This is the privacy notice for the oralstack marketing website at oralstack.com. It does not describe processing inside the Oralstack clinic product. A clinic deployment has its own contract, configuration, and data-processing terms.
Keep patient data out of this site.
Public forms, general business email, WhatsApp, and demo-booking fields are for clinic and business contact details only. Do not submit patient names, identifiers, health information, clinical records, passwords, access tokens, or vulnerability details through those channels. For a security finding, use the dedicated disclosure address on the Security page and include only a safe, concise reproduction without patient data or live credentials.
Contact and demo requests
When you use a form on this site, we receive the fields you choose to submit. Depending on the form, that can include your name, work email, clinic or group name, organization, role or team, location, current clinic system, clinic size, preferred workflow, review request, timing, and free-text notes. We use this information to answer the request, assess fit, prepare a walkthrough, scope a connection or pilot, or respond to a security and procurement review.
The form posts to a Cloudflare Pages Function, which sends the request through Resend to the Oralstack business inbox. Resend states that its primary processing and account data storage, including email metadata, logs, and API records, are in the United States. The inbox provider and storage location depend on the business-email configuration in use at the time.
You can also contact us directly at hello@oralstack.com. Opening the WhatsApp option leaves this site and sends information to WhatsApp under its own terms and privacy notice.
Optional Cal.com scheduler
When a Cal.com scheduler is configured, the page does not load it until you choose to open it. Loading the scheduler creates a direct connection to Cal.com. The selected workflow and the page that led you there are included as booking context, and any details you enter are processed under Cal.com's privacy notice. A first-party Oralstack request form remains available without loading Cal.com.
Site requests and interaction telemetry
Cloudflare delivers this site through its global network and receives ordinary network request data needed to serve and protect it. The interactive product examples can send a small, first-party event to our Cloudflare endpoint: an allowlisted event name, limited non-sensitive properties, a timestamp, and the page path. We do not include form contents, raw referrers, full user-agent strings, or country in those event logs. This event endpoint does not run when your browser signals Global Privacy Control or Do Not Track.
If Cloudflare Web Analytics is enabled, its performance beacon is also suppressed for those browser privacy signals. Cloudflare describes that service as cookie-free, without local storage or cross-site tracking. We do not send form contents to the analytics beacon.
Service providers and international processing
Cloudflare, Resend, and the configured business-email provider process information to operate the site and answer requests. Cal.com and WhatsApp process information only when you choose those external paths. These providers may process information outside Singapore, including in the United States. We do not sell marketing-site personal information.
Retention
Request correspondence and infrastructure logs follow the operating settings of the relevant inbox and service. Oralstack has not published a fixed deletion schedule for marketing-site records. You can ask us to delete a request; limited records may still be kept where needed for security, fraud prevention, dispute handling, or legal obligations.
Your choices and questions
You can ask about, correct, or request deletion of personal information associated with a marketing-site request by emailing privacy@oralstack.com. We assess requests under the law that applies to the request; this notice does not promise a fixed response time.
Updates
When this notice changes, we update the date at the top. The current page is the authoritative marketing-site notice.