Privacy Policy
Last updated: August 19, 2026
EPA Compliance Plus is operated by Bio-Pure Products, Inc. ("we", "us"). It helps dental
practices and their service providers schedule, document, and retain amalgam separator compliance
records under 40 CFR Part 441. This policy explains what we collect and how we handle it.
We do not collect patient information
EPA Compliance Plus stores no patient data and no
protected health information. It records equipment, inspections, and the business contacts
who perform them. Users are instructed to photograph the separator and its immediate surroundings
only — never an operatory, chart, screen, or anything identifying a patient.
What we collect
| Category | Examples |
|---|
| Account & business | Practice legal name, addresses, phone, office email, number
of operatories and chairs, assigned dealer and technician. |
| Users | Name, work email, role, mobile number, authentication credentials. |
| Compliance contacts | Name, mobile number, role, SMS consent status and timestamps. |
| Equipment | Separator manufacturer, model, serial number, installation date, manuals. |
| Compliance records | Inspection dates and results, photographs of the separator, the
person who performed the inspection, attestations, container replacement, disposal, and
repair/replacement records. |
| Product program | Selected Bio-Pure product, protocol, quantities, order and
shipment history. |
| Technical | Log data, IP address, device/browser information, audit records of who
accessed or changed compliance data. |
How we use it
- To schedule and deliver inspection reminders, and to record the inspections you submit.
- To produce inspector-ready compliance exports for your practice.
- To alert your service provider when equipment needs attention.
- To calculate, fulfill, and support your Bio-Pure product program.
- To secure the service, prevent abuse, and maintain the audit trail.
- To meet our own legal and recordkeeping obligations.
We do not sell your information. We do not use your compliance data for advertising.
SMS consent
We do not sell or share your mobile opt-in information
or SMS consent with any third parties or affiliates for their own marketing purposes.
Mobile numbers used for inspection reminders are shared only with our SMS delivery provider (Twilio)
solely to transmit the messages you requested.
Numbers are added by an authorized office user or their assigned technician with an active
consent checkbox, and must reply YES to a confirmation message before any reminder is sent. Reply
STOP at any time to unsubscribe, or HELP for assistance. Full program terms are at
/sms.
Up to 12 messages per month. Reminders follow the inspection schedule in your
separator manufacturer's operating manual — commonly weekly or monthly depending on the model
— plus occasional follow-ups when an inspection is still open or overdue.
Message and data rates may apply, per your mobile carrier plan.
Who we share it with
- Your dental service dealer and assigned technician, where your practice is
served by one — so they can support your equipment and program.
- Service providers that operate the platform on our behalf: hosting and
database (Supabase, Cloudflare), SMS delivery (Twilio), email delivery, commerce and fulfillment
(Shopify, Amazon Multi-Channel Fulfillment) where you order product, and payment processors. They
may use your data only to provide those services to us.
- Anyone you send an export to — inspector packages you generate and download are
yours to distribute.
- Legal — where required by law, regulation, subpoena, or to protect rights and
safety.
We never expose one practice's data to another, and we never expose dealer wholesale pricing to
dental office users.
Your records stay yours
Compliance records belong to the dental practice that created
them. Viewing, downloading, and exporting records you have already logged remains available
to your practice at no charge — permanently — regardless of whether your Bio-Pure product program,
subscription, or dealer relationship is active. We will not withhold your compliance
history.
Retention
Part 441 generally requires covered records to be maintained and available for at least three
years, and the One-Time Compliance Report for as long as the practice operates. We retain
compliance records for at least that long and generally longer. Submitted compliance records are
immutable — corrections are recorded as amendments that preserve the original.
Security
- Encryption in transit (TLS) and at rest.
- Photographs and documents in private storage, reachable only through short-lived signed links.
- Reminder links are hashed, scoped to a single inspection, and expire.
- Role-based access enforced server-side, with tenant isolation between practices and dealers.
- An audit log of access to and changes of compliance data.
- We never store raw payment card numbers.
No system is perfectly secure, but we work to protect your information and to notify you
promptly if a breach affects it.
Your choices
- Access, correct, or export your practice's data — contact us or use the in-app export.
- Unsubscribe from SMS (reply STOP) or email at any time; service and security notices may
continue.
- Request deletion of your account. Note that compliance records may be retained where we or your
practice have a legal obligation to keep them.
- California, Colorado, Connecticut, Virginia and other state residents may have additional
rights; contact us and we will honor applicable requests.
Children
EPA Compliance Plus is a business tool and is not directed to anyone under 18.
Changes
We will post material changes here and update the date above.
Contact
Bio-Pure Products, Inc. — EPA Compliance Plus
Email:
Phone:
(888) 596-6546