UDENTIVA Platform Pengurusan Pergigian Pintar
Bolivia
Mula Percuma
Log masuk Mula Percuma
Bolivia

Terms of Use

Effective date: 5 July 2026 · Version: 2.1

These Terms of Use (the "Terms") constitute a binding agreement between Arı Bulut Depolama Bilişim ve Ticaret A.Ş. (the "Company", "we") and the natural or legal person who uses the Service (the "User", "you", the "Clinic"), governing the use of the UDENTIVA platform (the "Service" or the "Platform") on the terms offered by the Company.

By registering for the Service, accessing the Service, or using the Service in any manner, you represent that you have read, understood, and accepted these Terms. If you do not accept these Terms, you must not use the Service.

If you are acting on behalf of a legal entity, you represent and warrant that you have the authority to bind that entity to these Terms.

1. Definitions

The principal terms used in these Terms have the following meanings:

2. Subject Matter and Scope of the Agreement

The subject matter of these Terms is the determination of the rights and obligations of the parties in relation to the provision of the Service to the User.

These Terms, together with any signed order form, the pricing policy, the Privacy Policy, the Data Processing Addendum (DPA), and the SLA (if any), form a single, integrated whole. In the event of a conflict between these documents, the provisions of the specific/individual agreement or order form signed by the parties shall prevail.

3. Description of the Service

UDENTIVA is a cloud-based software service that provides multi-tenant patient, appointment, treatment, collections, inventory, and laboratory management for dental clinics.

The Company reserves the right to modify, add to, or reasonably limit the scope, content, and features of the Service from time to time on commercially reasonable terms for the purpose of improving the Service. Changes that materially reduce the core functionality of the Service will be notified reasonably in advance.

4. Account Creation, Authorization, and Security

4.1. An account must be created in order to use the Service. When creating an account, you are obliged to provide accurate, current, and complete information.

4.2. You are solely responsible for the confidentiality and security of your account credentials (username, password, access keys, etc.). All actions carried out through your account are attributed to you.

4.3. You are obliged to ensure that your Authorized Users act in accordance with these Terms; the Clinic is responsible for the acts and omissions of its Authorized Users.

4.4. You must notify the Company without delay in the event of any unauthorized access to your account or any suspected security breach.

4.5. The Company reserves the right to temporarily suspend an account for a reasonable cause (security threat, suspicion of unlawfulness, payment default, etc.); where possible, prior notice will be given.

5. User's Obligations and Prohibited Uses

5.1. The accuracy, currency, and compliance with applicable legislation (including the KVKK, health legislation, and consumer and commercial legislation) of the data you enter into the Platform are exclusively your responsibility.

5.2. You are responsible, in respect of the personal data you process — in particular Patient Data — for fulfilling the required disclosure (information) obligation, for obtaining explicit consent/authorization where necessary, and for establishing the legal basis for your data processing activity.

5.3. You may not use the Service for any of the following purposes:

5.4. A breach of these obligations may constitute grounds for suspension or termination under Article 16.

6. Subscription, Pricing, and Payment

6.1. Fees and packages. The Service is charged according to the Package and subscription term you select. Current prices, package contents, and quota tiers are set out on the pricing page / order form.

6.2. Automatic renewal. Unless otherwise stated, the subscription automatically renews at the end of the term for the same period at the fee then in effect. To stop the renewal, you may cancel the subscription through your account or by notice to the Company before the end of the term.

6.3. Price changes. The Company may update prices to take effect in renewal periods. Price increases will be notified a reasonable time before the relevant renewal period; your continued use of the Service following such notice means that you accept the current price.

6.4. Taxes. Unless expressly stated otherwise, the stated fees are exclusive of VAT and other taxes; the applicable taxes will be assessed additionally.

6.5. Payment and default. Fees are payable within the term specified in the invoice/agreement. In the event that payment is not made on time, the Company may claim statutory default interest and/or suspend the Service.

6.6. Refunds. Unless otherwise provided in legislation or the agreement, fees relating to a used period are non-refundable. Mandatory rights arising from consumer legislation are reserved.

7. Protection of Personal Data and Data Processing (KVKK)

7.1. Roles. With respect to Clinic Data, including Patient Data, for the purposes of the KVKK, the Clinic is the Data Controller and the Company is the Data Processor. The Company processes Clinic Data solely for the purpose of providing the Service and within the framework of the Clinic's documented instructions.

7.2. Data Processing Addendum. The detailed rights and obligations of the parties under the KVKK are further governed by the separately concluded Data Processing Addendum (DPA). The DPA is an integral part of these Terms.

7.3. Special categories of data. Patient Data are health data and, as such, are special categories of personal data within the scope of Article 6 of the KVKK and personal health data within the scope of the Regulation on Personal Health Data. In processing such data, the Company applies the additional security measures required by Article 12 of the KVKK, the Personal Data Security Guide, and the decisions of the Personal Data Protection Board. Among the measures the Company currently applies are row-level tenant isolation (RLS — fail-closed), argon2id password hashing, encryption in transit and at rest, role-based access control (RBAC), two-factor authentication (2FA), append-only audit logging, masking of sensitive fields (national identity number/health), and network (loopback) isolation; details are set out in Article 8 of the DPA. It is the Clinic's responsibility to establish the legal basis (explicit consent or a statutory exception) for the processing activity relating to such data.

7.4. Sub-processors. The Company may make use of Sub-processors (S3-compatible object storage, e-mail/SMS provider, cloud/server hosting) in order to provide the Service. The Company ensures that Sub-processors are subject to data protection obligations at least equivalent to its own, provides the current list upon request, and is responsible to the Clinic for the activities of the Sub-processors. The Clinic's reasonable and reasoned right to object in respect of new or changed Sub-processors is reserved.

7.5. Data residency and cross-border transfer. Clinic Data are hosted solely in Turkey. Pursuant to the Regulation on Personal Health Data (Articles 15–16) and the Regulation on Health Information Management Systems (Article 16), personal health data are not transferred abroad. For data that do not contain health data and whose transfer is exceptionally required, any transfer is carried out only in compliance with the conditions set out in Article 9 of the KVKK (an adequacy decision, a written undertaking, or standard contractual clauses).

7.6. Data breach notification. In the event that a data security breach affecting Clinic Data is detected, the Company will notify the Clinic without undue delay and will provide the information reasonably required; such notification will be made in a manner that enables the Clinic to notify the Personal Data Protection Board within 72 hours. The Clinic, in its capacity as Data Controller, is responsible for the notifications to be made to the Authority and to the relevant data subjects.

7.7. Data subject requests. As a rule, the Company forwards to the Clinic any requests (access, rectification, erasure, portability — Articles 11–13 of the KVKK) received directly from data subjects (patients) and provides the Clinic with reasonable technical support in responding to such requests.

7.8. Data ownership and legally compliant export. All Clinic Data processed on the Platform belong to the relevant Clinic; the Company asserts no ownership over such data. The Clinic may export its own data at any time and in the format it requests. The export of health data is provided, within the framework of Article 14 (data portability) of the Regulation on Health Information Management Systems, through VIEW schemas compliant with the Minimum Data Model (VEM) (the "VEM View"), via a read-only, tenant-locked Export API. UDENTIVA does not engage in "vendor lock-in." Details are governed by Article 9 of the DPA.

7.9. Right to audit. The Clinic (Data Controller) has the right, within the framework of Article 10 of the DPA, to audit the Company's compliance with Article 12 of the KVKK and its technical/administrative measures, or to have such an audit carried out by an independent auditor, upon reasonable notice.

7.10. Logging. Access and transaction logs are kept append-only (immutable); in line with Article 17 of the Regulation on Health Information Management Systems (the SAMİLOG approach), retention for at least 5 years is taken as the basis.

8. KVKK Consent Notifications and Quota

8.1. The feature of obtaining consent from patients by SMS and e-mail within the scope of the KVKK is included in the Service and is limited by the monthly notification quota of the purchased Package. Responsibility for the use and content of these quotas belongs to the Clinic that uses the Service.

8.2. In the event that the monthly quota is exceeded, no additional fee or penalty is charged separately at the moment of the overage. However, the following month's quota is automatically upgraded to the next tier based on the actual usage of the previous month. This automatic upgrade may give rise to additional costs in your package attributable to consent notifications. Please review our current pricing policies for details of such costs.

8.3. Transparency and notification. In the event that the monthly quota is exceeded, the Company endeavors to inform the Clinic automatically by e-mail and/or through the panel; however, the failure to provide such information does not eliminate the tier upgrade resulting from the actual usage that has occurred. The tiers and the monthly price of each tier are clearly set out on the pricing page.

9. Intellectual Property Rights

9.1. All intellectual and industrial property rights in the UDENTIVA software, including its source code, design, interfaces, brand, logos, and content, belong to the Company or its licensors. These Terms grant you only a non-exclusive, non-transferable, and limited right of use to use the Service; they do not entail any transfer of ownership or any other right.

9.2. Clinic Data belong to the Clinic. The Company processes such data solely for the provision of the Service and for the purposes set out in these Terms.

9.3. The Company may use de-identified/anonymized usage statistics — in a form that cannot be linked back to any patient or Clinic — for the purpose of improving the Service. This does not in any way mean that identifiable Patient Data are used by the Company for its own purposes.

9.4. The Company may use the feedback and suggestions you provide about the Service to improve the Service, without incurring any obligation.

10. Service Continuity, Availability, Backup, and Maintenance

10.1. The Company uses commercially reasonable efforts to ensure that the Service operates with high availability, and operates its infrastructure on a high-availability principle.

10.2. Data are backed up regularly and automatically; a point-in-time recovery window of at least 7 days is targeted under the standard backup policy.

10.3. The software is managed with an approach of continuous improvement and updates; updates are planned and applied in a manner that preserves the continuity of the Service. Planned maintenance is notified reasonably in advance; in the case of emergency security interventions, prior notice may not be possible.

10.4. The foregoing practices reflect the Company's operational standards. Unless a separate SLA is concluded between the parties, no absolute guarantee is given that the Service will be uninterrupted, error-free, or provided at a specific availability rate.

11. Third-Party Services and Integrations

The Service may include third-party services or integrations (payment, SMS/e-mail, calendar, etc.). These third-party services are subject to their own terms and policies; the Company is not responsible, save for its own fault, for the availability or content of such services.

12. Confidentiality

The parties are obliged to protect the confidential information of a commercial, technical, and personal nature that they learn within the scope of this agreement, to use it solely for the purpose of performing the agreement, and not to disclose it to third parties except where legally required. This obligation continues for a reasonable period after the termination of the agreement.

13. Warranties and Disclaimer of Warranties

13.1. The Company undertakes to provide the Service in accordance with these Terms and with reasonable professional care.

13.2. Save for this undertaking and to the maximum extent permitted by applicable law, the Service is provided "as is" and "as available." The Company gives no additional warranty, express or implied, including as to the fitness of the Service for a particular purpose, its uninterruptedness, or its freedom from error. Responsibility for clinical judgment, diagnosis, and treatment belongs exclusively to the User; the Service is not a substitute for a medical decision.

14. Limitation of Liability

14.1. The Company takes reasonable technical and administrative measures to protect data, including regular backups.

14.2. To the maximum extent permitted by applicable law, the Company shall not be liable for indirect damages, loss of profit, loss of data (save where the Company is in breach of its backup obligation), loss of business, or loss of reputation.

14.3. To the maximum extent permitted by applicable law, the Company's total liability arising out of these Terms is limited to the total amount actually paid by the User for the Service in the twelve (12) months preceding the event giving rise to the liability.

14.4. The limitations in this Article do not apply to the Company's liability arising from its intent or gross negligence, from death or bodily injury, or in other cases of liability that cannot be limited by law.

15. Indemnification / Recourse

The User agrees to indemnify the Company against any damages arising from claims, lawsuits, and administrative sanctions directed against the Company by third parties or administrative authorities (including the Personal Data Protection Authority) that arise from the unlawfulness of Clinic Data, the failure to fulfill the required disclosure/consent obligations, the use of the Service in breach of these Terms, or the acts of Authorized Users, except for the portion arising from the Company's own fault.

16. Suspension and Termination

16.1. In cases of a material breach of the Terms, payment default, unlawful use, or a security threat, the Company may temporarily suspend access to the Service or terminate the agreement. Where possible, a reasonable period will be given to remedy the breach.

16.2. The User may cancel its subscription through its account or by written notice; the cancellation takes effect at the end of the current payment period.

16.3. Termination does not affect the rights and receivables of the parties that have accrued up to the date of termination.

17. Return and Deletion of Data After Termination

17.1. Upon termination of the agreement, the Clinic may export Clinic Data in standard format and as VIEW schemas compliant with the Minimum Data Model (VEM) (the "VEM View") within a reasonable and limited period (the data export window) from the date of termination (Article 14 of the Regulation on Health Information Management Systems).

17.2. At the end of this period, the Company will delete or anonymize the Clinic Data and any backups within a reasonable period, save in cases where applicable legislation imposes a retention obligation. Deletion within the scope of the KVKK is carried out by the methods of "rendering inaccessible to the relevant user" and, upon expiry of the maximum period, irreversible anonymization/destruction (Regulation No. 30224).

17.3. Data whose retention is mandatory under legislation are kept on a category basis and for the legal period (in summary: health information for +30 years from death; imaging/X-rays for 40 years; financial records for at least 10 years; access/transaction logs for at least 5 years). Data whose maximum period has expired and that are not under a legal hold are processed under a periodic destruction approach every 6 months (June/December). In the event of an ongoing judicial/administrative investigation or audit, the retention period of the relevant record is suspended.

18. Force Majeure

Natural disasters, epidemics, war, cyberattacks, decisions of public authorities, electricity/communication/infrastructure outages, and similar events beyond the reasonable control of the parties are deemed force majeure. During the period of force majeure, the performance of the affected obligations is suspended; the situation is notified to the other party within a reasonable period.

19. Changes to the Terms

The Company may update these Terms from time to time. Material changes will be announced through the Platform or by another appropriate method a reasonable time before they take effect. Your continued use of the Service following such announcement means that you accept the updated Terms. If you do not accept the changes, your sole remedy is to stop using the Service and to cancel your subscription.

20. Assignment and Transfer

The User may not transfer its rights and obligations arising from these Terms to third parties without the written approval of the Company. The Company may assign this agreement in the event of a merger, acquisition, demerger, or the transfer of all or part of the business.

21. Notices and Service of Process

Notices between the parties are made to the e-mail address registered in the User's account or to the Company's contact channels set out below. The User is obliged to keep its contact information up to date. For official service of process, the registered addresses / registered electronic mail (KEP) addresses of the parties are taken as the basis.

22. Miscellaneous Provisions

22.1. Severability. The invalidity or unenforceability of any provision of these Terms does not affect the validity of the other provisions.

22.2. Waiver. The Company's failure to exercise a right, or its delayed exercise of a right, does not mean that it has waived that right.

22.3. Entire agreement. These Terms, together with their annexes, the order form, the DPA, and the SLA (if any), constitute the entire agreement between the parties on this subject and supersede any prior oral/written understandings on this matter.

22.4. Headings. Article headings are for convenience only and do not affect interpretation.

23. Governing Law and Competent Court

These Terms are governed by the laws of the Republic of Turkey. In disputes arising from these Terms, the courts and enforcement offices of Istanbul (Çağlayan) shall have jurisdiction. For Users having the status of a consumer, the jurisdiction rules arising from consumer legislation are reserved.

24. Contact

Arı Bulut Depolama Bilişim ve Ticaret A.Ş. Güldallar İş Merkezi, Akçaburgaz, Hadımköy Yolu Cd. No:84, 34522 Esenyurt/İstanbul E-mail: [email protected] · Telephone: (0212) 886 52 79

*These Terms may be updated; material changes are announced through the platform.*

25. Relevant Legislation