This Privacy Policy explains how Claraview AI, LLC (Claraview, we, us, or our) collects, uses, discloses, and protects personal information when you use the Claraview website, Smile Simulation, Dashboard, practice-specific Claraview links, communications, and related services (collectively, the Services).

This Policy applies to:

• patients and prospective patients who submit information through a Claraview link;

• cosmetic dentists, dental practices, and their team members who use the Dashboard or other Claraview Services;

• visitors to the Claraview website; and

• people who contact Claraview or receive communications from us.

When a patient uses a Claraview link associated with a dental practice, the patient's submission is processed by Claraview and shared with that dental practice as described below. The dental practice may have its own privacy practices and notices. This Policy does not govern information that a dental practice collects or maintains outside the Claraview Services.

1. INFORMATION WE COLLECT

The information we collect depends on how you use the Services.

Information patients provide

When you use the patient experience, we may collect:

• a photograph of your face or smile;

• your name, email address, telephone number, and other contact information;

• information about your cosmetic dental interests, concerns, or requested next steps;

• messages, responses, and other information you submit;

• your consent and communication preferences; and

• any other information you choose to provide.

Smile Simulations and patient activity

We create and maintain information generated through your use of the Services, including:

• your Smile Simulation;

• the dental practice associated with the Claraview link you used;

• communications between you and the practice through Claraview;

• requests for pricing, consultation, or additional information; and

• engagement and activity information related to your Smile Simulation and patient profile.

The Smile Simulation is an illustrative visualization. It is not a diagnosis, treatment recommendation, treatment plan, or guarantee of a clinical or cosmetic result.

Information from practices and team members

When a cosmetic dentist, dental practice, or team member uses Claraview, we may collect:

• name, email address, telephone number, professional role, and login information;

• practice name, location, website, branding, and business contact information;

• subscription, transaction, and billing information;

• patient information, messages, communication history, and private team notes added through the Dashboard;

• customer-support requests, feedback, and communications; and

• other information submitted while configuring or using the Services.

Payment information may be collected and processed by our payment service providers. Claraview may receive limited transaction details, such as payment status, subscription information, and partial payment-method information, but does not necessarily receive or store full payment-card details.

If a practice purchases Claraview through an authorized reseller, the reseller may collect the practice's contact, order, billing, cancellation, and support information under its own privacy policy. Claraview may receive limited practice-account and subscription information from the reseller, such as the account holder, selected subscription, payment status, cancellation status, and support communications.

Information collected automatically

When you use the website or Services, we may automatically collect:

• internet protocol address;

• browser, device, and operating-system information;

• pages and features viewed or used;

• dates, times, referring pages, and interaction information;

• cookie and similar technology identifiers; and

• security, diagnostic, and performance information.

We may use cookies and similar technologies to operate the Services, remember preferences, maintain sessions, understand usage, and protect the Services. You can control some cookies through your browser settings. Disabling cookies may affect how the Services function.

2. HOW WE USE INFORMATION

We use personal information to:

• create the requested Smile Simulation;

• provide, operate, maintain, secure, and support the Services;

• share a patient's submission and Smile Simulation with the dental practice associated with the Claraview link the patient used;

• create and maintain patient profiles in the Dashboard;

• support communications between patients and practices;

• respond to consultation, pricing, and next-step requests;

• administer practice accounts, subscriptions, and payments;

• coordinate practice-account setup, subscription status, cancellation, billing support, and customer support with an authorized reseller when applicable;

• identify a practice as a Claraview customer using its name, logo, and publicly available practice information when authorized by the applicable agreement or the practice;

• authenticate users and protect account security;

• provide customer service and respond to questions;

• monitor performance, troubleshoot problems, and prevent fraud or misuse;

• understand and improve the Services using aggregated or de-identified information;

• comply with law and enforce our agreements; and

• carry out another purpose disclosed when the information is collected or authorized by you.

Claraview does not use identifiable patient photos or Patient Submissions for public advertising, social media, education, or promotional materials without separate written authorization.

3. HOW THE SMILE SIMULATION USES YOUR PHOTO

When a patient uploads a photo, Claraview processes the photo using automated image-processing systems within the Claraview Platform to generate the requested Smile Simulation.

The original photo, the Smile Simulation, submitted contact information, related messages, and activity may be made available to the dental practice associated with the Claraview link the patient used. The practice and its authorized team members may use that information to respond to the patient, support a consultation, discuss potential dental services, maintain the related patient profile, and communicate about next steps.

Uploading a photo does not create a doctor-patient relationship with Claraview. Claraview does not practice dentistry or provide medical or dental advice.

4. HOW WE DISCLOSE INFORMATION

We may disclose personal information in the following circumstances.

The dental practice associated with your link

If you submit information through a practice-specific Claraview link, we disclose your photo, contact information, Smile Simulation, messages, requests, and related activity to that practice and its authorized team members. This disclosure is necessary to connect you with the practice and provide the patient experience you requested.

Internal Claraview processing

Claraview processes patient photographs, Smile Simulations, Patient Submissions, private Dashboard notes, and other consumer health data within Claraview. We do not disclose that information to third-party processors.

Claraview personnel may access information only as needed to operate, secure, maintain, and support the Services and are subject to confidentiality and security obligations. If this processing model changes, we will update this Policy and obtain any consent required by law before a third party processes consumer health data.

Authorized resellers

If a practice purchases Claraview through an authorized reseller, we may disclose limited practice contact information, account identifiers, subscription and payment status, cancellation status, support requests, and security or access information to that reseller as reasonably necessary to administer the practice's purchase and access to Claraview. We do not disclose Patient Submissions, patient photographs, Smile Simulations, private Dashboard notes, protected health information, or other consumer health data to an authorized reseller. A reseller does not receive access to Customer Data to provide reseller support.

An authorized reseller's collection and use of information is also governed by its own privacy policy and the applicable reseller order. A reseller is not treated as a corporate affiliate solely because of the reseller relationship.

Legal, safety, and security purposes

We may disclose information when we reasonably believe disclosure is necessary to:

• comply with law, regulation, legal process, or a valid governmental request;

• protect the rights, safety, and security of Claraview, our users, dental practices, patients, or others;

• detect, investigate, or prevent fraud, abuse, security incidents, or unlawful activity; or

• establish, exercise, or defend legal claims.

Business transactions

Information may be disclosed as part of a merger, financing, acquisition, reorganization, bankruptcy, sale of assets, or similar business transaction. Any recipient will be required to handle personal information in accordance with applicable law.

At your direction or with your consent

We may disclose information to another person or organization when you direct us to do so or provide consent.

5. WE DO NOT SELL PERSONAL INFORMATION

Claraview does not sell personal information. We do not use or disclose patient photos, Smile Simulations, or consumer health data for cross-context behavioral advertising or targeted advertising based on activity across unrelated websites or services.

The disclosure of a Patient Submission to the dental practice associated with the Claraview link is part of the service requested by the patient. It is not a sale of personal information.

6. DE-IDENTIFIED AND AGGREGATED INFORMATION

We may create and use information that has been aggregated or de-identified so that it cannot reasonably be linked to an individual. We may use this information to understand usage, evaluate performance, improve the Services, and develop business insights.

When we maintain information as de-identified, we take reasonable measures to prevent it from being associated with an individual, will not attempt to reidentify it except as permitted by law to test our de-identification processes, and require recipients to maintain it in de-identified form when required by applicable law.

7. DATA RETENTION

We retain personal information only for as long as reasonably necessary for the purposes described in this Policy, including to provide the Services, maintain the applicable patient or practice account, fulfill a patient's request, comply with legal and financial obligations, resolve disputes, prevent fraud, and enforce our agreements.

The retention period depends on the type of information and the context in which it was collected. In determining how long to retain information, we consider:

• whether a practice account remains active;

• whether the information is needed to maintain a patient profile, Smile Simulation, communication history, or requested follow-up;

• the sensitivity of the information;

• the expectations communicated when the information was collected;

• legal, accounting, security, and contractual requirements; and

• whether the information can be safely deleted or de-identified.

We may retain transaction, security, and legal records for longer periods when reasonably necessary. When information is no longer required, we may delete it, de-identify it, or isolate it from further use until deletion is possible.

8. DATA SECURITY

Claraview uses reasonable administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, use, alteration, loss, or disclosure. Claraview operates the Services using safeguards designed to comply with HIPAA when HIPAA applies to Claraview's services. If a breach requires notice under applicable law, Claraview will provide the required notices.

No system can guarantee complete security. You are responsible for protecting your account credentials and for notifying us promptly if you believe an account or submission has been accessed without authorization.

9. YOUR PRIVACY RIGHTS AND CHOICES

Depending on where you live and subject to applicable exceptions, you may have the right to:

• confirm whether we process your personal information;

• access or receive a copy of your personal information;

• correct inaccurate personal information;

• request deletion of personal information;

• withdraw consent for certain processing;

• request information about the categories of information we collect, use, or disclose;

• opt out of certain sales, sharing, or targeted advertising where applicable; and

• appeal a decision we make about a privacy request.

Claraview does not discriminate against anyone for exercising a privacy right.

To submit a request, email hello@claraview.ai with the subject line Privacy Request. Please describe your request and provide enough information for us to identify the relevant account or submission. We may need to verify your identity before completing the request.

If your information was submitted through a dental practice's Claraview link, we may coordinate with that practice to complete your request. A deletion request to Claraview may not delete information that the practice separately maintains outside the Claraview Services. You may need to contact the practice directly about those records.

If we deny your request, you may appeal by replying to our decision or emailing hello@claraview.ai with the subject line Privacy Appeal.

10. CONSUMER HEALTH DATA NOTICE

This section supplements the rest of this Policy for residents of Washington and other states with consumer health data laws.

Categories of consumer health data we collect

Depending on how you use Claraview, consumer health data may include:

• photos of your face, teeth, or smile;

• information about your cosmetic dental interests, concerns, preferences, or requested services;

• your Smile Simulation and information derived to create it;

• messages, consultation requests, pricing requests, and related communications;

• your relationship or interaction with a particular dental practice; and

• activity connected with your patient profile or Smile Simulation.

Sources of consumer health data

We collect consumer health data:

• directly from patients and prospective patients;

• from the dental practice and its authorized team members;

• through automated processing needed to create and deliver the Smile Simulation; and

• from a person's interactions with the Claraview Services.

Why we collect and use consumer health data

We collect and use consumer health data to:

• create and deliver the Smile Simulation;

• connect the patient with the dental practice associated with the Claraview link;

• share the patient's submission and Smile Simulation with that practice;

• support communications, consultation requests, pricing requests, and follow-up;

• maintain the patient's profile and activity within the Dashboard;

• secure, support, and improve the Services; and

• comply with law and protect our rights and users.

Consumer health data we disclose

We may disclose the categories of consumer health data listed above as reasonably necessary for the purposes described in this Policy.

Categories of recipients

Consumer health data may be disclosed to:

• the dental practice associated with the Claraview link used by the patient and that practice's authorized team members;

• Claraview personnel authorized to support the Services and subject to confidentiality and security obligations;

• legal or governmental recipients when required or permitted by law; and

• a successor in a qualifying business transaction.

Claraview does not share consumer health data with corporate affiliates for their own independent purposes.

We do not sell consumer health data.

Consumer health data rights

Subject to applicable law, you may have the right to:

• confirm whether Claraview collects, shares, or sells your consumer health data;

• access consumer health data we maintain about you;

• receive a list of third parties and affiliates with whom your consumer health data has been shared or sold;

• withdraw consent to the collection or sharing of your consumer health data;

• request deletion of your consumer health data; and

• appeal the denial of a request.

To exercise these rights, email hello@claraview.ai with the subject line Consumer Health Data Request. To appeal a decision, reply to our response or email us with the subject line Consumer Health Data Appeal.

Withdrawing consent may prevent Claraview from continuing to provide the Smile Simulation or related features. A withdrawal does not affect processing that occurred before the withdrawal became effective.

11. CHILDREN AND MINORS

The Services are not directed to children under 13, and children under 13 may not submit personal information directly through Claraview.

If a Smile Simulation is requested for a child under 13, the child's parent or legal guardian must submit the information and provide any required consent on the child's behalf. Users under 18 should use the Services only with the involvement and permission of a parent or legal guardian.

If you believe a child submitted personal information without appropriate parental involvement or consent, contact hello@claraview.ai so we can review and take appropriate action.

12. THIRD-PARTY SERVICES AND DENTAL PRACTICES

The Services may contain links to or interact with third-party websites and services. Their privacy practices are governed by their own policies, not this Policy.

When a practice purchases through an authorized reseller, information that the reseller collects directly for billing, cancellation, customer support, or its own services is governed by the reseller's privacy policy and the applicable reseller order.

Dental practices using Claraview are separate businesses. A practice may collect, download, retain, or use information under its own privacy practices and legal obligations, including obligations that may apply under HIPAA or other health privacy laws. This Policy does not replace a practice's own privacy notices or legal duties. Contact the applicable practice directly if you have questions about its practices outside Claraview.

13. CHANGES TO THIS POLICY

We may update this Policy to reflect changes to the Services, our practices, or applicable law. We will post the updated Policy and revise the Effective Date. If a change materially affects how we use previously collected personal information, we will provide additional notice or request consent when required by law.

14. CONTACT US

For questions or requests about this Policy or Claraview's privacy practices, contact: Claraview AI, LLC | hello@claraview.ai | 4444 N 32nd St Ste 235, Phoenix, AZ 85018