Last updated 24 September 2026
Privacy policy
Plain language, no surprises. This policy explains what data we handle, why we handle it, and the choices available to everyone whose data passes through our systems.
01 Who we are
FWDDEPLOY (“Forward Deploy”, “we”, “us”) is a registered Indian MSME (micro, services) (Udyam Registration No. UDYAM-TS-09-0259967) based in Hyderabad, India. We build and run software for our clients’ operations. Our registered address is Plot no.122, Haritha Homes, Badangpet, Ranga Reddi District, Hyderabad, Telangana 500058, India. For anything in this policy, write to contact@fwddeploy.co.
02 What this policy covers
This policy covers four things:
- The fwddeploy.co website — this site, including its contact form.
- Dental OS — our practice management product for dental clinics, including appointment management, patient records and patient communication over WhatsApp.
- Machine Monitor — our shop-floor monitoring service, which records machine state and production data from client machines.
- Event OS — our event operations product, including guest invitations, RSVPs, travel and stay details.
03 Data we collect
Website. The site sets no tracking cookies and runs no advertising or analytics trackers. When you send the contact form, your name, email address, company, phone number (optional) and message are delivered to us through Web3Forms, a form-delivery service that forwards them to our inbox.
If you use the microphone button, your browser’s own speech service (for example, Google in Chrome or Apple in Safari) turns your speech into text. This site stores no audio; we receive only the text you choose to send.
The site loads its 3D graphics library from the jsDelivr content network, which receives standard request information such as your IP address.
Dental OS. On behalf of the dental clinics that use it, we handle:
- Clinic staff accounts — name, work email, role and login credentials of the dentists and staff a clinic invites to use the system.
- Patient information entered by clinics — name, phone number, and appointment, treatment and visit details a clinic records about its patients. We collect this on the clinic’s instructions; we do not collect it from patients directly.
- WhatsApp messages — the content, timestamps and phone numbers of messages exchanged between a patient and the clinic’s WhatsApp Business number, so the clinic’s team can read and reply to them in one shared inbox and so appointment reminders and confirmations can be sent.
Machine Monitor. Sensor nodes on client machines record machine state (running, idle, off), stop reasons, reject counts and production timestamps. This is operational data about machines; it identifies people only where a client chooses to tag an operator name to a machine or shift.
Event OS. On behalf of event organisers, we handle guest names, contact details, RSVP responses and the travel and stay details organisers record.
Across all services we also keep routine technical logs (such as sign-in events and errors) needed to keep things secure and reliable.
04 Why we use it
- To respond when you contact us about a deployment.
- To run each clinic's schedule, patient records and billing inside Dental OS.
- To send appointment reminders, confirmations and recall messages on WhatsApp, on the clinic's behalf, and to show two-way conversations in the clinic's team inbox.
- To show clients live machine status and production history in Machine Monitor.
- To secure the services, prevent abuse and meet legal obligations.
We do not sell personal data. We do not use patient data or client production data for advertising.
05 Our role under the DPDP Act, 2023
India’s Digital Personal Data Protection Act, 2023 applies to the personal data we handle.
- For website enquiries and our own client relationships, we are the Data Fiduciary — we decide what is collected and why.
- For patient information in Dental OS, the clinic is the Data Fiduciary — it decides what is collected and obtains patient consent (for example, consent at registration to receive WhatsApp messages). We act as a Data Processor, handling that data only on the clinic’s documented instructions.
- For Machine Monitor data, the client owns its production data; where it includes personal data (such as operator names), the client is the Data Fiduciary and we are the Data Processor.
- For guest information in Event OS, the event organiser is the Data Fiduciary and we are the Data Processor.
You have the right to:
- Access a summary of the personal data held about you.
- Have inaccurate or incomplete data corrected.
- Withdraw consent to WhatsApp messages at any time — reply STOP to any message, or tell your clinic.
- Request erasure of your personal data (see our Data Deletion page).
- Raise a grievance and receive a response.
06 WhatsApp and Meta
Clinic-to-patient messaging in Dental OS is delivered through the official WhatsApp Business Platform, operated by Meta. When a clinic sends or receives a WhatsApp message through Dental OS, the message content and the phone numbers involved are processed by Meta as a service provider to deliver the message, under Meta’s WhatsApp Business terms. Messages are sent from the clinic’s own WhatsApp Business number. Patients can stop receiving messages at any time by replying STOP, by telling their clinic, or by blocking the number in WhatsApp.
07 Data retention
- Website enquiries are kept only as long as needed to respond and follow up.
- Patient records and WhatsApp message history are kept for as long as the clinic's account is active, since they form part of the clinic's medical records.
- Machine Monitor data is kept for as long as the client's service is active, then deleted or returned on request.
- When an account closes, or a verified deletion request is completed, data is deleted within 30 days; copies in encrypted backups are purged within 90 days.
- Clinics may be required by Indian medical-record regulations to retain certain clinical records for a statutory period; in that case we retain only what the clinic instructs us to.
08 Security
- All traffic is encrypted in transit (TLS). Databases and backups are encrypted at rest.
- WhatsApp API credentials and similar secrets are additionally encrypted at the application layer before storage.
- Role-based access control: staff see only what their role permits, and every client's data is isolated from every other client's.
- Patient files are stored privately and served only through short-lived signed links after an access check.
- Administrative actions are audit-logged.
09 Who we share data with
Only with the service providers needed to run our website and products: our cloud hosting and database providers, Web3Forms to deliver website enquiries, jsDelivr to serve the site’s graphics library, and Meta (WhatsApp) for message delivery as described above. Each processes data solely to provide its service to us. We may disclose data if required by Indian law or a valid legal process.
10 Grievances and contact
Grievance contact: email contact@fwddeploy.co with the subject “Privacy grievance”. We acknowledge grievances within 7 days and aim to resolve them within 30 days. If you are a patient of a clinic using Dental OS, you may also contact your clinic directly; we will assist the clinic in responding.
If we make material changes to this policy, we will update this page and notify clients through the product. The “Last updated” date at the top reflects the current version.
FWDDEPLOY (Forward Deploy) · Plot no.122, Haritha Homes, Badangpet, Ranga Reddi District, Hyderabad, Telangana 500058, India · contact@fwddeploy.co