1Who we are
The Digital Odyssey Clinic Dashboard is provided by Digital Odyssey, a federally incorporated Canadian corporation operating under the trade name Digital Odyssey (“Digital Odyssey”, “we”). This policy explains what personal information we handle when you use the dashboard at dashboards.digitalodyssey.agency, why, and the choices you have. It follows Alberta’s Personal Information Protection Act (PIPA).
2Our role and your clinic’s role
Clinic data. For the figures a clinic enters (doctor names, billing totals, hours, spend), the clinic business is the organization in control of that information. We act as its service provider and use it only to run the dashboard for that clinic.
Login and contact details. For the details we need to give people access, and for demo requests, Digital Odyssey is the organization in control.
3What we collect
- Login details: name or email address, role, encrypted password, two-step verification settings, sign-in times.
- Clinic data: clinic names, monthly spend and revenue totals, doctor names, contract splits, billing totals, hours, visit counts and ratings.
- Activity records: which pages were viewed and what was changed, by whom and when (the access log your owner can see), plus standard server logs such as IP address and browser type.
- Demo requests: the name, email, phone, organization and message you send us.
4What we never collect
The dashboard is for clinic finances and doctor performance totals only. We do not collect patient information: no patient names, personal health numbers, diagnoses, appointments or clinical notes. Uploads that look like patient records are rejected.
5How we use it
- To sign you in securely and show you only your own clinics.
- To calculate reports, scorecards and summaries from the figures you enter.
- To send service emails: password resets, monthly reminders and security notices.
- To keep the service secure, investigate problems and meet legal obligations.
We do not sell personal information, and we do not use clinic data for advertising.
6Where it is stored and who helps us
Clinic data and login details are stored in Canada (Supabase, Canada Central region) and encrypted in transit and at rest. The website runs on Vercel, with server processing in Montreal. We use these service providers, each bound by contract to protect the information:
- Supabase: database and sign-in (Canada).
- Vercel: hosting of the website.
- Resend: delivery of service emails; email addresses and message content may be processed outside Canada.
- Cloudflare Turnstile: spam protection on the demo request form.
7How we protect it
- Two-step verification is required for every login.
- Row-level security keeps each client’s data separate; no client can see another’s.
- Every change, and every page viewed, is recorded in an access log.
- Our staff access client data only to provide support, and that access is logged.
- Logins sign out automatically after 30 minutes without activity.
8If something goes wrong
If we confirm a security incident affecting clinic data, we notify the clinic within 48 hours, explain what we know, and help it meet any duty to notify the Office of the Information and Privacy Commissioner of Alberta or affected individuals.
9How long we keep it
We keep clinic data while the clinic’s account is active. After an account ends, we delete its data within 30 days unless the clinic asks for an export first or the law requires us to keep it. Access logs are kept for up to two years for security purposes.
10Your choices and rights
You can ask to see or correct the personal information we hold about you. For clinic data, contact your clinic first; we will help it respond. You can also ask questions or make a complaint to us at the address below, and you have the right to contact the Office of the Information and Privacy Commissioner of Alberta.
11Changes to this policy
If we make important changes, we will tell account owners by email before they take effect. The date at the top shows the latest version.