Privacy Policy
Last updated: October 4, 2026
This Privacy Policy explains what information the dental image conversion service at dentalxrayconversion.com (the "Service") collects, how it's used, who it's shared with, and how long it's kept. The Service is operated by John Patrick Bender Jr., a sole proprietor ("we," "us"). It applies alongside our Terms of Service.
1. Information we collect
| What | When | Why |
|---|---|---|
| Practice or business name | You enter it at signup | To identify your account |
| Email address | You enter it on our payment processor's checkout page | To send your API key, and to contact you about your account |
| Payment details and billing address | You enter them on our payment processor's checkout page | To charge you, and to calculate any sales tax that applies to your location. These go directly to Stripe; card details are never sent to or stored by us. |
| Images you upload, and their file names | When you convert images through the API | To produce your converted images (see section 3) |
| Usage records | Each conversion through the API | For billing, and to investigate problems you report. Records include the image format, whether it succeeded, a request ID and the time. They don't include the image. |
| Technical information | Every request to the Service | To run, secure and debug the Service, and to enforce rate limits. This includes your IP address, browser type, the page or endpoint requested and the time. |
Your API key is stored only as a one-way hash, so we can't see or recover it.
2. How we use information
We use the information above only to provide, bill for, secure and support the Service. We don't sell your personal information, and we don't share it for advertising.
3. Uploaded images
- Original files are processed in temporary storage only to produce the converted image, then deleted.
- Files that fail to convert may be kept for up to 30 days, solely to diagnose and fix the failure, under their request ID rather than their original file name. They're then deleted automatically.
- Converted images are returned in the API response and not kept.
Images and file names from dental practices may contain patient information. See the Healthcare Data section of our Terms of Service for your responsibilities, and note that nothing on this page is a Business Associate Agreement.
4. Who we share information with
We share information only with the service providers that run parts of the Service for us, and only as needed for them to do so:
- Google Cloud: hosting, database, file storage, logs and DNS.
- Stripe: payment processing and sales tax calculation. Stripe handles your payment details under its own privacy policy.
- Resend: sending API-key emails.
- Google Workspace: receiving and storing email sent to our addresses, including support.
- Google Fonts: our pages load fonts from Google Fonts, which receives your IP address and browser information when a page loads.
We may also disclose information if required by law, to protect the rights or safety of our users or others, or as part of a sale or transfer of the business.
Other than the providers above, no third parties collect information about your activity on the Service over time or across other websites.
5. Cookies and tracking
The Service doesn't use cookies, analytics or advertising trackers. Stripe's checkout page sets its own cookies on Stripe's domain. Because we don't track you across websites, we don't respond differently to browser "Do Not Track" signals.
6. How long we keep information
- Uploaded images: as described in section 3.
- Technical logs: 30 days. When something goes wrong, logs can also include an email address involved in the error.
- Account and usage records: for as long as your account is open, or as long as needed for tax, accounting and legal purposes.
7. Security
Connections to the Service are encrypted (HTTPS). API keys are stored only as hashes, stored images are in private storage that isn't publicly accessible, and access to our systems is restricted. No system is perfectly secure, so we can't guarantee absolute security.
8. Your choices and rights
You can ask to see the personal information we hold about you, correct it, or delete it, by emailing support@dentalxrayconversion.com. We'll respond within 30 days. We may need to keep some records where the law requires it, such as payment records. You can also rotate or revoke your API key at any time (see the API docs).
9. Children
The Service is for businesses and is not directed at children. We don't knowingly collect personal information from anyone under 16.
10. Changes to this policy
If we change this policy, we'll update the date at the top of this page. For material changes, we'll also email account holders before the change takes effect.
11. Contact
Questions about this policy or your information: support@dentalxrayconversion.com.