Privacy Policy

Effective date: February 11, 2026

At Benefit Administrative Solutions Inc., doing business as Smile Pilot ("Company", "we", "us", or "our"), we take your privacy seriously. Please read this Privacy Policy to learn how we treat your personal data. By using or accessing our Services in any manner, you acknowledge that you accept the practices and policies outlined below, and you hereby consent that we will collect, use and share your information as described in this Privacy Policy.

This Privacy Policy applies to all services described herein. Company is a "service provider" or "processor" to our customers (i.e., health care providers) with respect to certain categories of Personal Data of our customers' patients that we may receive or collect from our customers in connection with our provision of products or services to such customers, namely data related to (i) the provision of health care to a patient, or (ii) the past, present, or future physical or mental health or condition of a patient; or (iii) the past, present, or future payment for the provision of health care to a patient (such data, "Patient Data"). This Privacy Policy does NOT apply to such patients or their potential rights with respect to such Patient Data. For more information about potential rights under applicable privacy laws with respect to Patient Data, and to exercise such rights where applicable, please contact your health care provider.

What this Privacy Policy Covers

This Privacy Policy covers how we treat Personal Data that we gather when you access or use our Services. "Personal Data" means any information that identifies or relates to a particular individual and also includes information referred to as "personally identifiable information" or "personal information" under applicable data privacy laws, rules or regulations, including the California Consumer Privacy Act, as amended by the California Privacy Rights Act ("CCPA"), the Colorado Privacy Act ("CPA"), the Connecticut Data Privacy Act ("CTDPA"), the Montana Consumer Data Privacy Act ("MCDPA"), the Oregon Consumer Privacy Act ("OCPA"), the Texas Data Privacy and Security Act ("TDPSA"), the Utah Consumer Privacy Act ("UCPA") and the Virginia Consumer Data Protection Act ("VCDPA"). This Privacy Policy does not cover the practices of companies we don't own or control or people we don't manage.

Personal Data

Categories of Personal Data We Collect

We collect the following categories of Personal Data:

  • Identifiers: Name, email address, phone number, mailing address, IP address, and other similar identifiers
  • Financial Information: Payment card information, billing address, and payment history
  • Health Information: Dental health records, treatment history, and appointment information (as a service provider to health care providers)
  • Commercial Information: Subscription plans, services purchased, and transaction history
  • Internet Activity: Browsing history, search history, and information regarding your interaction with our Services
  • Geolocation Data: Location information based on your IP address or device settings
  • Professional Information: For dental practices, we collect practice information, license numbers, and professional credentials

Categories of Sources of Personal Data

We collect Personal Data about you from the following categories of sources:

You

  • When you provide such information directly to us
  • When you use our interactive tools and Services
  • When you voluntarily provide information in free-form text boxes through the Services
  • When you send us an email or otherwise contact us
  • When you use the Services and such information is collected automatically
  • Through Cookies (defined in the "Tracking Tools and Opt-Out" section below)
  • If you use a location-enabled browser, we may receive information about your location

Third Parties

  • Vendors: We may use analytics providers to analyze how you interact and engage with the Services, or third parties may help us provide you with customer support
  • Health Care Providers: Dental practices may provide us with patient information in connection with our services
  • Payment Processors: We receive payment information from third-party payment processors

Our Commercial or Business Purposes for Collecting Personal Data

  • Providing, Customizing and Improving the Services:
    • Providing you with the products, services or information you request
    • Meeting or fulfilling the reason you provided the information to us
    • Providing support and assistance for the Services
    • Improving the Services, including testing, research, internal analytics and product development
    • Personalizing the Services, website content and communications based on your preferences
    • Doing fraud protection, security and debugging
  • Marketing the Services: Marketing and selling the Services
  • Corresponding with You:
    • Responding to correspondence that we receive from you, contacting you when necessary or requested, and sending you information about Company or the Services
    • Sending emails and other communications according to your preferences or that display content that we think will interest you
  • Meeting Legal Requirements and Enforcing Legal Terms:
    • Fulfilling our legal obligations under applicable law, regulation, court order or other legal process
    • Protecting the rights, property or safety of you, Company or another party
    • Enforcing any agreements with you
    • Responding to claims that any posting or other content violates third-party rights
    • Resolving disputes

We will not collect additional categories of Personal Data or use the Personal Data we collected for materially different, unrelated or incompatible purposes without providing you notice.

How We Disclose Your Personal Data

We disclose your Personal Data to the following categories of service providers and other parties:

  • Service Providers: These parties help us provide the Services or perform business functions on our behalf. They include:
    • Hosting, technology and communication providers
    • Payment processing providers
    • Security and fraud prevention consultants
    • Support and customer service vendors
    • Health care providers
    • Fraud detection providers
  • Analytics Partners: These parties provide analytics on web traffic or usage of the Services
  • Parties You Authorize, Access or Authenticate: Your health care provider and other third parties you access through the services
  • Legal Obligations: We may share any Personal Data that we collect with third parties in conjunction with meeting legal requirements and enforcing legal terms
  • Business Transfers: All of your Personal Data that we collect may be transferred to a third party if we undergo a merger, acquisition, bankruptcy or other transaction in which that third party assumes control of our business

Tracking Tools and Opt-Out

The Services use cookies and similar technologies such as pixel tags, web beacons, clear GIFs and JavaScript (collectively, "Cookies") to enable our servers to recognize your web browser, tell us how and when you visit and use our Services, analyze trends, learn about our user base and operate and improve our Services. Cookies are small pieces of data– usually text files – placed on your computer, tablet, phone or similar device when you use that device to access our Services.

We use Cookies for the following purposes:

  • Authentication and security
  • Functionality and user interface
  • Analytics and research
  • Advertising and marketing

You can control Cookies through your browser settings and other tools. However, if you block certain Cookies, you may not be able to register, login, or access certain parts of the Services.

Data Security

We use commercially reasonable physical, managerial, and technical safeguards to preserve the integrity and security of your Personal Data. However, no security system is impenetrable, and we cannot guarantee the security of our systems. In the event that any information under our control is compromised as a result of a breach of security, we will take reasonable steps to investigate the situation and, where appropriate, notify those individuals whose information may have been compromised and take other steps, in accordance with any applicable laws and regulations.

Data Retention

We retain Personal Data for as long as necessary to provide our Services, comply with legal obligations, resolve disputes, and enforce our agreements. When we no longer need Personal Data, we will delete or anonymize it in accordance with our data retention policies and applicable law.

Your Rights and Choices

Depending on your location, you may have certain rights regarding your Personal Data, including:

  • Access: The right to request access to your Personal Data
  • Correction: The right to request correction of inaccurate Personal Data
  • Deletion: The right to request deletion of your Personal Data
  • Portability: The right to request a copy of your Personal Data in a portable format
  • Opt-Out: The right to opt-out of certain processing activities, including targeted advertising and sales of Personal Data

To exercise these rights, please contact us using the information provided in the "Contact Information" section below.

Children's Privacy

Our Services are not directed to children under the age of 13. We do not knowingly collect Personal Data from children under 13. If you are a parent or guardian and believe your child has provided us with Personal Data, please contact us to have that information removed.

Changes to this Privacy Policy

We're constantly trying to improve our Services, so we may need to change this Privacy Policy from time to time. We will alert you to any such changes by placing an updated version on or through the Services. If you use the Services after any changes to the Privacy Policy have been posted, that means you agree to all of the changes. Use of information we collect is subject to the Privacy Policy in effect at the time such information is collected.

Contact Information

If you have any questions or comments about this Privacy Policy, the ways in which we collect and use your Personal Data or your choices and rights regarding such collection and use, please do not hesitate to contact us at:

Benefit Administrative Solutions Inc.
DBA: Smile Pilot
Email: privacy@smilepilot.com
Phone: 1-877-545-4188

Legal Entity

Smile Pilot is a service provided by Benefit Administrative Solutions Inc., a registered business entity. All references to "Smile Pilot", "Company", "we", "us", or "our" in this Privacy Policy refer to Benefit Administrative Solutions Inc.