Who we are
TMJDirectory ("we," "us") is an educational directory of TMJ/TMD-related providers operated from the United States. Contact: contact form.
What we collect
If you're a visitor or patient
- Voluntary submissions: Anything you enter into the contact form (name, email, phone, message, opt-in choices) or the symptom-routing quiz (name, email, agreement date, symptom checkboxes, and the resulting pattern).
- Anonymous browsing data: A random session ID stored in your browser so we can count things like favorites and card views without identifying you. Your IP address may be logged briefly for security and rate-limiting.
- Card interactions: Which provider cards you view and which contact paths you click (phone, email, website, social, schedule). These are tied to your anonymous session ID, not to you.
If you're a provider
- Your listing information: Name, credentials, specialty, business name, address, phone, email, website, social handles, bio, photo, schedule link, tags, insurances. Some of this may have been sourced from public listings before you claimed it; you can correct or remove it.
- Account data: Your email (for magic-link sign-in) and the timestamp of your sign-ins. We use Supabase Auth and do not store passwords.
- Network and analytics: Which other providers you save to your support network (visible to you and to those providers), and aggregate counts of how patients interact with your card (views, contact clicks, hearts).
How we use it
- Operate the directory — show provider listings, run the quiz, respond to contact-form messages.
- Send transactional emails — magic-link sign-ins, claim verifications, contact-form acknowledgments.
- Show providers aggregate analytics about their own listing.
- Prevent abuse (spam, scraping, fraudulent claims).
- Send the newsletter or area-claim alerts only to people who opted in.
How we store it
Data is stored in Supabase (Postgres) in the United States. Row-level security restricts what each role can read: public anonymous reads see only display fields (PII like contact info is masked unless a listing is claimed); provider account holders can read and update only their own row; only the operations role can read full submissions like quiz responses and contact-form messages.
What we don't do
- We don't sell your data.
- We don't share patient submissions with providers.
- We don't run third-party advertising trackers.
- We don't claim to provide medical advice — see Terms.
Third-party services we use
- Supabase — database, authentication, file storage.
- Resend (or equivalent transactional email provider) — sending sign-in links and notifications.
- Cloudflare or similar — DNS, CDN, basic bot/spam protection.
These providers may receive your email or IP address as needed to deliver their service. They are not authorized to use your data for their own purposes.
Cookies and similar technology
We use browser localStorage (not third-party cookies) to remember your anonymous session ID, your favorites, your theme preference, and — if you're signed in — your authentication session. Clearing your browser storage signs you out and resets your local preferences.
Your rights
- Access / correction: Email us via the contact form and we'll send you the data we hold about you, or correct it.
- Deletion: Ask and we'll remove it. (For providers, claiming and editing your listing is the fastest path; you can also request full removal.)
- Opt-out: Every newsletter we send has an unsubscribe link. Opt-ins are off by default.
- California / EU residents: You have the same rights regardless of region under CCPA and GDPR. Contact us and we'll handle it within 30 days.
Providers: take-down requests
If you are a provider and your listing was sourced from public information without your consent, you can have it removed by emailing the contact form with the "Dispute a claim" or "Take down my listing" topic. We will remove it within 7 business days. Verification of identity may be requested.
Children
TMJDirectory is not intended for children under 13, and we do not knowingly collect data from them. If you believe we have, contact us and we will delete it.
Changes
If this policy changes materially we will update the "Last updated" date at the top and, where reasonable, notify newsletter subscribers.
Contact
Questions, requests, or concerns: contact form.