01 · Scope and identity
Who this policy covers
This Privacy Policy explains how Rashtan Soft collects, uses, stores and shares personal data when individuals visit the Dental Lab Guru website, use the Application, communicate with us, manage a business subscription or make a payment.
“Rashtan Soft”, “we”, “us” and “our” mean Agencija za racunarsko programiranje Rashtan Soft Gavrilo Mumovic s.p. Trebinje, with its registered address at Republike Srpske 4a, floor 4, apartment 22, Trebinje, Bosnia and Herzegovina, unique identification number 4512925880006.
Dental Lab Guru is a B2B service. This policy may apply to Customer representatives, authorised Users, Billing Contacts, professional collaborators and people whose information is included in case data.
02 · Responsibility
Our role when processing data
Rashtan Soft acts as a controller for personal data used to manage its website, customer relationships, user accounts, subscriptions, invoices, support, security and legal obligations.
Where a Customer enters patient, dentist, case or other third-party information into Dental Lab Guru, the Customer normally determines why and how that data is processed. In that context, the Customer acts as controller and Rashtan Soft processes the data on the Customer’s behalf to provide the Service.
Where required, controller–processor responsibilities may be addressed in a separate Data Processing Agreement.
03 · Data categories
Information we collect
Account, identity and professional data
- name, username, email address, telephone number and login or authentication identifiers;
- Customer name, laboratory or practice information, professional role and assigned permissions;
- support messages, feedback and other communications with Rashtan Soft; and
- security events and records associated with access to the Service.
Application, case and third-party data
Depending on how a Customer uses the Service, data may include dentist and collaborator details, patient references, case instructions, production stages, dates, messages, images, attachments, delivery information, laboratory invoices, payment tracking and related operational records.
Billing and subscription data
- billing name, address, country, email and tax information provided for PayPal checkout or received from Lemon Squeezy where available;
- trial start and end dates, trial status and, where a paid subscription is selected, plan, billing interval, price and currency;
- internal subscription records and PayPal or Lemon Squeezy customer, subscription and transaction identifiers;
- payment date and status, renewal date, cancellation or suspension status;
- refund, reversal and dispute status; and
- invoice number and applicable tax treatment.
Technical and usage data
We may collect IP address, browser and device characteristics, operating system, language and time zone, referring URLs, session and authentication data, device or push-notification identifiers, timestamps, feature interactions, error information and other technical data needed to operate, secure and understand the Service.
04 · Use of data
Why we process information
- create accounts, authenticate Users and provide the Service;
- support case workflows, collaboration, notifications and Customer-requested functions;
- verify B2B eligibility and Customer business information;
- determine applicable BiH PDV treatment;
- create and manage free trials and paid subscriptions, including automatically activating a trial when a laboratory workspace is created, confirming payments and activating paid access;
- issue invoices and credit notes and manage renewals and cancellations;
- process refunds and reconcile payment-provider transactions and fees;
- prevent fraud, payment abuse and unauthorised access;
- respond to disputes, chargebacks, support requests and legal claims;
- maintain, troubleshoot, analyse and improve the Service; and
- comply with PDV, tax, accounting, regulatory and other legal obligations.
05 · Lawful processing
Main legal bases
The applicable legal basis depends on the data, purpose and law that applies. We generally rely on:
| Processing | Main legal basis |
|---|---|
| Account creation and service delivery | Performance of contract |
| Subscription and payment management | Performance of contract |
| Invoices, PDV and accounting records | Legal obligation |
| Security and fraud prevention | Legitimate interests |
| Payment disputes and legal claims | Legitimate interests and legal obligations |
| Product analytics | Legitimate interests or consent, depending on implementation and applicable law |
| Optional marketing emails | Consent or another applicable lawful basis |
Where Rashtan Soft processes case data for a Customer, the Customer determines the applicable legal basis for its processing and instructions to Rashtan Soft.
07 · Payments
Payment-provider processing
Lemon Squeezy
Subscription checkout is hosted by Lemon Squeezy, which acts as Merchant of Record for transactions completed through its checkout. Lemon Squeezy may collect and process identity, contact, billing, payment, tax, device, transaction, security and fraud-prevention information.
Customers enter billing and payment information directly on Lemon Squeezy’s hosted checkout. Dental Lab Guru does not require a separate subscription billing profile and Rashtan Soft does not control all information that a Customer provides directly to Lemon Squeezy.
Rashtan Soft may send Lemon Squeezy information required to create or manage a transaction, such as the subscription plan, billing interval and internal Customer reference. Rashtan Soft may receive limited billing and subscription information from Lemon Squeezy, including the customer’s name and email, customer, subscription and transaction identifiers, amount, currency, payment status, renewal information, cancellation status, refund status and dispute status.
Read the Lemon Squeezy Privacy Policy for more information about Lemon Squeezy’s processing.
PayPal
PayPal remains available as an alternative subscription checkout. Dental Lab Guru collects the business billing profile required for this option and sends PayPal the information needed to create and manage the selected subscription. PayPal may collect and process identity, contact, payment, device, transaction, security, authentication and fraud-prevention information.
Rashtan Soft may receive limited information from PayPal, including the payer’s name and email, payer, subscription and transaction identifiers, amount, currency, payment status, renewal, cancellation, refund and dispute information. Rashtan Soft does not receive or store the Customer’s PayPal password, complete payment-card number or complete bank-account credentials.
Read the PayPal Privacy Statement for more information about PayPal’s processing.
08 · Locations
International data transfers
Rashtan Soft is established in Bosnia and Herzegovina. Customers, Users and service providers may be located in other countries. PayPal, Lemon Squeezy, cloud, authentication and analytics providers may process data internationally, including outside the Customer’s country.
Where required, Rashtan Soft uses appropriate contractual or legal safeguards for international transfers and assesses providers’ data-protection commitments. Customers may contact us for additional information about safeguards relevant to their data.
09 · Storage periods
How long information is kept
We keep personal data only for as long as reasonably necessary for the purpose for which it was collected, including contractual, tax, accounting, security, dispute and legal requirements.
| Data | Retention approach |
|---|---|
| Active account data | While the account remains active and as needed for account closure |
| Case and application data | For the active Customer relationship and the defined post-closure period under the Customer agreement or deletion process |
| Invoices and tax records | For the period required by applicable BiH tax and accounting law |
| Payment and subscription records | For accounting, reconciliation, fraud-prevention and dispute requirements |
| Dispute evidence | Until the dispute and relevant legal limitation periods expire |
| Support communications | For the operational need and a reasonable legal-protection period |
| Backups | Until removed through the normal backup-rotation process |
Data may be retained longer where required by law, a legal hold or the establishment, exercise or defence of legal claims.
10 · Individual choices
Privacy rights and deletion
Depending on applicable law, individuals may have rights to request access, correction, deletion, restriction, objection or portability and to withdraw consent where processing relies on consent. A request may be subject to identity verification, legal exceptions and the Customer’s role as controller for case data.
A request to delete a Dental Lab Guru account does not necessarily result in deletion of invoices, payment records, tax records, security records or dispute evidence that Rashtan Soft must retain.
Deleting a Dental Lab Guru account does not delete a Customer’s PayPal account or information independently retained by PayPal or Lemon Squeezy. Provider-related privacy requests may need to be submitted directly to the applicable provider.
12 · Protection
Data security
Rashtan Soft uses technical and organisational safeguards designed to protect personal data, including access controls, authentication, encrypted network transport, monitoring and provider security measures appropriate to the Service. No internet transmission or storage system can be guaranteed to be completely secure.
13 · Age
Children’s privacy
Dental Lab Guru is a professional B2B service and is not intended for individuals under 18. We do not knowingly invite children to create accounts. Patient data entered by professional Customers is processed as Customer-controlled case data, not as a child-directed service.
14 · Updates
Changes to this policy
We may update this Privacy Policy from time to time. Material changes will be communicated through email, the Application or a prominent website notice where reasonably practicable. The updated policy will show its effective date and last-updated date.
15 · Contact
Privacy questions or requests
Republike Srpske 4a, floor 4, apartment 22
Trebinje, Bosnia and Herzegovina [email protected]