Privacy policy
- Last updated November 6, 2026
What Osler Press collects, why, who sees it, and how to ask us to change or delete it.
The Plain Works Co., Ltd., 901-C32, 126 Wolbong-ro, Seobuk-gu, Cheonan-si, Chungcheongnam-do 31166, Republic of Korea, runs Osler Press and is the data controller for account, billing, security and product-use information. Osler Press holds no patient information: a presentation has procedure codes, tooth numbers or a body area, options and prices, and no name, birth date, photo or scan. Privacy contact: hello@oslerpress.com.
1.What we collect
- Account information for the Clinic and its team: name, email, phone, clinic name and role.
- Presentations the Clinic builds: procedure codes, tooth numbers or a body area, options and the Clinic’s prices, with system times for counts and link expiry. No patient name, birth date, photo or scan is stored.
- The Clinic’s price list, its logo (the only file uploaded) and its phone number, shown on the patient link.
- Subscription billing details are entered into Paddle, which sells the Osler Press plan as merchant of record; we receive the plan, its status and Paddle ids, never card numbers.
- Technical information needed to run and secure the service: device and browser type, IP address and error logs.
- Product-use analytics from the clinic app, not from patient link pages.
2.How we use it
| Purpose | Information | Legal basis |
|---|---|---|
| Run the service: show a patient their presentation, email sign-in codes and invites to staff | Account information, presentations and the price list | Our contract with the Clinic |
| Manage the subscription, billed by Paddle | Plan, status and Paddle ids | Our contract with the Clinic; tax and accounting law for billing records |
| Keep the service secure and prevent fraud | Technical information and logs | Our legitimate interest in a safe service; legal obligations |
| Give support | What you send us and your account details | Our contract with the Clinic; our legitimate interest in answering you |
| Improve the product | Pseudonymous usage events from the clinic app | Our legitimate interest in a better product; you can object |
We do not sell personal information and do not use any record for advertising.
3.Who we share it with
| Provider | Role | Data |
|---|---|---|
| Clinic that sent the link | Our client; decides the purpose | Everything on its own presentations |
| Cloudflare | Hosting and delivery | All service data in transit, request logs |
| Supabase | Database and sign-in | All service data, stored in the United States |
| PostHog | Product analytics in the clinic app | Usage events tied to a pseudonymous id |
| Resend | Transactional email | Recipient email, message content |
| Paddle | Sells the subscription as merchant of record; controller of the billing payment data it collects | Billing name, email, country, payment details for the subscription |
We may also share information with our professional advisers (lawyers and accountants, under confidentiality) and disclose it to authorities when the law requires, or to protect people and the service.
We are based in the Republic of Korea. Service data is stored in the United States with Supabase, and the providers above process it where they operate, under their data protection terms.
4.Patient link pages
Pages you reach from a link (/p) use no advertising or tracking cookies, carry nothing about you, and are marked noindex so search engines skip them. The link itself is the key to the page; do not forward it.
5.How long we keep it
Presentations are kept while the Clinic’s workspace is open and afterwards as long as tax, accounting or dispute rules require. When a workspace is deleted we delete or de-identify its data within 30 days, except what the law requires us to retain and backups, which expire on their normal cycle.
6.Your choices and rights
You can ask to see, correct, export or delete your information, or object to a use, by writing to hello@oslerpress.com. If you are a patient who received a link, we hold nothing about you; ask the Clinic that sent it. State privacy laws (for example in California, Colorado, Virginia and Texas) give residents these rights and the right not to be treated worse for using them. We do not sell or share personal information for cross-context advertising. We answer verified requests within 45 days, and may extend once by another 45 days with notice. We verify your identity by matching your request to the email on the account, and may ask for more if needed. An authorized agent may write on your behalf with your written permission. If we decline a request, you can appeal by replying to our answer or writing to the same address with the word Appeal in the subject; we reply within 60 days. To delete a Clinic workspace, see the terms (Settings > Data).
7.Cookies and local storage
The clinic app uses a session cookie and browser local storage to keep you signed in and remember settings, and product analytics from PostHog that use a pseudonymous id. Patient link pages use none of the analytics. We do not currently read the Global Privacy Control signal, because we do not sell or share personal information and use analytics only to run and improve the product.
8.Security and children
We use encryption in transit, access controls between clinics, and audit logs. No system is perfectly secure, and we will notify affected Clinics and individuals of a breach as the law requires. The service is not directed to children under 13 and we do not knowingly collect their information.
9.Changes and contact
We will post changes here and notify Clinics of material ones. Contact: hello@oslerpress.com, or by post to The Plain Works Co., Ltd., 901-C32, 126 Wolbong-ro, Seobuk-gu, Cheonan-si, Chungcheongnam-do 31166, Republic of Korea.