Effective Date: September 18, 2026
This Privacy Policy explains how Opux, LLC ("Opux," "we," "us," or "our") collects, uses, discloses, and protects personal information when you visit opux.ai, contact us, request a demonstration, or interact with our business-facing services. It also explains at a high level how we process personal information on behalf of dental and other healthcare practices that are Opux’s customers. This policy is not a notice of privacy practices for any of those practices. “Personal information” means any information that identifies or relates to a particular individual and includes information referred to as “personally identifiable information” or “personal data” under applicable data privacy laws, rules or regulations.
1. Our Role
Opux provides an AI-powered voice receptionist platform that supports inbound calls, general office information, scheduling, and related workflows (the "Services"). When Opux handles personal information to provide the Services for a practice, Opux acts as the practice's business associate under the applicable business associate agreement ("BAA") and processes that information on the practice's behalf. The practice remains responsible for its patient relationship, privacy notices, and instructions. Please also review the applicable practice's privacy notice. Patients seeking access to, correction of, or deletion of practice records should contact the relevant practice directly.
2. Information We Collect
Information from our website and business contacts
Contact information, such as name, business email, telephone number, company, title, and the content of communications.
Account and onboarding information for practice personnel, such as authorized contacts, location information, scheduling preferences, technical configuration, and support requests.
Website and device information, such as IP address, browser type, device identifiers, pages viewed, referring page, approximate location derived from IP address, and interaction data collected through cookies or similar technologies.
Commercial information, such as requested services, contract details, billing contacts, and transaction records.
Personal information processed for practices
Depending on a practice's configuration, the Services may process information supplied by a caller or read from the practice's system, including name, date of birth, telephone number, email or mailing address, appointment and provider details, reason for calling, limited insurance information, call audio, transcripts, and call metadata. Opux does not request Social Security numbers, and callers should not provide them.
3. How We Use Information
Provide, configure, maintain, secure, troubleshoot, and improve the Services for the applicable practice, subject to the patient-information limits below.
Authenticate users, integrate with practice systems, execute scheduling instructions, and deliver callback messages.
Respond to inquiries, arrange demonstrations, administer customer relationships, and provide support.
Monitor performance, prevent fraud or misuse, investigate incidents, maintain business records, and comply with law.
Analyze website use and improve our business-facing website and communications.
We use personal information only as permitted by our agreement with the applicable practice, the BAA, and applicable law. The general uses and disclosures described in this policy do not authorize a broader use or disclosure of personal information.
We do not sell personal information or use personal information for targeted advertising or to train general-purpose or shared AI models.
4. How We Disclose Information
Healthcare practices. We disclose personal information to the practice for which we provide the Services and to persons the practice authorizes, as permitted by the BAA and applicable law.
Service providers and subprocessors. We use providers for voice AI, telephony, hosting, scheduling integrations, transactional email, security, and other business operations. We also use providers for our business-facing website and analytics. These providers may process information for the services they provide to us, subject to the applicable contractual restrictions. Providers handling personal information on our behalf are subject to the applicable BAA requirements.
Legal and safety purposes. We may disclose information when required by law or when reasonably necessary and legally permitted to protect rights, safety, security, or the integrity of the Services. Disclosures of personal information remain subject to the BAA and applicable law.
Corporate transactions. Information may be transferred in connection with a merger, financing, acquisition, reorganization, bankruptcy, or sale of assets, subject to applicable law and contractual obligations, including the BAA, where personal information is involved.
With direction or consent. We may disclose information as directed by a practice or with the relevant person's consent, to the extent permitted by applicable law and the BAA.
5. Call Recording, Transcription, and AI
The Services use an automated AI voice agent to support scheduling and general office information. Calls handled by the AI agent are recorded and transcribed to operate the Services, complete scheduling tasks, support quality and security, and respond to issues. The agent identifies itself as an automated assistant at the beginning of the call. The practice approves the deployment and practice-specific notice and consent instructions; Opux implements the agreed notice and consent workflow. Please also review the applicable practice's privacy notice for information about its use of personal information. A caller who does not wish to continue with the automated agent may request an available transfer option or contact the practice through another available channel. Transfer and callback options depend on the practice's configuration and staffing. This policy does not replace any notice or consent required for recording or transcription.
6. Retention
We retain website and business-contact information for the period needed to provide services, comply with legal and contractual obligations, resolve disputes, and protect our operations. Personal information is retained as permitted by the applicable practice agreement, the BAA, and applicable law. Retention varies by data category and system configuration. Patient and appointment records remain in the practice's practice-management system. Call recordings, transcripts, workflow records, and callback records may also be held in Opux-operated systems or by providers acting on our behalf. Retained personal information remains subject to the applicable protections and use restrictions.
7. Security
We use administrative, technical, and physical safeguards designed to protect information. No system is completely secure, and we cannot guarantee absolute security. Practices should use appropriate access controls for their own systems and promptly notify us of suspected misuse or compromised credentials.
8. Cookies and Analytics
We may use cookies and similar technologies to operate the website, remember preferences, understand site use, and improve our website and business-facing communications. You can control cookies through browser settings, although disabling necessary cookies may affect website functionality. Our handling of personal information through the Services is subject to the separate restrictions described above.
9. Privacy Choices and Requests
You may request access to, correction of, or deletion of business-contact information that Opux controls, subject to applicable law and legitimate retention needs. Patients should direct requests concerning practice records, call recordings, or transcripts to the relevant practice. We will support the practice as required by our agreement and applicable law.
To submit a request, email legal@opux.ai. We may need to verify your identity and authority before acting. Depending on where you live and which laws apply, you may have additional rights and may appeal certain decisions. We will not discriminate against you for exercising applicable privacy rights.
10. Children; International Users
Our website is directed to business users and is not intended for children under 13. The Services may receive calls concerning minors as directed by a practice; in that setting, Opux processes the information for the practice. The Services are currently intended for use in the United States. A deployment involving another jurisdiction requires review of the applicable privacy and transfer requirements.
11. Changes to this Policy
We may update this Privacy Policy from time to time. We will post the updated version and revise the Effective Date. If a change materially affects how we use information, we will provide any additional notice required by law or contract.
12. Contact Us
You can contact us by sending an email to legal@opux.ai.