Last updated: 4 July 2026
Privacy Policy
Who we are
Treatly (“we”, “us”, “Treatly”) provides a software platform that helps dental practices (“Practices”) create and share treatment plan explainers with their patients (“Patients”). This policy explains how we collect, use, and protect information through that platform.
What information we collect
From Practices (the dental clinics who sign up)
- ●Practice name, address, phone number, website
- ●Practitioner names and titles
- ●Login email and password (or login credentials)
- ●Treatment pricing set by the practice
From Patients (via the practice, when a plan is created)
Patient information is entered by the practice, either typed in manually or extracted from an uploaded document. Either way, it is collected on behalf of the dental practice, not independently by Treatly.
- ●Patient name
- ●Patient mobile number and email address (optional, where provided by the practice or present in an uploaded document)
- ●Health fund name (optional, where provided by the practice or present in an uploaded document)
- ●Treatment details entered by the practice (procedures, tooth numbers, costs, rebate and discount amounts)
- ●Whether the plan link has been opened, how many times, and when it was last opened — a count and a timestamp only. We do not record IP addresses, device details, or location, and this is visible only to the practice that created the plan.
Treatment plans contain health information as defined under the Privacy Act 1988 (Cth). This information is collected only for the purpose of providing the Treatly service to the practice, is not sold or used for advertising, and is deleted upon account closure or on request (see “How long we keep data” and “Your rights” below).
We do not collect patient health records, medical history, or clinical notes. Only the treatment plan summary the practice chooses to share.
We do not collect: patient payment details, Medicare or health fund membership numbers, or any clinical data beyond what the practice enters or uploads in order to generate a treatment plan.
How we use this information
- ●To generate and display the treatment plan page for the patient
- ●To let the practice manage their own settings, pricing, and plans
- ●To operate, maintain, and improve the Treatly platform
We do not sell or rent practice or patient information to third parties.
We do not use patient information for advertising.
AI document processing
Treatly offers an optional “Import from PDF” feature. When a practice uses this feature, the uploaded document is sent to Anthropic’s Claude API, which reads the document and extracts treatment items, fees, and where present, the patient’s name, mobile number, email address, health fund name, rebate amounts, and any discounts. The dentist reviews all extracted information before anything is sent to a patient.
Cross-border data processing (Australian Privacy Principle 8)
Uploaded documents are processed by Anthropic on servers located in the United States. Anthropic contractually commits to not retaining or training on submitted data. Patient plan data that is saved after the dentist’s review is stored in Australia (see “Where the data is stored” below). If we move to an Australian-hosted AI endpoint in the future, this section will be updated accordingly.
Who can see the data
- ●Each practice can only see its own settings, pricing, and the plans it created. Practices cannot see another practice's data.
- ●A patient's treatment plan link is only accessible to people who have that specific link. It is not searchable or listed publicly.
- ●Treatly's operator may access account data only as needed to provide support or maintain the platform, and treats it as confidential.
Where the data is stored
Our database is hosted in Australia, on AWS infrastructure in the Sydney (ap-southeast-2) region, via our database provider Neon. Our application hosting provider (Vercel) operates on a global network to serve the website quickly, but practice and patient data itself is stored within Australia.
When the optional PDF import feature is used, the uploaded document is processed by Anthropic on servers located in the United States before being discarded. The treatment plan data you save after reviewing the extracted information is stored in Australia. See “AI document processing” above for further detail.
How long we keep data
We retain practice and patient plan data for as long as the practice's account is active, plus a 30-day backup retention period after cancellation, after which it is permanently deleted. Uploaded PDFs are never stored. They are discarded immediately after AI extraction.
Security
We take reasonable technical and organisational steps to protect data, including encrypted connections (HTTPS), access controls so practices only see their own data, and regular backups. No system is 100% secure, but we are committed to promptly investigating and addressing any suspected data breach in line with the Notifiable Data Breaches scheme under the Privacy Act 1988 (Cth).
Your rights
Practices and patients can request access to, correction of, or deletion of their information by contacting us at treatlyau@gmail.com. Practices are responsible for obtaining any necessary patient consent before entering patient information into Treatly, including any consent required for that information to be processed by an overseas AI service.
Changes to this policy
We may update this policy from time to time. Material changes will be notified to practices via email or in-app notice.
Contact us
Questions about this policy: treatlyau@gmail.com