Privacy Policy
Last updated: July 8, 2026
1. Who we are
Bastaa AI LLC ("Bastaa", "we", "us") provides software for dental practices in the United States: an AI-powered phone receptionist, appointment support, patient intake forms, and related operational messaging. Our customers are dental practices ("Practices"). This Privacy Policy describes how we collect, use, and protect information through our websites, dashboards, patient-facing form pages, and messaging services (together, the "Services").
2. Our role: service provider to your dental practice
When we handle information about patients, we do so on behalf of the patient's dental practice. The Practice is the owner and controller of patient information; Bastaa acts as a service provider (and, where protected health information is involved, as a HIPAA business associate under a Business Associate Agreement with the Practice). Patients who have questions about how their health information is used should contact their dental practice directly.
3. Information we process
- Practice account data: names, work email addresses, phone numbers, and login credentials of Practice staff who use our dashboard.
- Patient data processed for Practices: caller phone numbers, names, dates of birth, call recordings and transcripts, appointment details, and responses submitted through patient intake forms (such as pharmacy information, health screening answers, and medical history).
- Technical data: log and device information needed to operate and secure the Services.
4. How we use information
We use information solely to provide the Services to Practices: answering and routing calls, booking and managing appointments, sending operational appointment-related messages, collecting patient intake forms, and producing records for the Practice. We do not sell personal information, and we do not use patient information for advertising or marketing.
5. SMS / text messaging and mobile information
Phone numbers are used only to send operational, appointment-related text messages (for example, a secure link to complete patient intake forms before a booked appointment) on behalf of the patient's dental practice. We do not send promotional or marketing text messages.
No mobile information will be shared with third parties/affiliates for marketing/promotional purposes. All the above categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.
You can opt out of text messages at any time by replying STOP, and get assistance by replying HELP or emailing support@bastaa.ai. Message and data rates may apply. Message frequency varies. See our Terms & Conditions for full messaging terms.
6. How we share information
We share information only with: (a) the dental practice on whose behalf we process it; and (b) subprocessors we use to operate the Services (such as cloud hosting, telephony and messaging carriers, and transactional email providers), each bound by contractual confidentiality and data-protection obligations. We may also disclose information when required by law. We never share or sell personal information — including phone numbers or SMS consent data — to third parties for their marketing purposes.
7. Security
We maintain administrative, technical, and physical safeguards aligned with HIPAA requirements: encryption in transit and at rest, role-based access controls, audit logging, tokenized and identity-verified patient form links, and encrypted storage of call recordings and form documents.
8. Data retention
We retain records processed for a Practice for as long as needed to provide the Services and to meet healthcare record-keeping obligations that apply to the Practice (for example, HIPAA's six-year documentation requirements), or as otherwise required by law or our agreement with the Practice.
9. Your rights
Patients: because your dental practice controls your records, please direct requests to access, correct, or delete your information to your practice; we support Practices in fulfilling such requests. Practice staff and website visitors can contact us directly at support@bastaa.ai.
10. Children
Our Services are not directed to children. Information about minor patients is processed only on behalf of a Practice, which is responsible for obtaining any required parent or guardian consent.
11. Changes to this policy
We may update this Privacy Policy from time to time. The "Last updated" date above reflects the most recent revision; material changes will be posted on this page.
12. Contact us
Bastaa AI LLC — 2108 N St, Ste N, Sacramento, CA 95816 — support@bastaa.ai