Your scans stay on your machine.
A plain-language summary of where things go. Nothing here is hidden in a policy; it is how the software is built.
What never leaves your browser
Every scan you load — pre-surgical jaw, wax-up, fiducial scan, post-op tissue, photogrammetry export, antagonist — is opened and processed in your browser's memory. Alignment, scan-body detection and the preview all run on your computer. Those files are never uploaded, and the app never asks for a patient's name, date of birth or any other identifier.
The one thing that is sent
The finishing cut runs on our server, so when you convert, two things are uploaded: the wax-up geometry as it sits after alignment, and the cut settings (implant positions, screw kit, channel angles). They are stored in a private, encrypted bucket in the United States under a random case id, moved only over time-limited signed links, and readable by no one but the cut service.
How long we keep it
The uploaded geometry and the finished STL are deleted automatically 30 days after the conversion. Your paid case stays unlocked forever — if you need the file again after that, run the conversion again from your own scans and download at no charge.
Your account
Name, practice, phone, address and email are kept in an encrypted database and used only to run your account and to reach you about it. We never sell or share them. Payments are handled by Stripe; we never see your card number. Site analytics are cookie-free page counts that do not identify visitors.
Questions about data handling: contact@archconvert.com. Formal Terms of Use and a Privacy Policy are being prepared and will be linked here.
| Data | Where it lives | How long | Who can read it |
|---|---|---|---|
| Your scans — pre-surgical, wax-up, fiducial, tissue, photogrammetry, antagonist | Your browser's memory only. Never uploaded. | Until you close or reload the tab. | You. |
| Aligned wax-up geometry and cut settings (implant positions, screw kit, channel angles) | Private, encrypted S3 bucket (US) under a random case id; transferred over time-limited signed links. | Deleted automatically 30 days after the cut. | The cut service, for the duration of the job. No person reviews it. |
| The finished STL | Same bucket and id as above. | 30 days, then deleted. Re-convert from your own scans to download again, free on a paid case. | You, via a signed download link that expires. |
| Case record — a fingerprint of the input scans, implant positions, paid/unpaid | Encrypted database. | Kept, so a paid case stays unlocked. | Us. It contains no geometry and no patient information. |
| Account details — name, practice, phone, address, email | Encrypted database. | While you have an account. | Us, to run your account and reach you about it. Never sold or shared. |
| Payments | Stripe. | Per Stripe's policies. | Stripe. We never see your card number. |
| Site analytics | Cloudflare Web Analytics. | Aggregate page counts. | Cookie-free; does not identify visitors. |