Mehriva Privacy Policy

Last Updated: July 28, 2026

This Privacy Policy describes how Mehriva, Inc. (“we”, “us”, “our”) collects, uses and discloses information about you when you use our website, mehrivahealth.com, our platform, services, tools and features, or otherwise interact with us, including through SMS text messages or other communications (collectively, the “Services”). Please note that the Services are designed for users in the United States only and are not intended for users located outside the United States.

Please read this Privacy Policy carefully. By using any of the Services, you agree to the collection, use and disclosure of your information as described in this Privacy Policy. If you do not understand or agree to this Privacy Policy, please do not use or access the Services.

Please note that for purposes of the Health Insurance Portability and Accountability Act of 1996, as amended (collectively, “HIPAA”), we act as a “business associate” of “covered entity” dental practices, and therefore receive any “protected health information” about you pursuant to a business associate agreement that we have in place with your dental practice. Please refer to your dental practice’s HIPAA Notice of Privacy Practices to learn more about the ways in which your dental practice uses and discloses your “protected health information.”

1. Changes to This Privacy Policy

We may modify this Privacy Policy from time to time, in which case we will update the “Last Updated” date at the top of this Privacy Policy. If we make material changes to how we use or disclose information we collect, we will use reasonable efforts to notify you such as by emailing you at the last email address you provided us or by posting notice of such changes on the Services and will take additional steps as required by applicable law. If you do not agree to any updates to this Privacy Policy, please do not continue using or accessing the Services.

2. Collection and Use of Information

When you use or access the Services, we collect certain categories of information about you from a variety of sources. In addition to the specific uses discussed below, we may use this information to provide and improve the Services and to maintain our business relationship, including by enhancing the safety and security of our Services, providing customer support, complying with applicable legal obligations, enforcing any applicable terms of service and protecting our rights and the rights of our employees, users or other individuals.

Information You Provide to Us

Some features of the Services may require you to directly provide certain information, including information about yourself. You may elect not to provide this information, but doing so may prevent you from using or accessing these features. Information that you directly submit through our Services includes:

• Contact information, such as your name, address, phone number and email address. We use this information to communicate with you, including to send SMS text messages containing links to your personalized treatment education materials, appointment reminders and follow-up communications on behalf of your dental practice.
• Appointment booking information, such as appointment booking requests you submit through the Services. We use this information to process your appointment booking requests and relay them to your dental practice.
• Treatment preferences and survey responses, such as your responses to surveys about your treatment preferences, your communication preferences, and your responses to in-page sentiment surveys about a recommended treatment. We use this information to personalize your treatment education content, to communicate with you in accordance with your preferences, and to share your sentiment responses with your dental practice to help them provide better, more personalized follow-up care.
• Comfort and accommodation preferences, such as sedation preferences, physical comfort items, and sensory or distraction options for an upcoming dental visit, as well as any optional written notes you provide about your preferences. This information is shared with your dental practice so they can prepare for your visit. Comfort and accommodation preferences tied to your identity are treated as Protected Health Information and are subject to the safeguards described in this Privacy Policy.
• Any other information you choose to provide us or otherwise include in communications with us, for example, when contacting us with questions about your treatment education.

Information Collected Automatically

We also automatically collect certain information about your interactions with the Services, including through cookies or other tracking technologies (“Tracking Technologies”), as well as through engagement tracking on your personalized education pages. This information is collected and used to tailor your treatment education experience, provide your dental practice with engagement insights, run analytics, and better understand user interactions with the Services. Such information includes:

• Device and technical information, such as browser type, device type and general location (city/region level only) based on your internet protocol (IP) address.
• Engagement information, such as which sections of your personalized education page you viewed, how long you spent on each section, scroll depth, total active viewing time, and whether you completed viewing the material. This behavioral engagement data is collected only with your affirmative consent; if you decline, no engagement data is collected, and you still receive full access to your treatment education content.
• Other information regarding your interaction with the Services, such as log data and date and time stamps.

For further information on the use of Tracking Technologies and your choices, see the section below, Cookies and Other Tracking Technologies.

Information Collected from Other Sources

We may obtain information about you from outside sources, including information that we collect directly from third parties and information from third parties that you choose to share with us. Such information includes:

• Patient information provided by your dental practice, such as your name, contact information, treatment plan details, procedure information and insurance coverage details, which your dental practice shares with us through their practice management system to enable us to provide you with personalized treatment education. This information is provided to us by your dental practice in accordance with their own privacy practices.

Any information we receive from outside sources will be treated in accordance with this Privacy Policy. We are not responsible for the accuracy of the information provided to us by third parties and are not responsible for any third party’s policies or practices. For more information, see the section below, Third-Party Websites and Links.

De-identified Information

We may de-identify or anonymize your information such that it cannot reasonably be used to infer information about you or otherwise be linked to you (“de-identified information”) (or we may collect information that has already been de-identified/anonymized), and we may use de-identified information for any purpose. To the extent we possess or process any de-identified information, we will maintain and use such information in de-identified form and not attempt to re-identify the information, except for the purpose of determining whether our de-identification process satisfies legal requirements.

3. Cookies and Other Tracking Technologies

As described above, we use Tracking Technologies to collect certain information about your interactions with the Services. Most browsers accept Tracking Technologies automatically, but you may be able to control the way in which your devices permit the use of certain Tracking Technologies. If you so choose, you may block or delete certain Tracking Technologies from your browser; however, blocking or deleting cookies may cause some of the Services, including login features and general functionality, to work incorrectly.

Your browser settings may allow you to transmit a signal or other mechanism for exercising your choice regarding the collection or processing of your information when you visit various websites. Our website is not currently designed to respond to such signals.

4. SMS Text Messaging

When your dental practice uses the Services, you may receive SMS text messages from us on their behalf. These messages contain a link to your personalized treatment education page. The SMS message itself does not contain any details about your treatment or health information; all treatment-specific content is accessible only after identity verification on our secure platform. Message frequency varies based on your treatment plan and your dental practice’s preferences. Typically, you will receive a small number of messages related to specific treatment plans discussed during your visit.

You may opt out of receiving SMS messages at any time by replying STOP to any message you receive from us. After opting out, you will receive a single confirmation message acknowledging your request, and you will not receive further messages unless you re-subscribe. Standard message and data rates from your mobile carrier may apply. For help with our messaging service, reply HELP to any message or contact us using the information below.

5. Disclosure of Your Information

We may disclose your information for legitimate purposes subject to this Privacy Policy, including:

• Vendors or other service providers who help us provide the Services, such as cloud hosting and SMS delivery service providers, which process information on our behalf under strict contractual obligations and, where applicable, Business Associate Agreements.
• Professional advisors, such as auditors, law firms or accounting firms.
• Third parties in connection with or anticipation of an asset sale, merger, acquisition, or other business transaction, including in the context of a bankruptcy proceeding or other restructuring matter.
• For legal and security reasons and to protect our services and business, including to cooperate with law enforcement, judicial orders and regulatory inquiries, to detect and prevent against fraudulent or illegal activity, to exercise or defend legal claims and to ensure the safety and security of our business, employees and users, and to enforce our terms or other agreements.

We do not disclose your personal information to third parties for the third parties’ own direct marketing purposes, unless you have affirmatively agreed to such disclosure.

6. Third-Party Websites and Materials

We may provide links to third-party websites or platforms and display or make available content, data, applications or materials from third parties. If you follow links to sites or platforms that we do not control and are not affiliated with us, you should review the applicable privacy notice, policies and other terms. We are not responsible for the privacy or security of, or information found on, these sites or platforms, or the accuracy, completeness or reliability of third-party materials. Information you provide on public or semi-public venues, such as third-party social networking platforms, may also be viewable by other users of the Services and/or users of those third-party platforms without limitation as to its use. Our inclusion of such links does not, by itself, imply any endorsement of the content on such platforms or of their owners or operators.

7. Children’s Privacy

The Services are not directed to individuals under 18 years of age, and we do not knowingly collect personal information from anyone under 18. Our system automatically prevents any SMS messages or personalized education content from being generated for or sent to patients under 18, based on the patient’s date of birth as recorded by their dental practice. If you believe we have unknowingly collected personal information from an individual under 18, please contact us using the information below to request deletion.

8. Data Security and Retention

We have implemented commercially reasonable security measures designed to protect your personal information from unauthorized access, use or disclosure. Despite our efforts to protect your information, however, no security measures are impenetrable, and we cannot guarantee “perfect security.” Any information you send to us electronically, while using the Services or otherwise interacting with us, may not be secure while in transit. We recommend that you do not use unsecure channels to send us sensitive or confidential information.

We retain your information for as long as is reasonably necessary for the purposes specified in this Privacy Policy. When determining the length of time to retain your information, we consider various criteria, including whether we need the information to continue to provide you the Services, resolve a dispute, enforce our contractual agreements, prevent harm, promote safety, security and integrity or protect ourselves, including our rights, property or products.

9. Data Transfers

We are based in the United States. If you are using the Services from outside the United States, please be aware that the information we collect from you may be transferred to, stored and processed in the United States or other countries outside your country of residence.

10. California Rights

We provide California residents with the ability to opt out of the disclosure of their personal information to third parties for the third parties’ direct marketing purposes under the California “Shine the Light” law at no cost. To exercise this right, please contact us using the information listed below.

11. How to Contact Us

Should you have any questions about our privacy practices or this Privacy Policy, please email us at privacy@mehrivahealth.com or contact us at 455 Market St, Ste 1940, San Francisco, CA 94105-2448.