OM+ Privacy Notice
Effective Date/Last Updated: August 4, 2026
This privacy notice (“Privacy Notice”) describes how Sandstone Summit LLC d/b/a OM+ (“OM+”, “we”, or “us”) collects, uses, shares, and otherwise processes personal information. OM+ provides practice management software, products, services, and solutions (collectively, our “Services”) built for orofacial myofunctional therapists (“OMTs”) who treat patients (“Patients”) for orofacial dysfunction and related medical issues. We collect personal information through our online platform (our “Platform”), our website omplus.app (our “Website”), and through our business operations. This Privacy Notice is addressed to OMTs, Patients, and visitors (“Visitors”) to our Website. OMTs, Patients, and Visitors are collectively referred to as “Individuals” in this Privacy Notice.
For Individuals who interact with us online, we collect information they choose to provide us and other information that may be collected from their use of our Website, or through the Platform, including from their devices, browsers, and information technology. We use that information to operate our business and for purposes set forth below. Below, we also describe choices we offer with respect to personal information.
This Privacy Notice does not apply to personal data that is not processed by OM+. In addition, please note that OM+ does not determine the purpose or means of processing the personal data of Patients for the provision of therapy or other medical treatment. Such purposes and means are determined by our OMT clients. For Patients or others who want to understand the privacy practices of OMTs or other third parties relevant to our business, please contact the relevant parties directly or refer to their privacy notices. This Privacy Notice does not apply to information that cannot be identified to any individual, household, or their devices, such as de-identified or anonymized information.
The sections of this Privacy Notice are hyperlinked below for convenience:
• Information We Collect
• Other Information Collection, Logging, and Automatically Collected Information
• Other Ways We Use Information We Collect
• How We Secure Information
• How We Share Information
• What Choices Do I Have?
• Updates to Our Privacy Notice
• Contact Information
Information We Collect
We collect information about Individuals from a variety of sources, including:
• Directly from Individuals when provided to us, for instance when OMTs submit business inquiries to us via email or telephone or sign up for the Services, when Patients fill out web forms, or when Visitors submit questions or feedback via the Website.
• From OMTs when OMTs submit information to the Platform regarding Patients and treatment.
• Through artificial intelligence (“AI”) solutions we utilize to provide our Services through the Platform. OMTs and Patients may choose to interact with AI during the therapy and treatment process. AI solutions may be OM+ solutions and/or third-party AI solutions. We utilize AI solutions to instruct OMTs on the use of our Platform and to provide OMTs with written records/transcripts of treatment and other Patient interactions.
• Automatically as Visitors utilize the Website or when OMTs utilize the Platform. We may receive information in connection with content, widgets, cookies, components, or other tools deployed on our Website or Platform, including from third parties.
• From third parties. We may collect information from advertisers, analytics providers, marketing service providers, affiliates, and promotional partners.
We may collect and process personal data, as detailed in the chart below:
Category of Individual
Personal Information Collected
Key Information Uses
Visitors
• Data that Visitors or their devices communicate to us directly or indirectly while using the Website, such as questions, inquiries, correspondences, or survey responses submitted
• Usage Data, as defined below
• Provide Website functionality
• Develop analytics to understand our Website audiences, develop business strategies and marketing plans
• Improve our products, services, and business operations
• Provide information including through marketing and advertising initiatives about new or related products or services we may offer
• For other general purposes noted below (e.g., to maintain records, enforce legal terms or comply with law) (see Other Ways We Use Information We Collect)
OMTs
• First and last name
• Email addresses
• Phone numbers
• Mailing address
• Job title and information about roles and responsibilities or performed job tasks
• Information about medical licenses, specialties, and treatments/services offered
• Information about Services purchased or utilized, including purchase and transaction history
• Content of communications with us and with Patients
• Other information OMTs choose to provide to us in the course of our Services or the business relationship
• Usage Data, as defined below
• To provide the Platform and Services, including to provide access to our Platform and features.
• To approve and manage login credentials and to provide account and other IT support.
• To provide information including through marketing and advertising initiatives about new or related products or services we may offer
• To facilitate payments and fulfil orders/purchases for the Services
• To facilitate communications between OM+ and OMTs, and communications between OMTs and Patients
• Manage the business relationship
• For recordkeeping purposes
• For other general purposes noted below (e.g., to maintain records, enforce legal terms or comply with law) (see Other Ways We Use Information We Collect).
Patients
We may collect or otherwise process Patient personal data as a service provider to and as directed by our OMT clients. OMTs utilize our Services to provide web forms for Patients to fill out, and OMTs may customize these web forms to request any information they deem appropriate. OMTs may utilize features available through our Platform, including AI features to record information regarding therapy sessions. OMTs may utilize our Platform to collect other personal information of Patients for other purposes. We do not control the purposes or means of such collections or processing.
• To provide the Services, including to facilitate the provision of therapy and other medical care by OMTs to Patients through the Services and/or Platform
• To facilitate communications between OMTs and Patients.
• To facilitate email communications from OMTs to Patients, including via third parties, which may contain links to medical forms, therapy information or exercise plans, or payment links that facilitate Patient payments to OMTs. Payment services are provided by third parties, and OM+ does not view or process payment information of Patients.
• For other general purposes noted below (e.g., to maintain records, enforce legal terms or comply with law) (see Other Ways We Use Information We Collect).
Other Information Collection, Logging, and Automatically Collected Information
Visitor and OMT browsers or devices may be subject to our collection of logging and other automatically collected information when they interact with our Website or Platform. This includes information collection via cookies, scripts, web beacons, and other automatically collected information. The information we automatically collect may include IP address, date and time Individuals access our Website or Portal and the pages and content Individuals access during their visit, language preferences, websites that Individuals link to or from, whether Individuals receive or open an email or other communication from us, the links Individuals click within those emails, information from Individuals’ mobile devices or their computers about how they interact with our Website or Platform, including unique device identifier, mobile network information, the type of device used and the operating system on that device, browser type, a list of files downloaded or pages viewed, and any errors encountered (collectively, “Usage Data”).
Note that third parties may collect personal information about Visitors’ or OMTs’ online activities over time and across third-party websites and online services. These third parties may provide us information in connection with content, widgets, components, cookies, or other tools offered on our Website or Platform. Such third parties may use this information to provide Visitors or OMTs with interest-based advertising or other targeted content, and for other purposes. We may not control personal information once collected by these parties.
We do not respond to “do not track” signals, or other mechanisms that provide Individuals the ability to exercise choice regarding the collection of personal information about an Individual’s online activities over time and across third-party websites or online services.
In all cases, we may collect and use other information Individuals choose to provide or with their consent.
Other Ways We Use Information We Collect
In addition to the uses described above, we may use the personal information we collect in order to:
• Communicate with Individuals about our Website, Platform, and Services, including technical notices, security alerts, and to provide support and administrative messages. We may also provide notices about changes to our Website, Platform or Services, notices, or legal terms, as applicable.
• Read correspondence and provide information that Individuals request from us or otherwise respond to communications and questions.
• Monitor and enforce our contracts, legal terms, acceptable use or other policies or similar terms.
• Comply with law and satisfy our regulatory and compliance obligations. Additionally, we may use information we collect to support compliance efforts on behalf of others and ourselves.
• Help detect and prevent fraudulent use of our Website, Platform, or Services and other prohibited, illicit, or illegal activity. We may compare information for accuracy, and to verify identity.
• Monitor information security, manage and protect our technical infrastructure (servers, networks, etc.), and to protect the rights and vital interests of Individuals, others, and ourselves.
• Provide a personalized experience. Automatically collected information including device information may be used to help us estimate our audience size, usage patterns, and analyze trends and administer our Website, Platform, Services, and business, and used for research and marketing purposes.
• Maintain, analyze, customize, and improve our Services and Individuals’ experience with our Website, Platform, and Services.
• Support business development, research, advertising, marketing, and promotional purposes.
• Respond to press inquiries.
• Develop analytics or to aggregate statistical data.
• Address existing or anticipated disputes, and to protect our legal interests.
• Otherwise operate our business, including support for transactions impacting our company as a whole (such as mergers, acquisitions, reorganizations, underwriting or asset purchases).
• Fulfill any other purpose for which individuals provide their information to us and for other purposes disclosed to them in connection with our business.
• Other purposes permitted by law or to which Individuals consent.
We may also retain and use information in an anonymized or de-identified format where identity is not recognizable. Such information is not subject to the same usage restrictions as personal information and can be used to improve our Website, Platform, Services, and for marketing, to conduct research, or for our other business purposes.
As permitted by law, we may combine the information we gather about Individuals in identifiable form, including information from third parties. We may use this information, for example, to improve and personalize our Website, Platform, Services, or our marketing/advertising content or practices.
How We Secure Information
We are committed to maintaining measures to protect the security of personal information maintained in our systems. However, no network or system is ever entirely secure, and we cannot guarantee the security of networks and systems that we operate or that are operated on our behalf. If we face a security breach, we may notify Individuals as required by law via email or conspicuous posting on our Website or Platform.
How We Share Information
Below, we describe how we disclose information with third parties in the context of providing or utilizing the Services (including for the purposes described above):
Affiliated Organizations. We may share Individuals’ personal information with our parent organizations, subsidiaries, affiliates, joint ventures, or other organizations or entities under common control with us.
Service Providers/Vendors. We work with third parties to help us provide our Website, Platform, and Services, to run our business, and to support internal operations. In some cases, these third parties may use Individuals’ information subject to their own privacy policies and to comply with their own legal and regulatory obligations. We work with different types of third parties, presently including:
• Data hosting, storage and cloud service providers;
• Website security service providers;
• Payment processors;
• Electronic communications (email) services providers;
• Technical support providers;
• Artificial intelligence solutions providers
• Marketing and advertising service providers;
• Analytics service providers;
• Other third parties.
Professional Advisors, Law Enforcement and Regulators. We share information with our professional advisors who provide legal, compliance, auditing, accounting, banking, consulting, or other professional services, and with regulators, law enforcement, or government agencies to:
• Comply with our legal and regulatory obligations, including those compliance obligations of federal, state or local regulators;
• Protect our interests, property or legal rights, or those of our customers or third parties;
• Respond to a subpoena, court order, or similar law enforcement request or government demands, or when we believe in good faith that the disclosure of personal information is necessary to prevent physical harm or financial loss, to report suspected illegal activity, or to investigate violations of this Privacy Notice or other applicable terms; and
• For other legal purposes, such as to enforce our terms and conditions, or to exercise or defend legal claims.
Transaction Impacting the Organization as a Whole. In the event of a transaction or reorganization impacting us as an entity or organization, we may share Individuals’ personal information. We may share personal information in connection with, or during the negotiation of, any merger, sale of company stock or assets, financing, acquisition, restructuring, divestiture or dissolution of all or a portion of our business, or other similar event.
Other Disclosures. In addition to the above disclosures, we may disclose personal information in the event that we believe such disclosure is (i) necessary to provide our Services or operate our business; (ii) in accordance with purposes we describe when Individuals share it with us; (iii) permitted by law; or (iv) with consent or at Individuals’ direction.
We may disclose aggregated or deidentified information that does not identify any individual without restriction.
What Choices Do I Have?
Update personal information. Individuals may request changes to information we maintain concerning them by emailing us at legal@omplus.app. As permitted by law, we may deny a request to change information if we believe the change would violate any law or legal requirement, cause the information to be incorrect, or interfere with the operation of our business.
Marketing communications. Individuals may receive marketing communications from OM+, including if they sign up for marketing or other communications. Individuals may opt out of receiving marketing emails by following the unsubscribe link in each email, or by contacting us at legal@omplus.app.
Please note that Individuals may continue to receive non-marketing emails from us after they opt out. Please note that we do not control communications from or on behalf of others, including from OMTs. If Individuals have received marketing communications from third parties, they should contact them directly to understand communication choices they may provide.
Cookies. Individuals have choices regarding certain cookies. Most web browsers automatically accept cookies, but Individuals may modify their browser’s setting to notify them of cookie placement or decline cookies. If Individuals choose to decline cookies, certain features of our website may not function properly or at all as a result.
Updates to Our Privacy Notice
We may update this Privacy Notice from time to time in order to provide clarification or notice of changes to our practices. If we make changes, we will revise the Effective Date at the top of this Privacy Notice. Changes to this Privacy Notice will be effective once they are posted unless otherwise indicated. We may choose to notify Individuals by email to the email address in our records. We encourage Individuals to periodically review our Privacy Notice to be sure they are familiar with the most current version.
Contact Information
For any questions or concern about this Privacy Notice or the privacy practices at OM+, please contact us at legal@omplus.app.