Privacy Policy

Effective date: 24 August 2026. This Privacy Policy explains how Vodett (registered in St. Pölten, Austria — “we”, “us” or “our”) collects, uses, shares, stores and protects information when you visit our website at vodett.ai, contact us, use our mobile applications, or otherwise interact with our services.

Protecting the privacy and confidentiality of our patients, practices and website visitors is important to us. We understand that any information you share in a dental healthcare context is sensitive, and we handle it responsibly, lawfully and transparently, in accordance with the EU General Data Protection Regulation (GDPR) and other applicable data protection laws.

This policy applies to visitors who browse our website, individuals who submit our contact form, patients and prospective patients who request information or appointments through a dental practice, parents or legal guardians acting on behalf of a child, anyone who communicates with us, and users of the Vodett mobile applications (iOS and Android), where applicable.

Please read this policy carefully. By using our website or providing information to us, you acknowledge the practices described here. If you do not agree with this policy, please do not use the website or submit information through it.

Note: This Privacy Policy describes how information is handled through our website (vodett.ai) and online channels. Where you are a patient of a dental practice that uses Vodett, that practice acts as the Data Controller of your patient records, and your clinical information is processed separately under the terms applicable between you and that practice.

We collect personal data only where relevant to your interaction with us — information you provide directly, information collected automatically when you use the website, and, where applicable, information from our mobile applications:

We do not collect sensitive health information through this website beyond what you voluntarily include in a message. Please do not submit detailed medical information through the general contact form; where more detail is needed, we will tell you the appropriate and secure way to provide it.

Because Vodett operates in a dental healthcare context, you may choose to share information relating to your dental or general health when you contact us, or when a dental practice uses our services to support your care.

When health-related information is provided, we treat it as confidential and use it only for legitimate healthcare, administrative, legal or operational purposes. We limit access to authorized personnel, apply reasonable safeguards, handle it in accordance with the GDPR and other applicable laws, and do not use it for advertising or sell it to third parties.

Where your dental practice uses Vodett, that practice is the Data Controller of your clinical records. To request access to, correction of, or deletion of your patient records, please contact your dental practice directly. Vodett acts as a processor supporting the practice and will assist as instructed and as required by law.

We use the information we collect for the following purposes:

We process personal data on the following legal bases under Art. 6(1) GDPR, depending on the context:

Where processing is based on consent, you may withdraw it at any time with effect for the future, without affecting the lawfulness of processing carried out beforehand.

This website sets a single functional cookie named NEXT_LOCALE, which stores your language preference (English or German) so the site is displayed in your chosen language on later visits. This cookie is technically necessary for the language feature, does not track you across websites and contains no profile data.

We do not currently use any tracking, analytics or marketing cookies. Should this change, we will update this Privacy Policy and, where legally required, ask for your consent beforehand.

You can manage or delete cookies through your browser settings. Please note that disabling the functional cookie may affect the language feature of the website.

To operate our website and services we rely on the following service providers, which act as processors bound by our instructions under Art. 28 GDPR:

Where personal data is transferred to a country outside the EU/EEA, the transfer is safeguarded by the EU Standard Contractual Clauses (SCCs) and, where applicable, an adequacy decision such as the EU–US Data Privacy Framework. We do not currently use third-party analytics, advertising or tracking services on this website.

We share personal data only with the service providers named in this policy (hosting/content delivery and email delivery), which act as processors bound by our instructions. We do not sell personal data and do not share it with third parties for advertising purposes.

Beyond that, personal data may be disclosed:

We maintain reasonable technical, administrative and organizational measures designed to protect information against unauthorized access, disclosure, alteration, loss or destruction. These include access controls and need-to-know access, secure hosting and infrastructure, encryption of certain data in transit where appropriate, redaction of personal information in AI voice processing, staff confidentiality obligations and regular review of our security practices.

However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security. Where you have account credentials, you are responsible for keeping them confidential, and you should notify us immediately if you believe your account or information has been compromised.

We retain information only for as long as reasonably necessary:

Some of the service providers or infrastructure we use may be located in, or process information in, countries outside the EU/EEA, which may have different data protection laws.

Where such transfers take place, we take reasonable steps to ensure appropriate safeguards are in place, such as the EU Standard Contractual Clauses (SCCs) or an adequacy decision (for example, the EU–US Data Privacy Framework), consistent with the GDPR and applicable law.

Subject to statutory requirements, you have the following rights with regard to your personal data:

To exercise your rights, please contact us at support@vodett.ai (see Contact us below). Some rights may be limited where we must retain information for healthcare, legal or regulatory obligations, and requests about patient records held by your dental practice should be directed to that practice. We may ask you to verify your identity before responding.

You have the right to request the deletion of your account and associated personal data at any time.

To request data deletion, please contact your dental practice directly (as they are the Data Controller of your patient records), or contact Vodett support at support@vodett.ai. We will permanently delete your account and associated data in accordance with our data retention policies and legal obligations.

Vodett operates in a dental healthcare context, and we recognize that parents or legal guardians may submit information on behalf of children in connection with dental care.

Where information relating to a child is provided, we expect it to be submitted by a parent or legal guardian, or with appropriate authorization, and we handle it with the same care and confidentiality as other health-related information. Our website does not prohibit minors from accessing information about our services, and we understand that families use our services together.

If you believe a child has provided us with information without appropriate consent, please contact us at support@vodett.ai and we will take appropriate steps consistent with applicable law.

Our website may contain links to third-party websites, tools or services that are not operated or controlled by us — including the Vodett application at app.vodett.ai, which is governed by its own applicable terms and privacy notices.

This Privacy Policy does not apply to third-party websites. We are not responsible for their privacy practices or content, and we encourage you to review their privacy policies before providing information.

We may use your contact information to communicate with you by email, to respond to your enquiries and requests, and to send important service notices about the website or our services.

Service-related communications — such as responses to your enquiry and important notices — are necessary to provide the services you request and are sent on the basis of our legitimate interest or steps taken at your request.

We will only send promotional or marketing communications where this is permitted by applicable law and, where required, where you have opted in or otherwise consented. You will not automatically receive marketing messages simply by contacting us.

If you do receive marketing communications, you can opt out at any time, for example by using the unsubscribe link in an email or by contacting us at support@vodett.ai. Opting out of marketing will not affect essential service-related communications.

We maintain procedures designed to help us detect, respond to, investigate and manage security incidents involving personal information. In the event of an incident that affects personal information, we will:

We review this Privacy Policy regularly and may update it when the data processing on this website or in our services changes, or to reflect changes in technology or legal requirements.

When we make changes, we will publish the updated version on this website and update the “Last updated” date shown at the top of this policy. Where required by law, we will provide additional notice of significant changes. Effective date: 24 August 2026.

If you have questions, requests or concerns about this Privacy Policy or how we handle your information, please contact us:

We will respond to your enquiry as soon as reasonably possible and in accordance with applicable law.

This Privacy Policy is governed by and interpreted in accordance with the EU General Data Protection Regulation (GDPR) and the data protection laws applicable in Austria, where our business is established (St. Pölten, Austria), including the Austrian Data Protection Act (Datenschutzgesetz, DSG).

Where you are located in a different jurisdiction, additional privacy rights or requirements may apply under your local laws. Where applicable law grants you specific rights, this policy should be read together with those legal requirements, which will govern to the extent required.