Legal

Privacy Policy

Last updated: June 28, 2026

This Privacy Policy explains how Oriva Health ("Oriva," "we," "us") handles personal information when you visit oriva.health, contact us, or use our pre-visit triage and scheduling services (the "Services"). We aim to keep this simple and to collect only what we need.

Patient health information. When a dental practice uses Oriva, patient intake and clinical information is processed on that practice's behalf. The practice is the data controller for that information, and our handling of it is governed by our agreement with the practice (including any HIPAA Business Associate Agreement), not this consumer policy.

1. Information we collect

Information you provide

  • Contact details you give us, name, email, practice name, and the contents of messages or demo requests.
  • Account information if you sign up for the Services.
  • For patients using a triage flow: the symptoms and answers you choose to share, used to produce a pre-visit summary for your dental provider.

Information collected automatically

  • Basic usage and device data (such as IP address, browser type, and pages viewed) through standard logs and analytics.
  • Cookies and similar technologies (see "Cookies" below).

2. How we use information

  • To provide, operate, and improve the Services.
  • To respond to your inquiries and provide support.
  • To send service and, where permitted, occasional product communications (you can opt out).
  • To keep the Services secure and to comply with legal obligations.

3. Legal bases (GDPR / UK GDPR)

If you are in the European Economic Area or the UK, we rely on the following legal bases: consent (which you may withdraw at any time); performance of a contract; our legitimate interests in running and improving the Services; and compliance with legal obligations.

4. How we share information

We do not sell your personal information. We share it only with:

  • Service providers who help us run the Services (such as hosting, analytics, and communications) under agreements that limit their use of the data.
  • The dental practice you are interacting with, where applicable.
  • Authorities or others when required by law, or to protect rights and safety.
  • A successor entity in connection with a merger, financing, or acquisition.

5. Cookies and analytics

We use a small number of cookies and similar technologies, and basic analytics, to keep the site working and understand how it is used. You can control or delete cookies through your browser settings.

6. Data retention

We keep personal information only for as long as needed for the purposes described here, or as required by law, and then delete or anonymize it.

7. Security

We use reasonable technical and organizational measures designed to protect personal information. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

8. Your rights

EEA / UK (GDPR)

You may have the right to access, correct, delete, restrict, or object to the processing of your personal information, to data portability, and to withdraw consent. You may also lodge a complaint with your local data protection authority.

California (CCPA / CPRA)

If you are a California resident, you may have the right to know what personal information we collect and how it is used, to access and delete it, to correct inaccuracies, and to opt out of the "sale" or "sharing" of personal information and the use of sensitive personal information beyond permitted purposes. We do not sell or share personal information as those terms are defined under California law. We will not discriminate against you for exercising these rights.

To exercise any of these rights, email hello@oriva.health. We will verify your request and respond within the timeframes required by applicable law. You may use an authorized agent where the law allows.

9. International transfers

We are based in the United States, and your information may be processed there or in other countries. Where required, we use appropriate safeguards for international transfers.

10. Children

The Services are intended for dental practices and adults. We do not knowingly collect personal information directly from children. Where a practice uses Oriva for a minor patient, that information is handled on the practice's behalf as described above.

11. Changes to this policy

We may update this policy from time to time. We will post the updated version here and revise the "Last updated" date.

12. Contact

Questions or requests? Email us at hello@oriva.health.