Privacy Policy

Who we are

Lucy AI is an AI receptionist for dental practices. It is a product of Prometheus AI Labs ("we", "us"). This policy explains what information we collect through this website (lucy-ai.dental), the Lucy AI dashboard (dashboard.lucy-ai.dental) and the Lucy AI service, how we use it, and the choices you have.

Information we collect

When you visit this website or book a demo. If you book a demo or contact us, we collect what you give us, such as your name, email address, phone number and practice name. Like most websites, our hosting providers keep basic technical logs (IP address, browser and pages requested) to run and secure the site.

When you use the Lucy AI dashboard. Dental practices invite their staff to the dashboard. For each staff account we keep the person's name, email address, role and which practice locations they can access. When someone signs in, we record security details such as the time, IP address and browser, so we can detect misuse and keep an audit trail.

When you sign in with Google. If you choose Continue with Google, Google shares your name and email address with us. We use them only to confirm who you are and sign you in to an account your practice has already created. We do not receive your Google password, and we do not access your Gmail, contacts, calendar or any other Google data.

When a practice uses Lucy with its patients. Lucy answers calls, texts and web chats, and helps book appointments for the practice. To do that, Lucy handles information about the practice's patients, such as names, phone numbers, appointment details, call recordings, transcripts and messages. This information belongs to the practice, and we handle it on the practice's behalf (see Patient information below).

How we use information

• To provide Lucy AI to dental practices: answering patients, booking appointments and sending the practice updates.
• To create and secure staff accounts, including sign-in, two-step verification and access controls.
• To send account emails, such as invitations and password reset codes.
• To respond to demo requests and questions.
• To monitor, troubleshoot and improve the reliability and security of our service.
• To meet legal obligations.

We do not sell personal information, and we do not use patient information for advertising.

Patient information and HIPAA

Dental practices are covered by HIPAA. When we handle protected health information for a practice, we act as the practice's business associate. We use and share that information only to provide our services to the practice and as HIPAA allows. If you are a patient and have questions about your health information, or want to access or correct it, please contact your dental practice directly. We will help the practice respond.

Text messages

Lucy may send appointment and follow-up text messages on behalf of a practice to patients who have agreed to receive them. Message and data rates may apply. You can reply STOP to opt out at any time. We do not share mobile phone numbers or text message consent with third parties for their own marketing.

How we share information

We share information only in these situations:

• With the practice you are connected to. Staff and patient information is available to the practice that owns it, limited by each staff member's role and location access.
• With service providers that help us run Lucy AI, such as cloud hosting, phone and text messaging, voice AI, email delivery, scheduling software integrations and sign-in services. They may use the information only to provide their services to us.
• When required by law, or to protect the rights, safety and security of our users, patients or the public.
• If our business changes hands, as part of a merger or sale, subject to the same protections described here.

Cookies

The dashboard uses cookies that are needed to sign you in and keep your session secure. We do not use advertising cookies or third-party tracking on the website or the dashboard.

Security

We protect information with encryption in transit and at rest, two-step verification for password sign-in, role-based access limited to each staff member's practice locations, and audit logs of sign-ins and access. No system is perfectly secure, but we work to protect your information and review our safeguards regularly.

How long we keep information

We keep staff account information while the account is active and for a reasonable period after, as needed for security, audit and legal purposes. We keep patient information for as long as our agreement with the practice requires, then return or delete it as that agreement and the law allow.

Your choices

Staff can ask their practice administrator to update or deactivate their account. You can contact us to ask about, correct or delete information we hold about you, subject to our obligations to the practice and the law. Patients should contact their dental practice.

Children

The website and dashboard are for businesses and are not directed to children. Lucy may handle information about patients of any age only on behalf of a dental practice.

Changes to this policy

We may update this policy from time to time. When we do, we will change the date at the top of this page.

Contact us

Questions about this policy or your information? Email us at azhar@prometheusailabs.com.