Privacy Policy
Last updated: November 2024 · Contact: [email protected]
This policy explains what information Nefji (“we”, “us”) collects, why we collect it, and what we do with it. It covers both this website and the services we provide to dental clinics.
1. Information we collect on this website
- Contact form: your name, clinic name, email address, and your message. We use this only to respond to your inquiry.
- Server logs: like most websites, our hosting provider records basic request data (IP address, browser, time of request) for security and abuse prevention, including rate limiting of the contact form.
We do not use advertising or cross-site tracking cookies on this website.
2. Information we process as part of our service
When a clinic uses Nefji, our systems may process messages between the clinic and its patients (for example, chat conversations on the clinic's website and appointment booking requests). Key commitments:
- Data minimization: we collect only what is needed to respond to patients and book appointments.
- Encryption: sensitive data is encrypted in transit and at rest.
- No model training: patient and clinic data is never used to train AI models.
- Human handoff: anything clinical or urgent is routed to the clinic’s own team — the system handles admin and booking only.
Clinics remain the owners of their patient relationships, and we act as a processor working on their instructions. We walk through data handling in detail with each clinic during onboarding, including any questions about compliance obligations for their jurisdiction.
3. Payments
Fees for our services are charged by bank transfer or through a third-party payment processor (for example Stripe or Dodo Payments). Where a processor is used:
- We never receive or store your full card details — those are handled directly by the processor.
- We receive only a confirmation of payment and, where necessary, billing contact details (such as name, email, and invoice address).
- Payments are subject to the processor’s own privacy policy, which governs the card data they process.
4. How we use information
- To respond to inquiries from the contact form or by email.
- To provide, maintain, and improve the services clinics hire us for.
- To send agreed communications, such as monthly performance reports.
- To prevent abuse of our systems (spam filtering, rate limiting).
We do not sell your information. We do not share it with third parties for their marketing.
5. Third parties we rely on
- Website hosting — serves this site and its contact form.
- Email delivery — delivers form submissions and service emails to us.
- Communications APIs (for client clinics) — SMS and messaging providers used to run the text-back service.
- Calendar / practice systems (for client clinics) — where booking integrations are enabled.
Each provider is bound by its own privacy policy, and we choose providers that offer appropriate safeguards for the data involved.
6. Retention
Contact form submissions are kept for as long as needed to handle your inquiry and then deleted. Client service data is retained for the duration of the service and handled per the terms agreed with each clinic at offboarding.
7. Your rights
Depending on where you live (for example, if you are in the EU/EEA or a US state with a privacy law), you may have rights to access, correct, export, or delete your personal information. To exercise any of them, email us at [email protected] and we will respond within 30 days.
8. Children
Our services are aimed at dental practices, not at children, and we do not knowingly collect information from children.
9. Changes to this policy
We may update this policy as our services evolve (for example, when online payments are added). The date at the top reflects the latest revision, and material changes will be flagged on this page.
10. Contact
Questions about privacy? Email [email protected] — a real person reads and answers these.