Ledy Privacy Policy

This policy covers the Ledy desk app, the Ledy phone app, the online service behind them, and the website ledy.ai. Ledy is run by Ledy Inc., a Delaware corporation, 8 The Green, Ste B, Dover, DE 19901, United States ("Ledy", "we"). Our customer is the dental office; the people using Ledy are its staff.

What we collect

About people using Ledy

• Name (the name shown in Ledy, and full name if given), email address, role, and whether the person is the office's owner.
• Password, stored only as a one-way scramble we cannot reverse. Sign-in sessions are stored the same way.
• Who added, counted or changed a supply, and when.
• For the person who accepts these agreements: their name, email, role, the time, their internet (IP) address and the app or browser used. This is our record that the office agreed.

About the office

• Office name, city, address, time zone and office code.
• Settings, such as which practice software is connected.

Supplies data

• Your supplies list, counts, stock changes, deliveries, reorder list, reports and daily supply totals.
• Orders you record: order number, date, items and totals. Never card numbers, passwords, or delivery addresses for orders.
• Supplier prices you enter, or that the desk shows from a supplier's website.

Images and files

• Photos of shelves, product boxes, labels, packing slips, invoices and notebook pages; spreadsheets you upload; and what Ledy read from each.
• Invoice and slip scans, kept as PDFs.
• Location and camera details are removed from photos when we receive them.

From your practice software

Ledy never collects, stores or sends patient names or other patient information. Your practice software's schedule, or a schedule file you import, is counted on your own office computer, and only the result leaves it:

• procedure codes, and how many of each were done or booked on each day, split by area of the mouth (quadrant) and filling type;
• how many patients were seen and how many visits there were each day, how many of those visits included each code, and how many needed certain kinds of supplies.

These are counts per date. We do not receive appointment times, patient or appointment record numbers, charts, notes, X-rays or billing. To count, the Ledy desk app may read schedule entries on your computer; it holds them in memory only while counting, then discards them, and never saves, logs or sends them.

Technical information

• App version and a device address so we can send notifications to a phone (stored encrypted).
• A technical log from the desk when we need it to help you. It is cleaned of patient details on your computer before it is sent. The office's owner can turn this off in the desk's settings.
• Error reports when something breaks, stripped of names, office details and the content of requests.

On the website

• We count page visits without cookies and without identifying you. A password-protected demo page uses one cookie to remember you entered the password. When you request a demo or contact support through our website, we collect your name, practice name, work email and your message, and use them only to reply to you.

How we use it

• To run Ledy: show your supplies, read your photos, work out what runs out, send sign-in codes, invitations, password resets and a welcome email. Our emails carry no tracking pixels.
• To train and improve Ledy. We keep the images and files your office sends, and what was read from them, and use them to train and improve Ledy's product recognition and AI, and to provide better services. This is on by default. To opt out, email help@ledy.ai.
• To help you when you ask for support, and to keep Ledy secure.
• To meet legal duties.

We do not sell personal information, and we do not use it for advertising.

Where it is stored

Your data is stored on cloud servers run by our service providers, in the United States. Images and files are kept in private cloud file storage that is not public on the internet.

Offices that keep data on their own computer. At our discretion, an office can keep its supplies data on its own desk computer instead. Then our cloud stores none of that office's supplies data; it only reads photos and looks up products, without keeping the results. Images are still sent to us and kept for training unless the office opts out. Ask at help@ledy.ai.

Security. Connections are encrypted. Passwords and sign-in sessions are stored as one-way scrambles. Device addresses and connection keys are encrypted. Only a small number of named Ledy staff can see an office's data in our admin tools, and every action there is logged. Ledy support may view your account, read-only, to help you. Our database and file storage are encrypted at rest.

Who else touches it

We use trusted service providers to host Ledy, store its data and files, read photos and documents, send email, send phone notifications, report errors and run our website. They handle data only to do that work for us, under contracts that require them to keep it confidential and secure.

• Photo and document reading. Photos, documents and spreadsheets are sent to an AI service that reads them for us. It processes them only to tell us what they show. It does not use them to train its own AI, and it deletes them within 30 days, unless it must keep them longer for legal or safety reasons.
• Phone notifications go through the notification service of your phone's maker. They never name a patient.
• Supplier prices. We use public product listings and price feeds from suppliers. We do not send them your data.
• Your practice software stays on your computer. Ledy reads it there, read-only.

We may also share information if the law requires it, to protect people or Ledy, or as part of a sale or merger of our business with notice to you.

How long we keep it

When an office is deleted, it can be restored for 30 days. After that it is permanently erased, except for product, shelf and paperwork photos kept to improve Ledy's AI. You can ask us at help@ledy.ai to delete those too. A short record that the deletion happened, without its contents, is kept.

Patient information

Ledy is designed not to receive patient information, and offices agree not to send it: no patient names or details in photos, notes or uploaded files. If some reaches us by mistake, tell us and we will delete it. Because Ledy does not receive patient information, we do not act as your business associate under HIPAA. Even so, if your office would like a business associate agreement, we will sign one on request. Contact us at help@ledy.ai.

Your choices

• Staff can delete their own account. The office's owner can remove staff.
• Opt out of image keeping by emailing help@ledy.ai.
• Turn off desk technical logs in the desk's settings.
• Delete your office by asking at help@ledy.ai.
• Ask to see, correct or delete your information at help@ledy.ai. We reply to these requests within 45 days.

California residents. Under California privacy law (CCPA/CPRA) you have the right to know what personal information we collect and how we use it, to see a copy of it, to have it corrected or deleted, and to not be treated differently for using these rights. We do not sell or share personal information for advertising. To use these rights, email help@ledy.ai. We may need to confirm your identity before acting on a request, and an authorised agent may make a request for you.

Ledy is for dental office staff, not for children. You must be at least 18 to use Ledy, and we do not knowingly collect information from anyone under 18.

Changes

When we change this policy, the new version appears on the desk and the office's owner is asked to accept it.

Contact

Ledy Inc., a Delaware corporation. Legal notices: 8 The Green, Ste B, Dover, DE 19901, United States. Everyday questions: help@ledy.ai.