Privacy Policy
Last updated: August 2026
1. Who we are
Ora is a clinic management software service for dental practices in Bangladesh, operated by OraBd, Ashulia, Savar, Dhaka, BANGLADESH. Our application is available at orabd.pro.
This policy explains what information we collect when you use Ora, why we collect it, and what choices you have. If you do not agree with this policy, please do not use Ora.
2. Information we collect
Account information. When you register, we collect your name, email address, mobile number, clinic name, and clinic address. If you create a password, we store it in hashed form only — we never see or store your password in plain text.
Information from Google Sign-In. If you choose to sign in with Google, Google shares your name, email address, profile picture and Google account ID with us. We use this only to create and authenticate your Ora account. We do not request access to your Gmail, Google Drive, Contacts, Calendar or any other Google service, and we never post anything to your Google account.
Clinic and patient data you enter. Ora stores the records you or your staff create — patient names, contact details, age and gender, medical and dental history, treatment and prescription records, appointments, invoices, payments, and income/expense entries. This data belongs to your clinic. You decide what to enter.
Uploaded files. Any documents or images you upload (for example X-rays or reports) are stored in our secure file storage.
Payment information. Subscription payments are made through bKash and Nagad. We receive a transaction ID and the mobile number used for payment so we can confirm and activate your subscription. We never receive or store your bKash/Nagad PIN, card numbers or banking credentials.
Technical and usage data. Our servers automatically log IP address, browser and device type, pages visited, and timestamps. This is used for security, troubleshooting and improving the service.
3. How we use information
We do not sell your data. We do not use patient data for advertising. We do not use your clinic's patient data to train artificial intelligence models.
- •To create your account and let you sign in securely
- •To provide the features of Ora and store your clinic's records
- •To process subscription payments and manage your trial or plan
- •To send service-related messages — trial expiry, payment confirmation, password reset, security or maintenance notices
- •To provide customer support when you contact us
- •To detect, prevent and investigate fraud, abuse or security incidents
- •To improve the reliability and usability of Ora
4. Google user data — limited use
Ora's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Data obtained through Google Sign-In is used only to provide and improve user-facing features of Ora. It is not transferred to third parties except as necessary to operate the service, to comply with law, or as part of a merger or acquisition. It is not used for advertising, and no human reads this data except with your explicit permission, for security purposes, or where required by law.
5. Your clinic's role regarding patient data
Patient records entered into Ora belong to your clinic. Your clinic is responsible for collecting patient information lawfully, for obtaining any consent required, and for maintaining patient confidentiality under applicable Bangladeshi law and professional standards. Ora acts only as a processor and stores this data on your behalf.
6. How we store and protect data
Ora is built on Supabase (PostgreSQL database and file storage) and hosted on Vercel. Data is transmitted over encrypted HTTPS connections and stored encrypted at rest by our infrastructure providers. We use database-level Row Level Security so that each clinic can only access its own records. Access to production systems is restricted to authorised personnel.
Our infrastructure providers may store data on servers located outside Bangladesh. By using Ora, you consent to this international storage and processing.
No system is completely secure. You are responsible for keeping your login credentials confidential and for the actions of any staff accounts you create.
7. Third-party services we use
These providers process data only to deliver their service to us. Beyond these, we share information only when required by law, court order or a lawful request from a competent authority, or to protect the rights and safety of Ora, our users or the public.
- •Supabase — database, authentication and file storage
- •Vercel — application hosting and delivery
- •Google — optional Google Sign-In authentication
- •bKash and Nagad — subscription payment collection
8. Data retention and deletion
We keep your data for as long as your account is active. If you cancel, we retain your data for 90 days so you can reactivate or export it, after which it may be permanently deleted.
You may request deletion of your account and all associated clinic and patient data at any time by emailing orabdpro@gmail.com. We will complete deletion within 30 days, except where we are required by law to retain certain records (for example, payment transaction records).
9. Your rights
You may access, correct or export your clinic's data from within Ora, or request assistance from us. You may withdraw consent for Google Sign-In at any time by revoking Ora's access in your Google Account permissions. You may unsubscribe from non-essential emails at any time; essential service and billing notices will continue while your account is active.
11. Children
Ora is intended for use by dental professionals and their staff, and is not directed at children. We do not knowingly create accounts for anyone under 18. Note that patient records managed by a clinic may relate to minors; responsibility for handling those records lawfully rests with the clinic.
12. Changes to this policy
We may update this policy from time to time. The “Last updated” date above will change, and material changes will be notified inside the application or by email. Continued use of Ora after an update means you accept the revised policy.
13. Contact us
Questions, complaints or data requests:
- •Email: orabdpro@gmail.com
- •Phone / WhatsApp: +8801799900323
- •Address: Ashulia, Savar, Dhaka, Bangladesh