Privacy Policy

Your privacy and data security are of paramount importance to us. This policy explains how GLENO HOLDINGS PRIVATE LIMITED collects, uses, and protects your personal information.

Last Updated: 2025

1

About this Privacy Policy

1.1 GLENO HOLDINGS PRIVATE LIMITED ("we", "our", or "us") is committed to maintaining the security of personal information ("Personal Information") provided to us and providing a compliant and transparent approach to data protection.

1.2 When you share Personal Information with us, we treat it with care and take our responsibility to protect it seriously.

1.3 We adhere to the Australian Privacy Principles in the Privacy Act 1988 (Cth) ("Privacy Act"), the Privacy Amendment (Notifiable Data Breaches) Act 2017 (NDB), and applicable State and Territory laws pertaining to health service providers and the handling of personal information and health records.

1.4 Please read this Privacy Policy carefully as it explains how GLENO HOLDINGS PRIVATE LIMITED collects, stores, and uses your Personal Data in accordance with the EU General Data Protection Regulation (GDPR), where applicable.

1.5 For the purposes of this Privacy Policy, any reference to "GLENO HOLDINGS PRIVATE LIMITED", "we", "our", or "us" refers to the legal entity responsible for providing Gleno.

2

About Gleno

2.1 Gleno is a software-as-a-service (SaaS) product for dental practice management, developed and provided by GLENO HOLDINGS PRIVATE LIMITED. Our Services include:

Patient profile management
Appointment scheduling and management
Payment processing
AI suggestions for treatments
Doctor's prescriptions
Speech-to-text functionality
Notes and documentation management

(collectively, our "Services")

2.2 GLENO HOLDINGS PRIVATE LIMITED is committed to maintaining high standards of data security. We comply with the applicable standards and obligations set out under the Privacy Act and the GDPR.

2.3 By using Gleno and our website at [insert email], you consent to the collection, processing, and management of Personal Information as described in this Privacy Policy.

3

The Types of Personal Information We Collect

3.1 "Personal Information" is information or an opinion that can reasonably identify an individual.

3.2 We collect Personal Information for the primary purpose of supplying our Services, providing information to our Customers, and marketing (with consent).

3.3 GLENO HOLDINGS PRIVATE LIMITED collects the following types of Personal Information:

(a) Customer Personal Information: name, title, dental clinic or business name, practitioner registration details, address, phone number, email address, payment details (e.g., credit/debit card), and any other information necessary to provide our Services.

(b) Marketing Personal Information: so we can market our Services or those of third parties in accordance with your preferences. We will obtain explicit consent before sharing Personal Information with any third party for marketing. You can unsubscribe at any time via an opt-out link.

3.4 We may also collect Personal Information when you:

Provide feedback
Update your account or email preferences
Respond to surveys or promotions
Communicate with our support team

3.5 GLENO HOLDINGS PRIVATE LIMITED may also collect other Personal Information you provide while interacting with Gleno or our website.

3.6 Some Gleno features utilize OAuth2 to securely send emails via O365 or Google Mail. Only the sender's email address and the refresh token required for OAuth2 are stored locally, encrypted, and not shared. Users can delete their sender email at any time.

4

Sensitive Personal Information

4.1 As part of our Services, we process patient data uploaded by our Customers, which may include health information, racial or ethnic origin, and genetic data ("Sensitive Data").

4.2 Sensitive Data may include: name, contact information, date of birth, treatment notes, health insurance details, Medicare numbers, accounting details, images, and other health information submitted by Customers.

4.3 Sensitive Data is used only to provide Gleno's Services or where required by law.

4.4 Customers are responsible for obtaining explicit consent from patients, including minors, when uploading their Personal Information and Sensitive Data.

4.5 We use high-level encryption and document protection for all Sensitive Data.

5

How We Collect Personal Information

5.1 GLENO HOLDINGS PRIVATE LIMITED collects Personal Information when you interact with us electronically, access our website, or use Gleno.

5.2 We may also receive Personal Information from third parties, which we will protect in accordance with this Privacy Policy.

6

How We Use Your Personal Information

6.1 We use your Personal Information to:

(a) Provide and improve Gleno's Services

(b) Administer our business

(c) Process transactions

(d) Conduct research and data analytics

(e) Communicate with you via phone, email, SMS, or mail

(f) Meet legal, regulatory, and compliance obligations

(g) Investigate complaints

6.2 If you choose to withhold your Personal Information, it may not be possible to provide Gleno's Services or respond to your inquiries.

7

Sharing Your Personal Information with Third Parties

7.1 We share Personal Information only for the purposes described in this Privacy Policy.

7.2 We may disclose Personal Information to employees, agents, suppliers, subcontractors, or government bodies as required.

7.3 Third-party service providers may assist us with Gleno's Services or payment processing.

7.4 All third parties must use Personal Information confidentially and only for the specified purpose.

7.5 In the event of a business sale or transfer, Personal Information may be transferred to the new owner, where legally permissible.

8

Legal Basis for Processing Personal Data (EU)

8.1 Personal Data refers to information relating to an identifiable natural person.

8.2 The legal basis for processing depends on the purpose:

(a) Contractual: to fulfill a contract with you

(b) Consent: where you provide explicit consent

(c) Legitimate interest: for improving Services or responding to inquiries

(d) Legal obligation: where required by law

8.3 We retain Personal Data only as long as necessary for the purpose collected.

8.4 Third-party processors are required to comply with GDPR and follow our instructions.

9

International Data Transfers

9.1 Data may be stored or processed outside Australia, including countries with adequate data protection laws.

9.2 For EU users, we use approved safeguards for international transfers (Standard Contractual Clauses or Privacy Shield-certified entities).

9.3 If safeguards do not apply, we will obtain explicit consent for data transfer.

10

Data Security and Breach Management

10.1 We implement physical, electronic, and managerial safeguards to protect data.

10.2 A "Data Breach" is any incident compromising the integrity of Personal Information likely to cause serious harm.

10.3 We have procedures and personnel to respond to breaches and will notify affected users and regulators as required.

10.4 Please report suspected breaches via the Contact Us section on our website.

11

Data Access and User Rights (GDPR)

11.1 Keep your Personal Data accurate and up to date.

11.2 You have the right to:

(a) Access your data

(b) Correct inaccuracies

(c) Request deletion ("right to be forgotten")

(d) Restrict processing

(e) Data portability

(f) Object to processing

(g) Object to automated decision-making

11.3 Contact us to exercise these rights. Verification of identity may be required.

11.4 Requests will be processed within 1 month and provided digitally, free of charge.

12

Non-Personal Information

12.1 We collect anonymous data from website and social media interactions, including IP address, browser type, device info, and language.

12.2 We use cookies, pixels, tags, and Google Analytics to improve the website and Services.

13

Access and Control of Personal Information

13.1 You may request details of Personal Information we hold.

13.2 Contact us to correct, update, or request a copy of your data.

14

Complaints About Privacy

If you have complaints, contact us and we will respond promptly.

15

Changes to this Privacy Policy

We may modify this Privacy Policy at any time; changes are effective immediately upon posting on our website.

Privacy Policy last updated: 2025

Have questions about our privacy practices?

Contact Us

1

About This Privacy Policy

1.1 This Privacy Policy describes how Gleno Holdings Private Limited, Australia ("we", "our", or "us") and Quaight Ads Platform Private Limited collect, use, store, and protect your personal information ("Personal Data") when you use our product, Gleno, and related services in India.

1.2 Gleno is owned by Gleno Holdings Private Limited, Australia. For Indian users, Quaight Ads Platform Private Limited operates under a formal agreement with the Australian parent company to provide development, support, and ensure compliance with India's Digital Personal Data Protection Act, 2023 (DPDP Act) and related rules.

1.3 By using Gleno or visiting our website, you agree to this Privacy Policy. If you do not agree, please discontinue use of our services.

1.4 For the purposes of this Privacy Policy, any reference to "Gleno", "we", or "us" refers collectively to Gleno Holdings Private Limited, Australia and Quaight Ads Platform Private Limited for their respective roles.

2

About Gleno

2.1 Gleno is a dental practice management software-as-a-service (SaaS) product owned by Gleno Holdings Private Limited, Australia, with local operations and support in India provided by Quaight Ads Platform Private Limited.

2.2 Our services include:

Patient profile management
Patient summary management
Appointment scheduling and reminders
Payment processing and billing
Treatment and prescription management
Voice-to-text and AI-powered documentation tools
Notes and record management

2.3 This Privacy Policy applies to all Gleno services, including the website, application, and related support platforms in India.

3

Types of Personal Data We Collect

3.1 "Personal Data" means any information that can identify an individual, either directly or indirectly.

3.2 We may collect the following types of Personal Data:

User Details: Name, phone number, email address, clinic or business name, practitioner registration details, and address.
Account and Login Data: Username, passwords, and profile information.
Payment Information: Billing address and payment details. All payments are processed through secure third-party payment gateways.
Usage Data: Information about how you use our website and application — such as IP address, browser type, device type, pages visited, and session duration.
Patient Information (for Clinics): Data uploaded by clinics or practitioners, including patient demographic details, treatment notes, and medical history, collected strictly for providing Gleno services.

3.3 We may also collect data when you:

Fill out forms on our website or app
Contact our support team
Respond to surveys, promotions, or feedback requests

3.4 All data is collected with your consent or deemed consent under the DPDP Act.

4

How We Use Your Personal Data

4.1 We use Personal Data for the following purposes:

To provide, manage, and improve our services
To authenticate users and manage accounts
To process and manage payments
To communicate updates, technical notices, and support messages
To send promotional materials (only with your consent)
To comply with legal obligations or respond to lawful requests
To analyze trends and usage patterns for service improvement

4.2 We do not sell, rent, or trade your Personal Data to third parties.

5

Data of Patients and Sensitive Information

5.1 Gleno enables dental professionals to store patient-related information for clinical and administrative purposes.

5.2 Patient data may include health information, demographic details, treatment records, and diagnostic notes ("Patient Data").

5.3 We act only as a data processor for such information — the clinic or practitioner remains responsible for obtaining the necessary consent from patients before uploading their data.

5.4 All such data is encrypted and stored securely using industry-standard security measures.

6

How We Collect Data

6.1 We collect Personal Data directly from you when you create an account, subscribe to our services, or contact us.

6.2 We may also collect data automatically through cookies, analytics, and tracking tools to understand website performance and user behavior.

6.3 Cookies can be disabled through your browser settings; however, some features may not function properly without them.

7

Data Sharing and Disclosure

7.1 We may share your data only in the following circumstances:

With authorized employees or contractors involved in providing the Gleno service, including the Indian operations team at Quaight Ads Platform Private Limited
With trusted third-party service providers (e.g., payment processors, cloud hosting partners) bound by confidentiality obligations
When required by law or government authority
During a business transfer (e.g., merger, acquisition, or restructuring), with notice provided to you

7.2 Both the Australian and Indian entities ensure that all third parties handle data according to this Privacy Policy and applicable Indian laws.

8

Data Retention

8.1 We retain Personal Data only for as long as necessary to fulfill the purposes for which it was collected or as required by law.

8.2 You may request deletion of your data, and we will comply unless retention is required for legal or regulatory reasons.

9

Cross-Border Data Transfers

9.1 Your data may be stored or processed in Australia or other countries where Gleno Holdings Private Limited, Australia or its service providers operate.

9.2 Such transfers will comply with the DPDP Act, 2023, and applicable government safeguards or notifications.

10

Data Security and Breach Notification

10.1 We use industry-standard technical and organizational measures — including encryption, secure servers, and access controls — to protect your data.

10.2 In the unlikely event of a data breach, we will:

Notify affected individuals, and
Report the breach to the Data Protection Board of India, as required by law.

11

Your Rights Under the DPDP Act

Under India's Digital Personal Data Protection Act, 2023, you have the right to:

Access your personal data
Correct or update inaccurate data
Request deletion of your data ("Right to Erasure")
Withdraw consent for data processing
Lodge a complaint with our Grievance Officer

We will respond to such requests within a reasonable time frame, subject to verification of your identity.

12

Consent and Withdrawal

12.1 By using Gleno, you consent to the collection and use of your data as described in this Policy.

12.2 You can withdraw consent at any time by contacting us at [email protected]. Upon withdrawal, we may be unable to provide certain services.

13

Children's Data

13.1 Gleno does not knowingly collect data from children under 18 years without the verifiable consent of a parent or guardian.

13.2 If you believe we have inadvertently collected such data, please contact us to delete it immediately.

14

Updates to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in technology, law, or business operations. The latest version will always be available on our website with the "Last Updated" date.

15

Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy or our data practices, please contact:

Email: [email protected]