Privacy Policy

1. Data controller

The data controller is Nikola Jeremić PR ILON, Ruma, Republic of Serbia (Tax ID/PIB: 113149259, Reg. no./MB: 66614077). Contact: nikola@ilon.rs.

2. What we collect

• Account data: email address, password (stored as a salted cryptographic hash — we never see the plaintext), workshop/company name, and optional billing details you provide for invoicing.
• Machine telemetry: machine status samples (state, spindle/feed values, program line, input states), machine names and locations you set, and optionally the G-code file loaded on the machine (used to draw the toolpath). Telemetry describes machines, not people.
• Notification data: Telegram chat IDs and display names of recipients you connect.
• Technical logs: IP addresses and request logs kept for security and troubleshooting, retained for a short period.
• Cookies: a single first-party session cookie (mw_session) used for login. No advertising or third-party analytics cookies.

3. Why we process it (legal bases)

• To provide the Service under our contract with you (dashboard, history, notifications).
• To bill and account for subscriptions (legal obligation and contract).
• To secure and improve the Service (legitimate interest).

4. Payments

Online payments are handled by Paddle as merchant of record. Paddle processes your payment details under its own privacy policy; we do not receive or store card numbers. For domestic (Serbian) customers invoiced directly, we process the billing details needed to issue an invoice.

5. Where data is stored

Service data is hosted on servers in the European Union (Hetzner). Telegram messages are delivered through Telegram's infrastructure under Telegram's terms.

6. Retention

• Machine history (status samples and events) is retained according to your plan: 30 days (Starter), 90 days (Workshop), or 365 days (Pro), and is deleted automatically after that.
• Account data is kept while the account is active. After closure, personal data is deleted within 30 days, except invoicing records we must keep under accounting law.

7. Sharing

We do not sell personal data. We share it only with processors necessary to run the Service (hosting provider, payment provider, Telegram for message delivery) or where required by law.

8. Your rights

You may request access, correction, export, or deletion of your personal data, and object to or restrict processing. Contact nikola@ilon.rs; we respond within 30 days. You may also lodge a complaint with your data protection authority (in Serbia: Poverenik za informacije od javnog značaja i zaštitu podataka o ličnosti).

9. Changes

We will announce material changes to this policy on this page, and by email to active subscribers where the change affects them.

1. Rukovalac podacima

Rukovalac podacima je Nikola Jeremić PR ILON, Ruma, Republika Srbija (PIB: 113149259, MB: 66614077). Kontakt: nikola@ilon.rs.

2. Koje podatke prikupljamo

• Podaci o nalogu: email adresa, lozinka (čuva se kao kriptografski heš sa solju — nikada ne vidimo lozinku u čitljivom obliku), naziv radionice/firme i opcioni podaci za fakturisanje koje unesete.
• Telemetrija mašina: uzorci statusa (stanje, vrednosti vretena/pomaka, linija programa, stanja ulaza), nazivi i lokacije mašina koje podesite, i opciono G-kod fajl učitan na mašini (za crtanje putanje alata). Telemetrija opisuje mašine, ne ljude.
• Podaci za obaveštenja: Telegram chat ID-jevi i imena primalaca koje povežete.
• Tehnički logovi: IP adrese i logovi zahteva radi bezbednosti i otklanjanja problema, čuvaju se kratko.
• Kolačići: jedan sopstveni sesijski kolačić (mw_session) za prijavu. Nema reklamnih ni analitičkih kolačića trećih strana.

3. Zašto ih obrađujemo (pravni osnovi)

• Radi pružanja Usluge po ugovoru sa vama (kontrolna tabla, istorija, obaveštenja).
• Radi naplate i računovodstva pretplata (zakonska obaveza i ugovor).
• Radi bezbednosti i unapređenja Usluge (legitimni interes).

4. Plaćanja

Onlajn plaćanja obrađuje Paddle kao merchant of record. Paddle obrađuje podatke o plaćanju po sopstvenoj politici privatnosti; mi ne primamo niti čuvamo brojeve kartica. Za domaće (srpske) kupce kojima fakturišemo direktno, obrađujemo podatke potrebne za izdavanje fakture.

5. Gde se podaci čuvaju

Podaci Usluge nalaze se na serverima u Evropskoj uniji (Hetzner). Telegram poruke se isporučuju kroz Telegram infrastrukturu po Telegramovim uslovima.

6. Rokovi čuvanja

• Istorija mašina (uzorci statusa i događaji) čuva se prema paketu: 30 dana (Starter), 90 dana (Workshop) ili 365 dana (Pro), i posle toga se automatski briše.
• Podaci o nalogu čuvaju se dok je nalog aktivan. Po gašenju, lični podaci se brišu u roku od 30 dana, osim računovodstvene dokumentacije koju moramo čuvati po zakonu.

7. Deljenje podataka

Lične podatke ne prodajemo. Delimo ih samo sa obrađivačima neophodnim za rad Usluge (hosting provajder, platni provajder, Telegram za isporuku poruka) ili kada to zahteva zakon.

8. Vaša prava

Možete zatražiti pristup, ispravku, izvoz ili brisanje svojih ličnih podataka, kao i prigovor ili ograničenje obrade. Pišite na nikola@ilon.rs; odgovaramo u roku od 30 dana. Pritužbu možete podneti i Povereniku za informacije od javnog značaja i zaštitu podataka o ličnosti.

9. Izmene

Bitne izmene ove politike objavićemo na ovoj stranici, a aktivne pretplatnike na koje se izmena odnosi obavestićemo email-om.