WorkDent
🔒 WorkDent Security & Data Privacy

Privacy Policy & Health Data Governance

Last Updated: January 1, 2026 • Compliant with HIPAA, GDPR (Art. 9 Special Category), and CCPA/CPRA

1. Information We Collect & Process

WorkDent collects information to provide peer-to-peer dental laboratory workflows, escrow payments, and verified technician profiles:

  • Account Profile Data: Display name, verified role (Dentist, Lab Owner, CAD Designer), work email address, phone number, clinic/laboratory address, and optional avatar image.
  • Technical Clinical Scans: 3D surface files (STL, PLY, OBJ), scan body positions, preparation tooth indices, and CAD metadata (.dentalProject) necessary to design dental prosthetics.
  • Financial Escrow Records: Payment transaction hashes, invoice billing details, and milestone release receipts processed through PCI-DSS Level 1 compliant gateways.
  • Session & Security Data: Encrypted 3-day authentication cookies, IP addresses, rate-limiting logs, and login timestamps to prevent account brute-force attacks.

2. Patient Data (HIPAA & De-Identification Protocols)

WorkDent operates as a Business Associate under the Health Insurance Portability and Accountability Act (HIPAA). We require all dental clinics and scanning facilities to strip direct identifiers (Patient Full Name, Social Security Number, Date of Birth) before transmitting intraoral scans.

Zero PHI Indexing: WorkDent algorithms index dental cases strictly by random alphanumeric identifiers (e.g. #WD-84920). 3D scan files are never exposed to public search crawlers or unauthorized parties.

3. Milestone Escrow & Funds Protection

When ordering a dental CAD restoration or hiring a technician:

  • Your funds are locked in an isolated escrow vault.
  • Neither the designer nor WorkDent can withdraw these funds until you inspect and formally approve the delivered 3D CAD proposal.
  • If the proposal does not meet clinical margin or contact requirements, you have the right to request complimentary revisions or invoke full escrow refund.

4. Cookie & Session Management Policy

WorkDent uses encrypted session cookies (`workdent_auth_session`) with a strict 3-day expiration (Max-Age: 259,200 seconds) to maintain your login credentials securely without requiring frequent re-authentication during active clinical work.

Users may clear active cookies and sign out at any moment using the "Sign Out" button in the navigation header or delete their account permanently in Account Settings.

5. Account Deletion & Right to Erasure (GDPR Art. 17)

You retain absolute ownership over your profile and casework data. You may permanently delete your WorkDent account at any time via your Profile Settings. Upon deletion:

  • Your public designer/dentist profile is immediately purged from the network directory.
  • All active session cookies, tokens, and local cache records are wiped.
  • Historical completed transaction ledgers are retained solely to comply with federal tax and auditing regulations.