:
1. Affiliates. With other ProfitSocket affiliates in order to provide our Sites and Services and for our administrative purposes.
2. Service Providers. To contractors, service providers, and other third parties we use to support our business, such as website hosting, data analysis, marketing service, customer service, email delivery and auditing services;
3. Business Partners. With third-party business partners in connection with our Sites and Services to our Subscribers for business purposes.
4. Corporate Transactions. In connection with an actual or proposed merger, reorganization, divestiture, or sale of some or all of ProfitSocket’s assets or a financing or acquisition of all or a portion of our business by another company. In these circumstances, ProfitSocket will instruct the parties with whom practice data is shared to process practice data in accordance with this Privacy Policy.
5. Compliance and Harm Prevention. To comply with any court order, law, or legal process, including to responding to any government or regulatory request; to enforce or apply our Terms of Service and other agreements, including for billing and collection purposes; if we believe disclosure is necessary or appropriate to protect our rights, property, or safety, our subscribers, or others; or
6. Other. With your consent or for any other purpose we disclose when you provide the information.
Note: All the above categories exclude text messaging originator opt-in data and consent; such data and consent will not be shared with any third parties.

Any practice data you add to your profile will be accessible by End Users and other parties with access to the Services and may be made public. Please do not upload profile information you would not want to be made public.
Your Rights and Choices
1. Your Data Protection Rights
  Depending on where you live, you may have the following rights with respect to your practice data under applicable data protection laws:
  - Access – You may have the right to know what practice data we have collected about you and to access such data.
  - Data portability – You may have the right to receive a copy of your practice data in a portable and readily usable format.
  - Deletion – You may have the right to delete your practice data that we have obtained, subject to certain exceptions.
  - Correction – You may have the right to correct inaccuracies in your practice data.
  - Opt out of certain processing – You may have the right to: (i) opt out of the processing of your practice data for purposes of targeted advertising, (ii) opt out of the sale or sharing of your practice data; (iii) limit the use of your sensitive practice data (if applicable), and (iv) opt out of the processing of your practice data for profiling in furtherance of decisions that produce legal or similarly significant effect concerning you.
  - Objection/restriction of processing – you may have the right to object or restrict us from processing your practice data in certain circumstances.
  - Withdraw consent – you may have the right to withdraw your consent where we are relying on your consent to process your practice data.
  - Lodge a complaint – you may have the right to lodge a complaint with a supervisory authority or other regulatory agency if you believe we have violated any of the rights afforded to you under applicable data protection laws. We encourage you to first reach out to us so we have an opportunity to address your concerns directly before you do so. If you are a resident of the EEA, you may direct your questions or complaints to the supervisory authority of the country you are located in, available here. If you are a resident of the UK, you may direct your questions or concerns to the UK Information Commissioner’s Office.
2. Opting Out of Receiving Electronic Communications
  If you no longer want to receive marketing-related emails from us, you may opt-out via the unsubscribe link included in such emails. We will try to comply with your request(s) as soon as reasonably practicable. Please note that if you opt-out of receiving marketing-related emails from us, we may still send you other messages in connection with providing our Sites and Services.
3. How You Can Exercise Your Data Protection Rights
  To exercise any of the privacy rights afforded to you under applicable data protection laws, please submit a request to us by one of the following methods:
  - E-mailing us at support@profitsocket.ai
    
    You will not be discriminated against in any way by virtue of your exercise of the rights listed in this Policy which means we will not deny goods or services to you, provide different prices or rates for goods or services to you, or provide a different level or quality of goods or services to you. Only you, or an authorized agent that you authorize to act on your behalf, may make a request related to your practice data. You may also make a request on behalf of your minor child.
    
    We must verify your identity before fulfilling your requests, and if we cannot verify your identity, we may request additional information from you. If you are an authorized agent making a request on behalf of another person, we will also need to verify your identity, which may require proof of your written authorization or evidence of a power of attorney. We endeavor to respond to requests within the time period required by applicable law. If we require more time, we will inform you of the reason and extension period in writing.
    
    We do not charge a fee to process or respond to your requests unless they are excessive or repetitive. If we determine that a request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request. We may deny certain requests, or only fulfill some in part, as permitted or required by law. If you are not satisfied with the resolution of your request and you are afforded a right to appeal such decision, you will be notified of our appeal process in our response to your request.
Notice for California Residents
The California Consumer Privacy Act (“CCPA”) provides California residents with rights to receive certain disclosures regarding the collection, use and sharing of practice information as well as rights to access, delete, and restrict the same of certain practice information we collect about them. For the purposes of this Notice for California Residents, “practice information” has the definition set forth in the CCPA.
1. Sources of practice Information
  We collect practice Information from the categories of sources detailed in the practice Data We Collect section above.
2. Use of practice Information
  We use practice Information for the business and commercial purposes detailed in the How We Use practice Data section above.
3. Disclosure of practice Information
  The categories of third parties to whom we disclose practice information for a business or commercial purpose or to whom we sell or share practice information are summarized in the chart below. We do not knowingly sell or share the practice information of minors under the age of 16.

Categories of practice Information

Category of Recipients to Whom We Disclose practice Information for a Business or Commercial Purpose

Categories of Third Parties to Whom We Sell or Share practice Informatione

Identifiers.

Affiliates
Service providers
Business partners
Third parties for legal, security, and safety purposes
Third parties in connection with a corporate transaction
Other entities to which you have consented to the disclosure

Third-party marketers
Analytics providers
Other third parties that set cookies and other online tracking technologies on our Site

practice information categories listed in the California Customer Records statute.

Affiliates
Service providers
Business partners
Third parties for legal, security, and safety purposes
Third parties in connection with a corporate transaction
Other entities to which you have consented to the disclosure

Third-party marketers
Analytics providers
Other third parties that set cookies and other online tracking technologies on our Site

Commercial information.

Affiliates
Service providers
Business partners
Third parties for legal, security, and safety purposes
Third parties in connection with a corporate transaction
Other entities to which you have consented to the disclosure

We do not sell or share this category of practice Information

Internet or other similar network activity.

Affiliates
Service providers
Business partners
Third parties for legal, security, and safety purposes
Third parties in connection with a corporate transaction
Other entities to which you have consented to the disclosure

Third-party marketers
Analytics providers
Other third parties that set cookies and other online tracking technologies on our Site

Geolocation data.

Affiliates
Service providers
Business partners
Third parties for legal, security, and safety purposes
Third parties in connection with a corporate transaction
Other entities to which you have consented to the disclosure

Third-party marketers
Analytics providers
Other third parties that set cookies and other online tracking technologies on our Site

Professional or employment-related information.

Affiliates
Service providers
Business partners
Third parties for legal, security, and safety purposes
Third parties in connection with a corporate transaction
Other entities to which you have consented to the disclosure

We do not sell or share this category of practice Information

California “Shine the Light” Law

California residents additionally have the right to request information regarding third parties to whom ProfitSocket has disclosed certain categories of practice information during the preceding year for the third parties’ direct marketing purposes under California’s “Shine the Light” law (Cal. Civ. Code §1798.83). practice information under this California law means “any information that when it was disclosed identified, described, or was able to be associated with an individual.” We do not disclose this type of practice information to third parties for their own purposes and we permit you to opt-out of any disclosures of non-identifiable practice information. However, if you are a California resident and would like to inquire further, please email support@profitsocket.ai

Cookie Policy
Cookies are small text files that are stored in a computer’s browser directory. When you visit our Sites and Services, we may collect practice data from you automatically through cookies or similar tracking technologies (“cookies”). We also rely on partners to provide features of our Sites and Services using data about your use of the Sites and Services.
1. How ProfitSocket AnalyticsUses Cookies
  We use cookies in accordance with this Privacy Policy for the following purposes:
  - Site Operations. To enable features that are necessary for providing you the services on our Sites and Services and making it usable and secure by enabling basic functions.
  - Preferences. To remember your preferences and recognize you when you return to our Sites and Services.
  - Analytics. To allow us to understand how our Sites and Services are being used. We generally use analytics cookies in the following ways:
    - Site Features and Services. To remember how you prefer to use our Sites and Services so that you don’t have to reconfigure your settings each time you log into your account.
    - To Analyze and Improve Our Services. To help us understand how people reach our Sites and Services. They give us insights into improvements or enhancements we need to make to our Sites and Services so that they work better for you.
    - Similar Tracking Technologies. Certain features of the Sites and Services may use tokens, pixel tags, web beacons, clear GIFs, or other trackers to [e.g., track the actions of Users (such as email recipients), measure the success of our marketing campaigns, exclude current customers from marketing campaigns, or compile statistics about usage of the Services and response rates.
    - Third-Party Analytics.Through third-party analytics, such as Google Analytics, in order to collect and analyze information about the use of the Services and report on activities and trends. This service may also collect information regarding the use of other websites, apps and online resources. To learn more about how Google uses data, visit Google’s Privacy Policy and Google’s page on “How Google uses data when you use our partners’ websites or apps.” You may download the Google Analytics Opt-out Browser Add-on for each web browser you use, but this does not prevent the use of other analytics tools. To learn more about Google Analytics cookies, visit Google Analytics Cookie Usage on Websites.
    - Chat Functionality. We use a live chat feature powered by a third-party to enable live customer service and technical support via our Site. When you engage in the live chat enabled by this service provider, we will automatically collect and share certain information (such as practice identifiers, usage information, and message content) with the vendor to provide the customer service and technical support enabled by the live chat tool.
2. How to Opt-Out
  You can opt out of cookies through the cookies preference center in the bottom lefthand corner of our website or your web browser’s settings, including to delete and disable cookies, with the exception of those cookies that are necessary to provide you with our Sites and Services. You can take a look at the help section of your web browser or follow the links below to understand your options. If you choose to disable cookies, some features of our Sites and Services may not operate as intended.
We do not support Do Not Track functionality. Do Not Track is a preference you can set in your web browser to inform websites that you do not want to be tracked.
Data Security and Retention
We make reasonable efforts to provide a level of security appropriate to the risk associated with the processing of practice data. We maintain organizational, technical and administrative measures designed to protect practice data covered by this Privacy Policy against unauthorized access, destruction, loss, alteration or misuse. Your practice data is only accessed by a limited number of personnel who need access to the information to perform their duties. Unfortunately, no data transmission or storage system can be guaranteed to be 100% secure. If you have reason to believe that your interaction with us is no longer secure (e.g., you feel that the security of your account has been compromised), please contact us immediately.
We retain your practice data as long as we are providing the Sites and Services to you or our Subscribers (as applicable). Even after we stop providing Sites and Services directly or indirectly to you, and even if you close your ProfitSocket account, we keep your practice data in order to comply with our legal and reporting obligations. In all cases where we keep data, we do so in accordance with any limitation periods and records retention obligations that are imposed by applicable law.
International Data Transfers/Legal Basis
practice data may be stored and processed in any country where we do business or our service providers do business. practice data may be transferred, stored or processed in any country other than your own country, including the United States. Users should be aware that these countries may have data protection and privacy laws that are different to the laws of your country. Officials in those countries may be entitled to access your practice data. When transferring data across borders, we take measures to comply with applicable data protected laws related to such transfer.
When transferring data across borders from the European Economic Area (“EEA”), the UK or Switzerland, we comply with applicable laws to provide an adequate level of data protection. Where required by applicable law, we use the EU Standard Contractual Clauses with a data recipient outside the EEA, UK or Switzerland or other legal methods available to us under applicable law.

Where applicable, our legal basis for processing practice data depends on the practice data involved and the context in which we process it. Where ProfitSocket as a controller, we process your practice data: with your consent; where necessary to perform a contract; to comply with our legal obligations; and where doing so is in our legitimate interests (including the purposes described in this Policy) and such interests are not outweighed by your rights and freedoms.
Use by Minors
The Sites and Services are not directed toward persons under 18. We do not knowingly solicit or collect practice data from children under the age of 18. Please contact us, using the information provided below if you believe we may have collected such practice data without parental or guardian consent.
Third-Party Links
The Sites and Services contain links to other sites that are not owned or controlled by ProfitSocket. These links are provided solely for your convenience. ProfitSocket is not responsible for the privacy practices of such other sites. Please refer to the privacy practices for these providers directly if you have questions or concerns.
Updates to this Policy
When we update our Privacy Statement, we will take appropriate measures to inform you, consistent with the significance of the changes we make. We will obtain your consent to any material Privacy Policy changes if and where this is required by applicable data protection laws.
Contact Us
If you have questions or concerns about this Privacy Policy please contact us at support@profitsocket.ai