PerioMaxer Subprocessors
Version 1.4. Effective September 15, 2026.
SmileMaxer LLC uses the subprocessors below to provide PerioMaxer. We update this page at least 15 days before we add or replace a subprocessor that handles practice data, so a customer has time to object under the Data Processing Addendum.
Local charting and optional support uploads
Voice recognition runs on the phone or the office computer. Office Link chart entries travel between the phone and the paired office computer over the practice's own network. The account and licensing interfaces do not accept clinical chart traffic. Voluntary feedback reports sent from the apps, and the files the sender attaches, are stored in our account database on Google Cloud. Those files can contain recorded speech, what the speech recognizer heard, and the chart values entered in a session. The service is not designed to receive patient information; do not submit it. See the Privacy Policy and the security overview.
Service subprocessors
These handle practice account data.
| Subprocessor | Purpose | Data involved | Location |
|---|---|---|---|
| Google LLC (Google Cloud) | Hosting, application runtime, and the account database | Cloud account data, feedback reports, and the files attached to them, which can contain recorded speech, transcripts, and chart values | United States |
| Google LLC (Firebase App Check) | Verify app requests and prevent abuse, using Apple App Attest on iOS and Google Play Integrity on Android | App/device integrity proofs, short-lived verification tokens, associated network information, and Android device/OS/installer/SDK-version metadata used for Firebase platform adoption. No patient records, chart values, audio, transcripts, or feedback attachments | Global processing; see Firebase privacy information |
| Stripe, Inc. | Payments, subscriptions, and invoices | Practice legal name, billing email, and full address; our practice and location identifiers and checkout details; card and payment details. Stripe holds the card details; we never store a full card number | United States |
| Resend (Plus Five Five, Inc.) | Transactional email: address verification, password resets, phone setup links, BAA emails, support and feedback replies, alerts to our staff about new support and feedback messages, and the subscription billing notices (setup period started and ending, payment receipts, renewal notices, the yearly reminder, failed payments); incoming replies to those emails | Sender and recipient email addresses and the message content, including the text of support and feedback messages quoted in staff alerts | United States |
| Namecheap, Inc. | Domain registration and authoritative DNS for periomaxer.com | Public DNS records only. No visitor or practice data | United States |
Public download delivery
This service delivers public software files separately from our practice account and support services. We do not route practice account data, patient records, chart entries, microphone audio, transcripts, or feedback attachments through it.
| Provider | Purpose | Data involved | Location |
|---|---|---|---|
| Cloudflare, Inc. | Delivery and abuse protection for public installers, speech-recognition model files, and related license files | Public files and download request information, such as IP address, requested file, browser or app information, and request time | Global processing; see Cloudflare's Privacy Policy |
The Android app downloads its speech-recognition model directly from Alpha Cephei (alphacephei.com), the publisher of the Vosk models, which receives the phone's IP address and the requested file. It is not our subprocessor and receives no practice data. If that download fails or the file does not match the checksum built into the app, the app fetches the same file from Cloudflare instead.
Website tools
Public pages may use the providers below when configured, in addition to our own first-party measurement. The Privacy Policy describes the data, regional consent rules, and the “Privacy choices” control.
These tools do not run in the account or staff portals or token-bearing password-reset, invitation, or enrollment pages. Public login, signup, and checkout pages may use them for conversion measurement. Meta Pixel and Clarity require acceptance; Google measurement follows the configuration-dependent consent rules described in the Privacy Policy.
| Provider | Purpose | Status |
|---|---|---|
| Google LLC (Google Analytics) | Website usage analytics | When configured |
| Google LLC (Google Ads) | Advertising measurement | When configured |
| Meta Platforms, Inc. (Meta Pixel) | Advertising measurement | When configured |
| Microsoft Corporation (Clarity) | Masked session analytics | When configured |
Meta’s mobile SDK may also receive the first-run setup measurement described in the Privacy Policy, including the chosen plan's store product identifier, price, and currency, and the setup answers when the sender leaves them shared. The apps send it no events after onboarding, and it does not receive feedback attachments or clinical chart traffic.
App distribution and integrity providers
Apple Inc. and Google LLC distribute the PerioMaxer mobile apps through the App Store and Google Play. They act as distributors and, where you buy through them, as merchants of record. Those distribution and payment roles are distinct from Apple App Attest and Google Play Integrity, which process app/device integrity information for the security checks described in the Privacy Policy. We do not send patient records, chart values, audio, transcripts, or feedback attachments to these attestation services.
Questions
Open a support ticket from Support in your account, or write to support@periomaxer.com, with questions about this list or to object to a planned change. Email to that address is not filed as a support ticket, so a support ticket is the route we can confirm we received.