Privacy Policy & SMS Consent

Last updated: September 4, 2026

By providing your phone number to a dental practice powered by TJO Innovations LLC ("we," "us," "our"), you consent to receive text messages related to your dental care, including:

  • Appointment confirmations and reminders
  • Scheduling and rescheduling communications
  • Post-visit follow-ups and care instructions
  • Responses to your inbound questions about appointments, hours, and services

We do not send marketing or promotional messages. All messages are transactional and directly related to your dental care.

Message frequency varies based on your appointment activity. Message and data rates may apply depending on your carrier and plan.

Consent is not a condition of receiving dental services. You may opt out at any time.

How to Opt Out

You can stop receiving messages at any time by replying with any of the following keywords:

STOP, CANCEL, UNSUBSCRIBE, QUIT, or END

After opting out, you will receive one final confirmation message and no further texts unless you re-subscribe.

To resume messages, text START or YES to the same number.

For help, reply HELP to any message or contact us directly (see below).

Google user data (Gmail and Calendar)

Nora is a staff workspace from TJO Innovations LLC. Practice staff may choose to connect Gmail and Google Calendar from Nora settings. Nora does not connect a Google account unless a staff member clicks Connect and completes Google's sign-in screen.

When staff connect Gmail, Nora can:

  • Search and read the connected practice inbox so staff can find and answer patient email in chat
  • Create Gmail drafts for staff to review
  • Send email only after a staff member confirms and clicks Send

When staff connect Google Calendar, Nora can:

  • List events on the practice calendar (meetings, time off, and office closures, not the chair schedule)
  • Create a calendar event only after a staff member confirms

OAuth tokens for these connectors are stored on TJO servers that run Nora's API (nora-api), not only in the staff member's browser.

If staff ask Nora in chat to work on a specific message or calendar item, Nora sends that staff-authorized office email or calendar text to our cloud AI (Amazon Bedrock) so Nora can draft a reply or take the requested action. Nora does not use Gmail or Calendar content to train a public model, and it does not scan a mailbox in the background for advertising.

We keep Gmail and Calendar connection data, including OAuth tokens and cached items needed to run the connector, while the connector stays connected.

When staff disconnect Gmail or Google Calendar in Nora, we delete the stored tokens for that connector and stop accessing that Google account.

Limited Use. We use Gmail and Google Calendar data only to provide the staff features described above. We do not use this data for advertising. We do not sell Gmail or Calendar data. TJO personnel do not read mailbox or calendar contents except with staff consent, or when needed for security, abuse prevention, or legal compliance.

Information We Collect

When you interact with our messaging services, we may collect and process:

  • Contact information: Your name and phone number as provided by your dental practice or directly by you.
  • Message content: The contents of text messages you send and receive through our platform, used to respond to your inquiries and manage appointments.
  • Appointment data:Scheduling details relevant to your dental care, retrieved from your practice's management system.
  • Google account data: If practice staff connect Gmail or Google Calendar, we receive OAuth tokens and the mailbox or calendar data needed for the staff features described under Google user data.

We do not collect financial information, Social Security numbers, or sensitive personal data beyond what is necessary for appointment management.

How We Use Your Information

Your information is used exclusively to:

  • Facilitate appointment scheduling, reminders, and confirmations
  • Respond to your questions about your dental practice
  • Improve the reliability and quality of our messaging services
  • Provide Nora's optional Gmail and Google Calendar features when staff connect those services

We never sell, rent, or share your personal information with third parties for marketing purposes.

Data Security & HIPAA

We take the security of your information seriously. Our platform is designed with healthcare compliance in mind:

  • Data in transit is encrypted using TLS
  • Sensitive data at rest is protected using industry-standard encryption
  • We maintain Business Associate Agreements (BAAs) with applicable service providers, including cloud infrastructure partners where required
  • Access to patient data is restricted to authorized systems and personnel only

While we implement industry-standard safeguards aligned with HIPAA requirements, no system can guarantee absolute security. We continuously monitor and improve our security practices.

Data Retention

We retain message logs and appointment data only for as long as necessary to provide our services and fulfill legal or regulatory obligations. You may request deletion of your data at any time by contacting us. Gmail and Google Calendar tokens and connector data are kept while the connector stays connected and are deleted when staff disconnect it. See Google user data.

Third-Party Services

Our platform integrates with the following categories of service providers:

  • Telephony providers for SMS delivery
  • Cloud infrastructure for hosting and compute, including Amazon Bedrock when staff ask Nora to work on office email or calendar text in chat
  • Google APIs for Gmail and Google Calendar when staff choose to connect those services. See Google user data above.
  • Practice management connectorsto access scheduling and patient contact data from your dental practice's existing systems

All third-party integrations are governed by appropriate data processing agreements and, where applicable, Business Associate Agreements.

Your Rights

You have the right to:

  • Opt out of messaging at any time
  • Request access to the personal data we hold about you
  • Request correction or deletion of your personal data
  • File a complaint if you believe your data has been mishandled

To exercise any of these rights, contact us using the information below.

Changes to This Policy

We may update this policy from time to time. Material changes will be reflected in the "Last updated" date at the top of this page. Continued use of our messaging services after updates constitutes acceptance of the revised policy.

Contact Us

If you have questions about this policy, your data, or our messaging services:

TJO Innovations LLC
Email: tyler@tjo-innovations.com
Web: tjo-innovations.com