Privacy Policy & Terms of Service

1. Application Overview & Purpose

Dental Monitoring Dashboard is an operational productivity analytics platform designed exclusively for tracking daily monitoring operator throughput, completed cases, and performance telemetry.

2. Google User Data We Access & Collect

When you authenticate with Google and connect your Google Drive, the application requests the following Google OAuth 2.0 scopes:

A. Identity & Profile Scopes (openid, email, profile)

• Email Address: Used as your unique account identifier and to associate your workspace data.
• Profile Name: Used to personalize dashboard welcome greetings and PDF export headings. You can customize your display name at any time in Settings.
• Profile Picture URL: Used to render your user avatar in the top navigation bar.

B. Google Drive Scope (https://www.googleapis.com/auth/drive)

• Designated Folder Inspection: The application only accesses the specific Google Drive folder that you explicitly select or provide during onboarding or in Settings.
• Reading Daily Productivity PDFs: The application scans your chosen folder solely to read daily operator productivity summary PDFs placed there by you or your team.
• In-Place Archiving: Once a PDF report is parsed and verified, the pipeline moves the processed PDF into an archive/ subfolder inside your designated Google Drive folder to prevent duplicate imports.
• Zero Deletion Guarantee: The application never deletes any files or folders from your Google Drive.
• Folder Isolation: We never read, inspect, or modify any files outside your designated folder.

3. Data Extracted & Stored in Cloud Firestore

When a daily report is processed from your Drive, only high-level numerical and operational metadata fields are saved to our secure Cloud Firestore database:

• date: The calendar date of the report (YYYY-MM-DD).
• casesFinished: Total completed monitoring cases recorded for that day.
• individualScore: Efficiency and quality score recorded on the report.
• records & details: Hourly aggregate counts of completed cases across active shifts.
• metadata: SHA-256 cryptographic checksum of the file content (used strictly to detect and prevent duplicate imports), timestamp, and page count.
• sourceFileId & sourceFileName: Google Drive file identifiers to link records back to your original PDF in Google Drive.
• scheduleMinutes: Your background sync frequency preference (e.g., Manual, Daily, Weekly).

4. Google API Services User Data Policy & Limited Use Disclosure

5. Prohibition on Third-Party Sharing, Advertising & AI Training

We strictly protect the confidentiality of your Google user data and operational metrics:

• No Selling or Renting: We do never sell, rent, monetize, or trade your personal data or Google user data under any circumstances.
• No Advertising or Marketing: We never share or transfer your data to advertising platforms, data brokers, or marketing networks.
• No AI/ML Model Training: We do never use your Google user data or report metrics to train, fine-tune, or develop artificial intelligence (AI) or machine learning (ML) models.
• No Third-Party Transfers: Your data is never transferred to third parties, except as strictly required to host the secure backend infrastructure on Google Cloud Platform / Firebase.

6. Data Security & Encryption Standards

We employ enterprise-grade security protocols to protect your credentials and data:

• AES-256-GCM Token Encryption: Google OAuth refresh tokens are encrypted at rest using AES-256-GCM with hardware-isolated encryption keys.
• HTTPS / TLS Everywhere: All communications between your browser, our servers, and Google APIs are secured with TLS 1.3 encryption.
• Cross-Site Protection: All API requests require strict CSRF validation and origin verification.
• Firestore Access Control: User data in Cloud Firestore is strictly isolated by authenticated user ID; no user can access or view another user's metrics.

7. Data Retention, Revocation & Self-Service Deletion

You have complete control over your data and access permissions at all times:

• Instant Self-Service Data Deletion ("Delete all data"): In the Settings page (/settings), clicking "Delete all data" immediately and permanently erases all your parsed reports, telemetry records, user settings, active sessions, and stored OAuth credentials from our database.
• Google Account Revocation: You can revoke the application's access to your Google Account at any time via your Google Account Security Permissions page.
• Disconnection: You can stop background polling and disconnect your Drive folder anytime via Settings.
• Drive Preserved: Deleting your account or disconnecting the tool has zero impact on your Google Drive—all your original and archived PDFs remain in your Drive.

8. Contact Information for Privacy Inquiries

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your data, please contact the application maintainer:

• Application: Dental Monitoring Dashboard
• Support & Developer Email: mr.debjit.sadhukhan@gmail.com
• Homepage: https://dmd.qd.je/

1. Permitted Use

Dental Monitoring Dashboard is provided as an internal operational productivity assistant for monitoring operators. You agree to use the service only for lawful purposes in accordance with these Terms.

2. User Responsibilities

• You are responsible for ensuring that the Google Drive folder connected to the service contains only intended daily productivity report PDFs.
• You agree not to upload malicious files, non-report binary content, or automated scripts into the monitored folder.
• Operators remain responsible for reviewing summary metrics for auditing and operational consistency.

3. Disclaimer & Limitation of Liability

The service is provided on an "as is" and "as available" basis without warranties of any kind. While automated checks verify summary totals against hourly rows, the application is not liable for data entry discrepancies originating in the source PDF reports.

4. Changes to Terms

We may update these Privacy Policy and Terms of Service periodically. Any material modifications will be reflected with an updated effective date at the top of this page.