Privacy Policy
Last updated: July 29, 2026
1. Who We Are and What This Policy Covers
Elegant Smile is a web application at smile.elegantlab.com that lets a dental practice or an individual upload a single photo and receive, in about 30 to 90 seconds, a photorealistic preview of how a smile could look after treatment. It is operated by Elegant Dental Laboratory Inc., a New York company at 2308 McDonald Ave, Brooklyn, NY 11223, USA.
This Privacy Policy explains what we collect through the Service, how we use and protect it, who we share it with, and the choices you have. It covers everyone who interacts with the Service: practices and their staff, individuals using a free trial or paid access, patients whose photos a practice uploads, and website visitors.
When a practice uploads a patient’s photo, the practice — not Elegant Smile — decides how that information is used, and the practice’s own privacy notices apply to the patient too. We handle the photo on the practice’s behalf, as this Policy describes.
2. Information We Collect
Account information. When you create an account we collect your name, email, and sign-in credentials through a third-party authentication provider. Practices may also give a practice name and contact details.
Photos and previews. At the center of the Service is the photo you upload and the previews generated from it, plus the style and shade options you pick. Previews are saved to your account history so you can return to them.
Billing information. No payment method is required to create an account or begin the free trial. If you later choose paid access, payments are handled by our third-party payment processor. Your card number goes directly to it and never reaches our servers; we receive only limited billing details such as your plan, charge history, subscription status, and any Partners access code used for activation or checkout.
Usage and technical information. As with most online services, we automatically collect log data — for example, browser and device type, IP address, timestamps, pages viewed, and generation activity. We also keep records when you contact us for support. When someone opens a private share link, our systems may log basic technical data about that visit.
3. How We Use Information
We use this information to run the Service: to create and secure your account, provide and manage your free trial, generate the previews you request, keep your history available, deliver previews through private share links, and process the paid access you choose.
We also use it to provide support; send transactional messages such as receipts, trial and account notices, and security notices; monitor for fraud and abuse; fix problems; and understand and improve how the Service performs.
We use it to meet legal obligations, including tax, accounting, and record-keeping requirements, and to enforce our Terms of Use.
We do not use patient photos or previews for advertising, and we do not sell personal data. Photos are processed for a single purpose: producing the previews you ask for.
4. Our Roles: Practices and Patients
When a practice uploads a patient’s photo, the practice controls that data — it decides whether to upload the photo, which previews to generate, whether to share one with the patient, and when to delete it. In privacy terms the practice is the controller and Elegant Dental Laboratory Inc. is its processor, handling the photo only on the practice’s documented instructions.
For information about yourself — your own account details, your own photo on the pay-as-you-go plan, and your billing records — we are the controller and this Policy applies directly.
If you are a patient and want to access, correct, or delete a photo or preview your practice created, contact the practice first: it holds your record and can act on your request, and we will help it do so.
6. How Automated Image Generation Uses Your Photos
Previews are produced by automated image generation. When you request one, your uploaded photo is sent to a third-party image-generation provider, which processes it only to create the preview and return it to us. This happens in the United States.
Our provider is bound by contract to use photos only to perform this processing for us, not for its own purposes.
We do not use your photos to build a faceprint or other biometric identifier to recognize you, and we do not sell or disclose biometric information. We do not permit photos to be used for anything unrelated to generating the previews you request.
7. Service Providers
A small set of providers helps us run Elegant Smile, each under contracts that limit their use of your information to providing services to us: a payment processor; an account authentication provider; a cloud hosting and storage provider that also performs the automated image generation; and a transactional-email provider.
All of this processing takes place in the United States. Providers that handle patient photos are contractually restricted to using them only to provide the Service to us.
You can ask for current details about our providers by emailing direct@elegantlab.com.
8. No Sale of Personal Data; No Advertising Use of Photos
We do not sell personal data, and we do not share it with anyone for cross-context behavioral advertising.
Patient photos and previews are never used in advertising, marketing, or promotional materials. If a practice ever wants to showcase a preview publicly, getting the patient’s authorization is the practice’s job and happens outside this Service.
9. Marketing Communications
We send account holders transactional messages that are part of the Service, such as receipts, trial and account notices, and security notices. If we ever send marketing or promotional email, every message will include a way to unsubscribe, and you can opt out at any time by emailing direct@elegantlab.com. Opting out of marketing does not stop transactional messages.
10. Other Disclosures
Apart from the providers above, we disclose personal information only in a few situations.
For legal reasons: to comply with a law, subpoena, court order, or other valid legal process, or where we reasonably believe disclosure is needed to protect the rights, safety, or property of our users, others, or Elegant Dental Laboratory Inc.
In a business transfer: if Elegant Dental Laboratory Inc. is part of a merger, acquisition, or asset sale, information may move with the transaction, still subject to this Policy, and we will give notice of any such change.
11. Not a HIPAA-Covered Service
Elegant Smile is not a HIPAA-covered service. We do not act as a HIPAA business associate and do not enter into Business Associate Agreements (BAAs).
If you are a dental practice, clinician, or anyone else subject to health-privacy laws, you are responsible for your own compliance when you use the Service — including obtaining any patient consent or authorization needed before you upload a photo, deciding what information is appropriate to submit to a service that operates without a BAA, and giving your patients any privacy notice you owe them.
We treat the photos you upload as sensitive information and protect them with the safeguards in the Security section, whatever their classification.
12. Sensitive and Consumer Health Data
A photo of your smile, and a preview generated from it, can be treated as sensitive or health-related information under a growing set of state laws. We handle this data only as reasonably necessary to provide the Service you request, keep it private to your account, and never use it for advertising.
Depending on where you live, laws such as the New York and Washington consumer-health-data rules may give you additional rights over this information. To exercise them, or to ask how these laws apply to you, email direct@elegantlab.com.
13. Security and the New York SHIELD Act
We maintain reasonable administrative, technical, and physical safeguards designed to protect personal information, consistent with the New York SHIELD Act — including encrypting data in transit and at rest, hosting on access-controlled cloud infrastructure, limiting internal access to those who need it, and keeping photos and previews private to the account that created them.
No online service can promise perfect security. If a breach affecting your information occurs, we will notify affected practices and users, and any regulators, as the law requires.
You have a part to play too: keep your sign-in credentials confidential and send preview links only to the intended patient.
14. Your Privacy Rights Under State Laws
Depending on where you live, state privacy laws — including the California Consumer Privacy Act as amended by the California Privacy Rights Act, and similar laws in other states — may give you rights over your personal information. These can include the right to know what we collect and why, to access a copy, to obtain your data in a portable form, to correct inaccuracies, to delete, and to opt out of the sale or sharing of personal information.
We do not sell personal information or share it for cross-context behavioral advertising, so there is no such activity to opt out of; if you submit a do-not-sell request anyway, we will record it and it will apply if our practices ever change. We use photos only as reasonably necessary to provide the Service you request, so the limited-use protections these laws contemplate for sensitive information apply by default.
To exercise a right, email direct@elegantlab.com or call (877) 335-5221. We will verify your identity, respond within the time the applicable law allows, and never discriminate against you for exercising a right. An authorized agent may submit a request with proof of authorization. If we decline a request, we will explain why and how to appeal; if an appeal is denied you may contact your state attorney general.
Because we do not sell or share personal information, opt-out-preference signals such as Global Privacy Control do not change how we handle your data, but we treat them as valid requests and will honor them if our practices ever change. If your photo was uploaded by your practice, we may refer your request to the practice, which controls that record, and support it in responding.
15. Retention and Deletion
Photos and previews stay in your account history while your account is active, so you can revisit and share past results. You can delete individual cases, photos, and previews from within the app, delete your whole account from your account settings, or ask us to do it by emailing direct@elegantlab.com.
How long we keep each type of information depends on why we hold it. When an account is closed, we delete or de-identify the personal information tied to it within about 30 days, except where we must keep records longer — for example billing and tax records (kept as long as tax law requires), information needed to resolve disputes or enforce our agreements, and material we are required by law to keep or return.
After content is deleted from active systems, leftover copies may remain in backups for up to about 30 days and are then cleared in the ordinary course.
16. Children and Minors’ Photos
You must be at least 18 to hold an Elegant Smile account. We do not knowingly let minors create accounts or knowingly collect personal information directly from children; if we learn we have, we delete it.
A practice may upload a photo of a minor patient only after obtaining consent from the minor’s parent or legal guardian, and it is the practice’s job to obtain and document that consent. On an individual account, you may upload a photo of your own minor child only if you are the parent or legal guardian, and you may not upload a photo of any other minor.
If you believe a minor’s photo was uploaded without proper consent, contact us at direct@elegantlab.com and we will work to address it.
17. International Users and Data Transfers
Elegant Smile is available to users around the world. It is operated and hosted in the United States, so when you use the Service your information is transferred to and processed in the United States, where privacy laws may differ from those where you live.
If you are in the European Economic Area, the United Kingdom, or another region whose laws restrict transferring personal data abroad, we rely on appropriate safeguards for that transfer — such as the European Commission’s Standard Contractual Clauses (with the UK Addendum where relevant) and the transfer frameworks our providers maintain. You can ask about these safeguards at direct@elegantlab.com.
By using the Service, you understand your information will be handled in the United States as described in this Policy.
18. Your Rights in the EEA, UK, and Other Regions
If the EU or UK General Data Protection Regulation, or a similar law, applies to you, you have rights over your personal information — including to access it, correct it, delete it, restrict or object to certain processing, receive it in a portable form, and, where we rely on your consent, withdraw that consent at any time without affecting earlier processing. The bases we rely on are described in the Legal Bases for Processing section.
For a patient photo a practice uploads, the practice is the controller and we act as its processor, so direct your request to the practice and we will support it. Where we are the controller, contact us at direct@elegantlab.com and we will respond within the time the law allows.
You may also lodge a complaint with your local data-protection supervisory authority. If we are required to appoint a representative in the EU or UK, we will identify it here.
20. Previews Are Not Dental Advice
Smile previews are illustrative visualizations only. They are not medical or dental advice, not a diagnosis, not a treatment plan, and not a guarantee, promise, or prediction of any actual result.
Clinical judgment, treatment decisions, and conversations with patients about achievable outcomes stay entirely with the treating clinician. Patients should rely on their dentist — not a preview — when deciding about care.
21. Governing Law and Changes to This Policy
This Policy, and any dispute relating to it, is governed by the laws of the State of New York, without regard to its conflict-of-law rules, and any legal action must be brought in the state or federal courts located in New York.
We may update this Policy as the Service, the law, or our practices change. When this changes, the date at the top changes with it; if a change meaningfully affects how we handle photos or account data, we will email account holders before it takes effect. If a change would materially expand how we use photos or previews we already collected, we will ask for your consent before applying the new use to that earlier material.
Continuing to use Elegant Smile after a revised Policy takes effect means the update applies to your information going forward.
22. Contact Us
For questions about this Policy, to exercise a privacy right, or for any other request, reach us at:
Elegant Dental Laboratory Inc., 2308 McDonald Ave, Brooklyn, NY 11223, USA. Phone: (877) 335-5221. Email: direct@elegantlab.com.