Data Processing Terms

Version 2026-09 · Interim terms for the Chairside pilot. These will be replaced by solicitor-reviewed terms before paid subscriptions begin; you'll be asked to re-accept when that happens.

When you use Chairside at your practice, you remain the data controller for your patients' information and Wonhee Youn (Millineer, info@millineer.com) acts as your data processor. In plain language, this is what you're agreeing to and what we commit to:

What we do with your data

1 · Only on your instructions. Your recordings and notes are processed solely to transcribe consultations and draft clinical notes for you — never for training, analytics, marketing or anything else.

2 · Confidentiality. The platform is operated by one person (a GDC-registered dentist) bound by professional confidentiality. Clinical content is technically isolated per account: the admin interface exposes only counts and costs, never notes, transcripts or patient references.

3 · Security. TLS 1.3 in transit; AES-256-GCM encryption of transcripts and notes at rest; every account isolated by database-enforced row-level security with an adversarial test suite; audio destroyed the moment transcription succeeds; clinical text automatically deleted after 7 days (your practice management software holds the clinical record of truth).

4 · Sub-processors. We use the services listed at /subprocessors and will give you notice before adding one, with the right to object. Patient names are stripped before any text reaches an AI provider and restored only on our own server.

5 · Your patients' rights. If a patient exercises a data right with you (access, erasure, etc.), we will assist within 7 days of your request so you can meet your 30-day deadline.

6 · Breach notification. If a personal-data breach affects your data, we will notify you within 24 hours of becoming aware, with what we know, so you can meet your own ICO obligations.

7 · Assistance. We will reasonably assist you with security, DPIAs and ICO consultations relating to this processing.

8 · Return and deletion. On ending your use, ask and we will export what remains of your account data to you and permanently delete it, confirmed in writing. (Clinical text older than 7 days is already gone by design.) You can also delete any recording, note or discussion yourself, immediately, in the app.

Your side

You confirm you are a registered dental professional; you tell patients the consultation is recorded and respect a refusal; you review and approve every AI-drafted note before filing it — Chairside drafts, you author; and your practice management system remains the clinical record.

Contact: info@millineer.com · Hosting: Hetzner (EU). This page is versioned; the version you accept is recorded with a timestamp.