Privacy policy

Kyslan is a marketing service for dental practices, operated by Northbeams Inc. ("Kyslan", "we"). This policy explains what information we collect when you use dental.kyslan.com and the Kyslan service, how we use it, and the choices you have. Northbeams Inc. is a Delaware C-corporation with a US mailing address at 301 Howard St #910, San Francisco, CA 94105. Questions go to privacy@northbeams.com.

Information we collect

• Account details. Your name, email address and a hashed password, or the name and email address from your Google account if you sign in with Google.
• Practice details you give us. Your website address, the services you confirm you offer, and the business name and address used to find your Google listing.
• Information we gather about your practice. The public content of your website, and public data from Google about your listing and nearby practices: rating, review count, opening details, and the reviews Google features, including the reviewer's public display name and text.
• Google Business Profile data, if you connect it. When you authorise Kyslan to manage your Business Profile, we receive an access token and use it to read your reviews and performance data, post the replies you approve, and update the profile details you ask us to change.
• Technical data. Server logs with IP address, browser type and the pages requested, and a session cookie that keeps you signed in. We do not use advertising trackers.

How we use it

• To run the audit, build your dashboard, track your reviews over time, and draft replies and marketing copy for you.
• To operate your account, keep it secure, and send service emails such as a weekly review summary if you enable it.
• To improve the service. We look at aggregate usage; we do not sell personal information and we do not use your data for advertising.

Artificial intelligence

Kyslan uses Anthropic's Claude models to summarise your website, draft review replies, and write suggested page copy. Website content, service lists, and review text are sent to Anthropic for that purpose under commercial terms that do not allow it to train models on your data. Drafts are suggestions: nothing is published anywhere until you post it or explicitly approve it.

Google user data

If you connect your Google Business Profile, Kyslan requests the "manage your business listings" permission. We use it only for the features described above, and only for the listings you choose to connect. Access tokens are stored in our database, which is encrypted at rest, and are deleted when you disconnect Google or close your account. We never sell Google user data, never use it for advertising, never let humans read it except to support you at your request or as required by law, and never use it to develop or train generalised AI models.

Kyslan's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Who we share it with

We use a small number of service providers to run Kyslan, and share only what each one needs:

• Vercel hosts the application.
• Neon hosts our database.
• Anthropic provides the AI models described above.
• Google provides listing and review data, sign-in, and, when connected, Business Profile access.
• Resend delivers email, when email features are enabled.

We may also disclose information when the law requires it, or to protect the rights and safety of our users and the public.

Retention and deletion

We keep your data while your account is active. If you close your account, or ask us to delete it, we remove your account, audits, review history and any Google tokens within 30 days, except where we must keep records to meet legal obligations. You can request a copy or deletion of your data by emailing privacy@northbeams.com.

Your rights

Depending on where you live, you may have the right to access, correct, export or delete your personal information, to object to or restrict certain processing, and to complain to a data protection authority. Contact us and we will respond within the time the applicable law allows.

Security

Traffic is encrypted in transit, passwords are stored hashed, and access to production systems is limited to the people who run the service. No system is perfectly secure, so please use a strong, unique password.

Children

Kyslan is a business tool for dental practices and is not directed at anyone under 18.

Changes

If we change this policy in a meaningful way we will update the date above and, for significant changes, tell you by email or in the app.