Version public-2026-10-07
Privacy Notice
Effective date: 7 October 2026
Controller: DAA Soft OÜ, Tallinn, Estonia, 17616923.
Registered address: Harju maakond, Tallinn, Kesklinna linnaosa, Vesivärava tn 50-201, 10152, Estonia.
Privacy contact: daa@daamedic.com.
What DAA Medic does
DAA Medic is a business tool for dental professionals. It converts clinician-supplied notes into a draft dental report and may translate that draft. Every draft must be reviewed and approved by a qualified clinician.
Information we process
We process account and authentication details, language settings, service usage and security metadata, support communications, and clinical notes submitted for generation. The application is not designed to persist clinical notes or generated report text.
Patient data
Do not enter names, dates of birth, telephone numbers, addresses, medical-record numbers, national identifiers or other direct identifiers. Patient fields in the document window are processed locally in the browser and are not sent to the generation service.
Purposes and legal bases
We process data to provide and secure the service, administer accounts, provide support, prevent abuse and comply with law. The clinic normally acts as controller for patient data and must establish Article 6 and Article 9 GDPR grounds; DAA Medic acts as processor.
Providers and transfers
Cloudflare supports hosting and security, Supabase provides authentication, and OpenAI processes submitted notes to create the draft. International transfers rely on adequacy decisions, Standard Contractual Clauses or another lawful mechanism. OpenAI API data is not used for model training by default; request content may be retained for up to 30 days for safety and service operation.
Retention and your rights
Account and usage records are kept while the account is active and for up to 90 days after deletion where needed for security or law. You may request access, correction, deletion, restriction or portability, object to processing, and complain to the Estonian Data Protection Inspectorate or your local authority.
Local storage and changes
We use necessary browser storage for sign-in, language and clinic profile settings and do not use advertising or cross-site tracking. We may update this notice when the service, providers or law changes and will communicate material changes where required.