Privacy Policy
What data OrthoTruss™ collects, how it is stored, and your rights.
- Your project data lives on your own machine — it is not uploaded to OrthoTruss™ servers.
- We collect only what is necessary to deliver the product: your email and name to create an account and a license key.
- Payment is handled entirely by Stripe — OrthoTruss™ never sees or stores your card number.
- We do not sell, rent, or share your personal information with advertisers or data brokers.
Who this policy covers
This policy applies to users of orthotruss.com, the OrthoTruss™ Practice Pioneer desktop application, and the OrthoTruss™ biomechanics simulators and tools (collectively, the "Services"). It is published by Jean-Marc E. Choufani, the individual operating OrthoTruss™.
What we collect and why
Account & license data
When you create an account in the Practice Pioneer, we collect your email address and name. These are stored in a local SQLite database on your own machine and relayed to our license provider (Keygen) solely to mint and validate your license key. We use your email to send you your license key and product announcements you can opt out of at any time.
Payment data
Purchases are processed by Stripe. OrthoTruss™ never receives, transmits, or stores your full card number, CVV, or bank credentials. Stripe's privacy policy governs the payment data they hold: stripe.com/privacy.
Project and planning data
All practice planning data you enter in the Practice Pioneer (feasibility scores, budget figures, lease comparisons, cash-flow projections, credentialing records, etc.) is stored locally on your machine in a SQLite database at %LOCALAPPDATA%\OrthoTrussPracticeSuite. This data is not uploaded to OrthoTruss™ servers. Automated daily backups are written to the same local folder.
Market & demographic data
When you run a market analysis or Site Intelligence report, the Practice Pioneer queries the US Census Bureau API (via an OrthoTruss™ proxy) and the NPPES National Provider Registry using the ZIP codes you provide. These queries are transient — no personally identifiable information is included, and the raw query data is not retained by OrthoTruss™.
AI Copilot (Pro)
If you use the AI Copilot feature, your messages are sent to Anthropic's Claude API via an OrthoTruss™-hosted proxy that requires a valid Pro license. Anthropic's privacy policy governs how they handle API requests: anthropic.com/privacy. Copilot conversations are not stored by OrthoTruss™.
Feedback submissions
If you submit feedback through the app (Settings → Profile → Send feedback), the message, your name, email, and app version are forwarded to an OrthoTruss™ email address via Resend. We use this only to respond to and triage your feedback.
Website analytics
orthotruss.com uses Cloudflare Web Analytics, a privacy-first analytics tool that does not use cookies or fingerprint individual visitors. It provides aggregate page-view counts only.
Simulator tools
The OrthoTruss™ biomechanics simulators run entirely in your browser. They do not transmit any data to OrthoTruss™ servers and do not set cookies.
Third-party services
| Service | Purpose | Data shared |
|---|---|---|
| Stripe | Payment processing | Name, email, billing address, payment method |
| Keygen | License management | Email, machine fingerprint (for license binding) |
| Anthropic | AI Copilot (Pro only) | Copilot chat messages you send |
| Resend | Transactional email (license delivery, feedback) | Name, email |
| Cloudflare | Website analytics & CDN | Aggregate page-view data (no cookies) |
OrthoTruss™ does not sell, rent, or share your personal information with any party not listed above, and never shares it with advertisers or data brokers.
Data retention
Account and license records are retained for as long as your license is active or until you request deletion. If you request deletion, we will remove your email and account record from our systems within 30 days, subject to any obligations required by law (for example, Stripe may retain transaction records for tax purposes).
Security
Sensitive keys (license tokens, API credentials) generated per installation are stored in a machine-local .env file and never transmitted over the network. Payments are handled entirely over Stripe's PCI-compliant infrastructure.
Children's privacy
The Services are designed for licensed dental and orthodontic professionals and are not directed at anyone under 18. We do not knowingly collect information from minors.
California residents (CCPA)
California residents have the right to know what personal information we have collected, request deletion of that information, and opt out of any sale of personal information. OrthoTruss™ does not sell personal information. To exercise your rights, contact us at the address below.
Changes to this policy
If we make material changes to this policy, we will update the "Last updated" date at the top of this page. Continued use of the Services after such changes constitutes acceptance of the updated policy.
Contact
Privacy questions, data deletion requests, or concerns: choufani8@gmail.com