1. Who we are and what this covers
Occlusal Harmony is a professional networking service operated by Dr. Mark Bishara in Whitby, Ontario, Canada. This policy covers the Occlusal Harmony website and installable web app, including profiles, connections, messaging and Gatherings. It applies to the current hosted website and to the service when it becomes available at occlusalharmony.com.
2. Information we collect
- Account information: your email address, account identifier, sign-in provider, authentication records and session information. Email/password authentication is handled through Supabase. We do not receive your Google, Apple or Facebook password.
- Social sign-in: the provider may supply your name, email address, account identifier and profile image, depending on your choices and the provider. Google sign-in is used for basic identity information; the app does not request access to your Gmail messages, contacts, calendar or Drive files. Apple may supply a private relay email address.
- Profile information: the name, role, city, province/state/region, country, interests, biography, mentorship preferences, employment-seeking status, connection goals and profile photo you choose to provide.
- Community activity: job listings, application instructions, renewal dates, connections, saved members, direct and group messages and their uploaded photos/files (including original filename, file type and size), group memberships, forum topics, replies, their uploaded photos, mentions, thread-following preferences and your upvotes, blocks, reports and moderation records.
- Online status: a recent activity timestamp while the app is open and visible, for members with visible profiles and automatic online status enabled. You can disable automatic online status in My profile.
- Notifications: unread/read status, notification preferences, a recent in-app activity timestamp, your account email if you enable email alerts, device push subscription addresses and delivery-throttling timestamps.
- Technical information: our hosting and authentication providers may process IP addresses, browser/device information, request timestamps, security events and diagnostic logs to deliver and protect the service.
3. How we use information
We use this information to authenticate you, maintain your profile, help you find colleagues, deliver messages, display optional online status, handle support and privacy requests, investigate abuse, enforce our Terms and keep the service working. We do not sell personal information or use Google account data for advertising. Information supplied through sign-in is used to provide and secure your account and the features you choose.
4. What other members can see
Your profile is excluded from discovery until you enable profile visibility. Visible profiles and uploaded profile photos can be viewed by signed-in members, subject to blocking. Existing connections may still see your name and communicate with you after you hide your profile. Your email is not displayed in the member directory.
Direct messages are available to the participants of an accepted connection. Group messages and your displayed name are visible to members who join that group, including when your directory profile is hidden. Leaving a group does not remove previous messages. Forum topics, replies, attached photos and authors’ names are visible to signed-in members, subject to blocking and moderation, even when their directory profiles are hidden. Authors can delete their topics (including all replies) or their own replies. Members may copy or capture content they can see; share thoughtfully.
Online status updates automatically while the app is open and visible for discoverable profiles, unless disabled in My profile. It indicates activity within the last two minutes. Signed-in members can see online members’ names and roles on the homepage, subject to blocking. The public homepage displays a count of members sharing online status. Separately opting into public visibility shows your name, professional role and recent online status to anyone, including unregistered visitors. This is off by default and can be turned off in Gatherings. Blocking filters members within signed-in views, but cannot prevent someone from seeing information you choose to make public while signed out. Messages are not end-to-end encrypted; authorized administrators have technical access to stored data for operating and moderating the service.
Unread badges and in-app alerts help you find new direct and group messages. You can disable in-app alerts in Notification settings while keeping unread badges. Optional device push alerts cover direct messages and use your browser’s push service, such as Apple, Google or Mozilla. Push alerts contain a generic new-message notice, not message text or sender details. Optional email alerts, when configured, use Resend to send a generic notice to your account email while you are away; your email address is shared with that delivery provider. Email and device notifications require your choice to enable them. You can disable email alerts or remove this device’s push subscription in Notification settings, or revoke device notification permission. A notification already delivered may remain on your device or in your email inbox.
5. Providers, disclosures and international processing
We use Supabase for authentication and OpenAI Sites hosting with Cloudflare database and file-storage infrastructure for the app. Your selected sign-in provider also processes your login under its own privacy policy. Service providers process information needed to deliver their functions. Data may be stored or processed outside Canada, including in the United States, and may be subject to the laws of those jurisdictions.
We may disclose information when legally required, to respond to lawful requests, or where necessary and permitted by law to protect users and the service. We limit disclosures to the circumstances that require them.
6. Cookies and device storage
Authentication and security cookies support sign-in and abuse prevention. Your online-status choice is stored with your account and refreshed while the app is open and visible. Browser storage also supports optional device push subscriptions. The installable app caches basic offline assets such as its icon and offline page. The current app does not include advertising trackers. Disabling necessary cookies may prevent sign-in.
7. Retention and security
Account and community records remain stored while needed to operate your account, provide conversations, address safety concerns or meet legal obligations. There is currently no automatic age-based deletion schedule for community messages. Replacing or removing a profile photo removes the previous active stored image. Removing or blocking a direct connection deletes its conversation from the active app database; group messages must be deleted separately. Backups or provider logs may persist under the provider’s retention practices.
We use HTTPS, authenticated access checks and controls on profiles and conversations. No storage or transmission method is risk-free. We retain information only as long as reasonably needed for its purpose or as required by law and handle deletion requests subject to applicable exceptions.
8. Your choices, access and deletion requests
You can edit your profile, hide it from discovery, remove a photo, turn off online status, leave groups, delete your own group messages, remove connections and block members. You may also revoke a social provider’s access in that provider’s account settings; doing so does not itself delete your Occlusal Harmony records.
To request access, correction, account deletion, a copy of your information or withdrawal of consent, email info@cdnimplants.com with the subject “Occlusal Harmony Privacy Request.” Send from your account email where possible and describe the request. We may verify your identity without asking for your password. We will respond within applicable legal time limits and explain any lawful restriction or information we must retain. Withdrawing information necessary to run an account may require closing it. You can delete your account inside My profile. Your account and content are hidden immediately, with 30 days from confirmation to sign back in and restore them. Restoration is unavailable after that deadline; permanent cleanup then removes active stored account data. Self-service data export is not available.
9. Professional use and sensitive information
The service is intended for adults aged 18 or older in the dental community. Do not upload patient-identifying information, clinical records, payment-card details or other sensitive records. This is not a patient-care or health-record system. Contact us if you believe a child’s or a patient’s information has been submitted.
10. Updates and concerns
We will post updates here with a revised date and provide additional notice or obtain consent for material changes where required. Contact us with privacy concerns using the details below. You may also contact the Office of the Privacy Commissioner of Canada or another privacy regulator with jurisdiction.
11. Community events
Events you post, including their name, schedule, details, location and link, are visible to signed-in members subject to account and blocking controls. When you join an event, your profile name is shown to members viewing its attendee list. You can leave events you joined; hosts can edit or cancel their events. Event data and RSVPs are stored to operate the calendar and are included in account-deletion processing.
12. Mobile apps and account deletion
The iPhone app uses the same account and community data as the website. With your permission, an Apple push device token is stored to deliver generic private-message alerts. Message text is not included in those alerts. You can turn notifications off in iPhone Settings. Secure mobile sign-in uses a short-lived, encrypted, one-use handoff.
The Android app displays this website through a compatible browser using a Trusted Web Activity. It uses the same community account, browser-managed session and web notification subscriptions. Signing in or out may also affect your session in that browser. The Android package does not add a separate analytics, advertising or Firebase SDK.
You can initiate permanent account deletion under My profile → Delete my account. Deletion takes effect immediately in the community. A confirmation shows your 30-day restoration deadline. Sign back in and choose Restore account before that deadline to cancel deletion; after the deadline the account cannot be restored and permanent cleanup runs automatically. The process covers the account, profile, uploads and associated user-generated content, subject to lawful retention requirements described above.