DentistryConnect sign-in: privacy notice

DentistryConnect is an online membership system for dental associations. PDJ Solutions builds and runs it. PDJ Solutions is a sole proprietorship of Paul Kenneth De Jesus, registered with the Department of Trade and Industry, based in Santa Rosa City, Laguna, Philippines.

This notice is for your information. You don't need to do anything.

One sign-in lets you use every organization on DentistryConnect that you belong to. This notice covers that shared sign-in.

Your membership information is covered by the privacy notice of each organization you belong to. That organization is responsible for it, and PDJ Solutions processes it on the organization's instructions. You can find each notice in that organization's portal, or at dentistryconnect.org/(organization's short name)/privacy.

The shared sign-in works the same way for every organization, and PDJ Solutions decides how it works. So PDJ Solutions is responsible for it.

• Usually, your organization's staff gave us your email address when they invited you.
• Your sign-in email address and display name.
• Your password, stored only in scrambled form. No one at PDJ Solutions can see it.
• Your account status, when your account was created, when you last signed in, and when you last changed your password or email.
• The organizations you belong to, and your role in each.
• A photo, if you are staff with no member record and you add one.
• Wrong-password counts, stored under a scrambled copy of your email.
• Password-reset and email-change links, stored scrambled. Each works for 24 hours.
• Invitation links, stored as sent. Each works for 7 days or until used.
• While you are signed in, the server keeps a short-term record of your visit: who you are signed in as, a security code that protects forms, messages shown to you, and your recent list searches.
• For each organization, a record of your privacy choices, with the internet (IP) address and browser you used. These records belong to that organization.
• If you change your sign-in email, the new address also replaces the email on your member record in every organization you belong to.

• To let you sign in, choose an organization, reset your password and change your email. Allowed because: our legitimate interest in giving the people of the organizations on DentistryConnect one secure sign-in.
• To protect accounts, by locking sign-in after repeated wrong passwords and keeping security records. Allowed because: our legitimate interest in keeping DentistryConnect secure.
• To check that sign-in emails arrive: Brevo, which sends them, records when each email is opened and which links in it are clicked, and we look at those records only for this. Allowed because: our legitimate interest in making sure our emails reach you.
• We do not use sign-in information for advertising, and we do not sell it.

• PDJ Solutions.
• The officers and administrators of each organization you belong to see your name, email and role there, and whether your account is active. If you are an officer or administrator, its administrators also see when you last signed in, which may be a sign-in to another organization.
• Organizations you do not belong to cannot see your sign-in details.
• The service providers listed in section 6.

• Supabase, Inc. (USA), in Singapore: the database.
• Hostinger Pte Ltd (Singapore), in Singapore: the website, session records and server logs, which record internet (IP) addresses.
• Cloudflare, Inc. (USA), worldwide: everything sent to and from the website passes through its network, including your password as you type it into the sign-in form.
• Brevo (Sendinblue SAS, France): sign-in emails such as invitations, password resets and email-change links. Location: France and Belgium (European Union). Brevo support staff in Germany, India and the United States may reach them to give support. Brevo also records when each email is opened and which links in it are clicked.
• Google LLC (Firebase, USA): sign-in accounts created before 29 July 2026, with scrambled passwords, are still kept there. Location: the United States.
• Google Fonts and the Tailwind CSS service (USA), and jsDelivr, cdnjs and unpkg: your browser loads fonts and website code from them, so they see your internet (IP) address and browser type. Their code runs inside DentistryConnect pages, where it could read what the page shows, and we have not yet locked it to fixed, checked versions.
• PDJ Solutions uses an AI assistant, Claude by Anthropic (USA), to build and support DentistryConnect. When PDJ uses it on the live system, it can see what is on the screen.

DentistryConnect sets one cookie, called dc_session. It keeps you signed in and helps protect forms against misuse. It is deleted when you sign out or close your browser. There are no advertising or analytics cookies. Cloudflare may set its own security cookie.

We keep your sign-in while you belong to at least one organization on DentistryConnect. If an organization archives your membership, we also keep your sign-in for as long as that organization can restore your access, even if you belong to no other organization. Ask us if you want it deleted.

DentistryConnect does not delete old sign-ins by itself. PDJ Solutions deletes sign-ins that no longer belong to any organization by hand, with their used links and old security records, unless they are needed for a legal claim. It plans to do this every 3 months. Ask us if you want yours deleted sooner.

• Encrypted connections (HTTPS).
• Passwords stored only in scrambled form.
• After 8 wrong passwords within 15 minutes, sign-in to that account is locked for 15 minutes.
• Limit: there is no two-step sign-in yet.
• Limit: changing your password does not sign you out on other devices.

You have the same rights over your sign-in information as over your membership information: to be informed, to see it and get a copy, to object, to have it corrected, deleted or blocked, to take it with you, to claim damages, and to be told of a breach that puts you at real risk. Your heirs can use these rights for you.

You can complain to the National Privacy Commission (https://www.privacy.gov.ph, info@privacy.gov.ph). The Commission's rules usually require you to first write to us about the problem and give us 15 days to respond.

Contact PDJ Solutions: Data Protection Officer, PDJ Solutions, dpo@dentistryconnect.org, 0919 060 8283, Santa Rosa City, Laguna, Philippines.

For your membership information, contact the Data Protection Officer of your organization, shown in its own notice.

Platform notice version 1, effective 28 October 2026. Before any change takes effect, we will email everyone who has a DentistryConnect sign-in, and post the new version here.