Last Updated: October 17, 2026
PatientBack is built for dental clinics, and we treat the confidentiality of clinical work as the foundation of the product. This page explains, in plain language, what data we handle and how we look after it. PatientBack is operated by Juxano, Inc., a Delaware corporation, 1908 Thomes Avenue, STE 12683, Cheyenne, WY 82001, USA. Questions are always welcome: info@patientback.com
Where local data-protection law uses different names for these roles — such as "Data Fiduciary" and "Data Processor" under India's DPDP Act — the same allocation of responsibilities applies.
Clinic account data: clinic name, email, phone, country and language, sign-in credentials (a password hash, or a Google account identifier if you choose "Sign in with Google"), settings and billing details.
Patient data you add: name, phone or messaging contact, preferred language, appointments and visit history, the clinical records you keep in the dashboard, X-ray images you upload with their analysis results, and — if you use document generation — the details those documents require, such as identity document numbers, dates of birth and home addresses. These document fields are stored encrypted.
Technical data: standard server logs (IP address, browser, timestamps) kept for security and troubleshooting.
A detailed description of our technical and organizational security measures is available to Clinics on request. If a security incident affecting personal data ever occurs, we will inform affected Clinics without undue delay so they can meet their own obligations.
Like any modern service, PatientBack runs on a small set of carefully selected infrastructure providers — hosting in the European Union, cloud storage for de-identified images, the messaging channels you choose (WhatsApp, Telegram or SMS), a certified payment processor, an email delivery provider, and an AI provider for the support assistant in the dashboard (Anthropic; OpenAI, if enabled). Each receives only what its function requires and is bound by a written agreement. Messages carry only what a reminder needs — typically the patient's first name, your clinic's name and the appointment time; clinical records are never sent through messaging channels.
A current list of these providers, with the role of each, is available to Clinics on request at info@patientback.com.
Our servers and databases are located in Finland, within the European Union. Where a provider we use operates outside the European Economic Area, the transfer is protected by the safeguards applicable law requires, such as the European Commission's Standard Contractual Clauses.
Patient data stays exactly as long as you keep it in the service. When you delete a patient, the records are removed and stored images are erased within 30 days. If you close your account, we delete your data and keep only what law and accounting require. Rolling backups are overwritten in turn.
For clinics: you can view and correct your data in the dashboard and download signed documents and tax certificates there; for a full export of your clinic's data, or to delete your account, write to info@patientback.com at any time. Depending on your country, you may also have rights to object to or restrict processing, and to contact your data protection authority.
For patients: your dentist is in charge of your data — please direct requests to your clinic, and we will help the clinic fulfil them. You can stop receiving messages at any time by telling your clinic or using the opt-out in the messaging channel.
The dashboard stores a sign-in token in your browser — essential for the service to work. We do not use advertising cookies and do not track patients across other websites.
Visit statistics on our public website. On our public pages (not in the dashboard and not on pages clinics send to patients) we count visits ourselves, without cookies: which pages are opened and for how long, how far a page is scrolled, which links and buttons are pressed, and how far the sign-up form gets — never what is typed into it. We do not store your IP address: visits are grouped by a pseudonymous key derived from it together with a random value that changes every day and is deleted after two days, so the key cannot be traced back to you or linked across days. The country is estimated from your browser's time zone. If you sign up, the source of that first visit (for example, a search engine or a link) is saved with your clinic account. Detailed visit records are kept for 180 days. Our home pages also use Google Analytics, which sets its own cookies.
PatientBack is sold to clinics, not individuals. Patient records may relate to children; the Clinic remains responsible for the legal basis for that data, including any parental consent its law requires.
When our processing changes, we update this page and the date above, and notify Clinics by email about material changes.
Juxano, Inc., a Delaware corporation, 1908 Thomes Avenue, STE 12683, Cheyenne, WY 82001, USA