Privacy Policy

Who is responsible for your data

Zircca is a product of FL Marketing Management LLC, a company formed in Florida, United States. It is the controller of the data described here and the party you address. For any privacy matter: hola@zircca.com.

What we store

• About Zircca users: name, email, phone, and the lab's tax details.
• About cases: the patient reference the lab types in, the requested work, attached files, and amounts.
• About usage: technical access logs, to diagnose problems and detect abuse.
• About browsing, and only if you accept: we use Google Analytics to learn which screens get used and the Meta pixel to measure our ads. Both load through Google Tag Manager, the container where they are configured. We send them the screen path and the campaign parameters of the link the visit arrived through, and nothing else: anything typed into a search box inside the application, email addresses and invitation links are stripped from the address before it is sent, and case and record identifiers are replaced. Neither loads until you accept: the first visit asks, and the answer can be changed at any time.
• About sign-up: when an account is created we store the IP address and browser it was created from. It serves one purpose — detecting chained accounts used to repeat the free trial — and deletes itself after twelve months.

About patients

Zircca is not a clinical record and does not ask for diagnoses or medical history. And it does not store full patient names: if you type one, it is reduced when saved according to the country where the dentist practices or, if not set, the lab's country; with neither, initials only. In the United States, the European Union, the European Economic Area, the United Kingdom and Switzerland only the initials are kept (“A. P.”); elsewhere, the first initial and the surnames (“A. Pérez Soto”). A chart number or internal reference is stored as typed. This is not a recommendation or a setting you can change — the database enforces it, at the single point every write passes through.

To fabricate a crown a lab does not need anyone's name: the case code and the tooth chart are enough. The person who knows whose work it is is the dentist, and that lives in their own clinical record, outside Zircca.

The consequence is what matters if you practice in the United States: because it does not handle patient identifiers, Zircca does not act as a business associate under HIPAA and no agreement (BAA) is needed to use it. Cases created before this change may still hold what was typed then; write to us and we will reduce them.

Outside those countries, the first initial with the surnames is still personal data. Zircca processes it as a processor, on the lab's behalf and only to manage its cases, under the data processing agreement (DPA).

The assistant and artificial intelligence

If your lab turns the assistant on, the questions you ask it and the data it needs to answer them — cases, amounts, prices, dentist names, and the patient's initials — are sent to Anthropic, which runs the model (Claude). This happens only when someone asks: there is no background sending.

Anthropic processes that data on our behalf and does not use it to train its models. The assistant queries with your own session, so it can only reach what you can already see on screen.

The assistant can be turned off in Settings, and while off nothing is sent. If you prefer to use your own Anthropic key, the lab becomes the party contracting that processing directly with them.

Advertising and measurement

We use Google Analytics to understand how the site is used, and the Meta pixel (Facebook and Instagram) to learn which ads bring labs in. Both require your acceptance, and neither loads before you give it.

When a subscription is paid, we send Meta a notice of that purchase from our server, with the administrator's email turned into an irreversible code — not in the clear — and the identifiers the pixel itself left in your browser. It exists to attribute the sale to the ad that brought it. It is only sent if you had accepted measurement.

You can withdraw your acceptance at any time: the cookie notice carries the decline button, and once you have answered, the button to decide again appears just below. When you withdraw it we delete any cookies Google and Meta had set, stop loading them, and also delete the identifiers we had stored for your account, so nothing further is sent.

We do not sell data to anyone, and we do not give Meta or Google any information about your cases, your patients, your prices, or your clients.

Where data is processed

In the United States. Our infrastructure providers operate there, so if you use Zircca from Chile, Colombia, Mexico, or elsewhere in the region, your data crosses the border. We say so because your local law treats this as an international transfer and you have the right to know.

Who else handles it

To run the service we use providers that process data on our behalf. This is the full list and what each one is for:

• Supabase: database, authentication, and files.
• Railway: application hosting.
• Cloudflare: the network the site's traffic comes through. It sees the IP address of each request and the country it comes from.
• Resend: delivery of the product's emails.
• Stripe: subscription billing. Cards are processed in its own environment and Zircca never receives or stores a single digit.
• Anthropic: the model behind the assistant, only if your lab turns it on. It does not use the data to train its models.
• Google (Analytics y Tag Manager): site usage measurement, only if you accept.
• Meta Platforms: measurement of our ads, only if you accept.
• Telegram: receives an internal notice when a new account is created, with the lab's name and the email of whoever signed up. It goes to our own channel and nowhere else.

What we do not do

We do not sell personal data. We do not hand it to third parties for their own benefit. We do not use it to train artificial intelligence models, and we do not let our providers do so either.

If we change any of the providers listed above or add a new one, we notify each account's administrators by email before the change. The current list, with each one's purpose and country, is published at zircca.com/subencargados, and the data processing agreement (DPA) that governs this processing is available as a PDF in the footer.

Who sees what

Each lab sees only its own data, and that separation is enforced in the database, not just on screen. A dentist working with several labs sees cases from all of them in one inbox, but the commercial terms they have with one lab are invisible to the others.

Three images are served publicly, because that is what they are for: the lab's logo — which appears on the documents and emails its client receives — the photo on its directory profile, and the QR code for its payment methods. Anyone with the exact address can view them. No case, case file, or patient data is served that way: those are delivered through a signed link that expires.

How long we keep it

As long as the account is active. You can export everything from the application itself at any time; once the account is closed, the data is deleted. If the account is suspended for non-payment, the option to export your data and files stays available before the final closure. The sign-up IP and browser have their own term: twelve months, and sooner if the account is deleted.

If something goes wrong

If we confirm a security breach that compromises your data, we notify the account administrator's email within the following 72 hours, with what we know: what happened, which data it touches, and what we are doing about it.

Who it is for

Zircca is a professional tool for dental labs and dentists. It is not directed at anyone under 18 or at end consumers.

Your rights

You can request access, correction, deletion, or a portable copy of your personal data by writing to hola@zircca.com. We respond within the deadlines applicable law requires, and we will not treat you differently for asking.

You exercise these rights yourself, without asking anyone's permission. If you administer a lab: the copy downloads from Settings → Your data, and final closure from Settings → Delete lab. If you are a dentist, your account is yours and not the lab's: you close it from Your profile → Close my account.

Closing a dentist account deletes the account — your name, your email, your photo and your preferences — and unlinks it from each lab. Your cases, their files and the conversation stay with each lab, because they are the record of work that happened and its accounting, and the controller of that data is the lab. If you want one of them to delete it, ask that lab and we will act on it as their processor.

This standard applies to everyone, wherever you live. Your country may also grant you its own rights — Chile (Law 21.719), Colombia (Law 1581), Mexico (LFPDPPP), Brazil (LGPD), or Argentina (Law 25.326), among others — and we honor those too.

If you live in California

The CCPA/CPRA gives you the right to know what personal information we collect and why, to request its deletion or correction, and not to be discriminated against for exercising those rights.

We do not sell personal information. We do *share* it in the technical sense the CPRA gives that word: by using the Meta pixel and its Conversions API to measure our advertising, a third party receives browsing identifiers and, when there is a purchase, your email turned into an irreversible code. That counts as cross-context behavioral advertising, and we say so plainly rather than hiding behind a convenient denial.

You can avoid it entirely, in one click: decline measurement in the cookie notice, or withdraw it later with the button under “Advertising and measurement,” higher up on this same page. You do not need to write to us, we ask for no information to process it, and nothing in the product works worse for having done it.

This only concerns browsing on our site. The data a lab loads into Zircca — cases, patients, prices, clients — is not shared with anyone for advertising, not with Meta, not with Google, not with anyone else.

Changes

If this policy changes in a material way, we notify each account's administrators by email before it takes effect.