napravi.site
Prikupljamo samo podatke neophodne za rad nativnih mobilnih aplikacija i povezanog sajta. Ne prodajemo, ne iznajmljujemo niti trgujemo vašim podacima sa trećim licima u marketinške svrhe.
Rukovalac podataka za platformu napravi.site je Operator platforme. Kontakt za privatnost: privacy@napravi.site
Ukoliko koristite brendiranu iOS/Android aplikaciju ili veb-sajt kreiran od strane naših poslovnih korisnika (Tenanta), taj konkretni poslovni korisnik (vlasnik brenda) je Rukovalac vaših podataka o kupovinama i nalozima, dok Platforma nastupa kao Obrađivač podataka (Data Processor).
Podaci o platnim karticama (broj, CVV, datum isteka) se nikada ne skladište na našim serverima — obrađuju se direktno putem licenciranog procesora Stripe.
| Svrha obrade | Pravni osnov (GDPR / Zakon RS) | Podaci | Generisanje i rad mobilnih aplikacija | Izvršenje ugovora (čl. 6(1)(b)) | Konfiguracija aplikacije, push tokeni, podaci o nalogu | 14-dnevni Live Preview na telefonu | Izvršenje ugovora / predugovorne radnje | Live preview sesije, verifikacija uređaja | Naplata licence i ugovor | Izvršenje ugovora i zakonska obaveza | Podaci o firmi, potpis ugovora, fakture | Slanje push i SMS obaveštenja | Legitimni interes / Saglasnost | Push tokeni, telefonski brojevi | Zaštita bezbednosti i prevencija zloupotreba | Legitimni interes (čl. 6(1)(f)) | IP adresa, session tokeni, bezbednosni logovi |
|---|
Za funkcionisanje platforme i mobilnih aplikacija koristimo isključivo strogo neophodne mehanizme sesije:
| Tehnologija | Svrha | Trajanje | Karakter |
|---|---|---|---|
| mslf_session (Web) | Bezbedna autentifikacija korisnika na CMS panelu | 24 sata | Strogo neophodan |
| CSRF token (Web) | Zaštita formi od cross-site napada | Trajanje sesije | Bezbednosni |
| AsyncStorage / SecureStore (Mobilna App) | Keširanje Server-Driven UI elemenata i korisničke sesije | Do odjave | Funkcionalni |
Ne koristimo alate za invazivno praćenje niti profilišemo korisnike mobilnih aplikacija radi prodaje marketinških baza.
| Provajder | Svrha | Koji podaci se dele | Lokacija |
|---|---|---|---|
| Apple Inc. | App Store distribucija i APNs push notifikacije | Build paketi, APNs device tokeni | SAD (SCCs) |
| Google LLC | Google Play distribucija i FCM push notifikacije | Build paketi, FCM device tokeni | SAD (SCCs) |
| Stripe, Inc. | Procesiranje plaćanja pretplata i licenci | Email, transakcioni ID | SAD (SCCs) |
| Cloudinary Ltd. | Optimizacija i distribucija slika preko CDN-a | Uploadovane fotografije artikala | SAD/EU (SCCs) |
| BulkGate s.r.o. | Slanje SMS potvrdnih poruka | Broj telefona, tekst notifikacije | Češka (EU) |
| OpenAI, Inc. | Automatski AI prevodi tekstualnog sadržaja | Tekst poslat na prevod | SAD (SCCs) |
| Kategorija podataka | Period čuvanja | Pravni razlog |
|---|---|---|
| Podaci o nalogu i aplikacijama | Tokom trajanja ugovora + 30 dana arhive | Omogućavanje obnove i rada app |
| Potpisani B2B ugovori i fakture | 10 godina | Zakonska obaveza (računovodstveni propisi) |
| Push tokeni uređaja | Do deinstalacije aplikacije ili odjave | Dostavljanje obaveštenja |
| Slike i medijski sadržaj | Do brisanja naloga ili uklanjanja od strane korisnika | Korisnički sadržaj |
U malo verovatnom slučaju povrede bezbednosti podataka, Operator će obavestiti pogođene korisnike u roku od 72 sata u skladu sa GDPR standardima i Zakonom o zaštiti podataka o ličnosti.
Platforma je namenjena isključivo poslovnim korisnicima i licima starijim od 16 godina. Ne prikupljamo svesno podatke o deci.
Kao registrovani korisnik imate pravo na: pristup svojim podacima, ispravku, brisanje ("pravo na zaborav"), prenosivost u strukturiranom JSON formatu, i prigovor na obradu. Zahteve možete uputiti na: privacy@napravi.site.
Sve izmene politike privatnosti biće transparentno objavljene sa novim datumom, a registrovani korisnici obavešteni najmanje 14 dana pre stupanja na snagu.
Naš tim za bezbednost i zaštitu podataka stoji vam na raspolaganju.
privacy@napravi.siteWe only collect data strictly necessary to deliver high-performance native mobile apps and synchronized websites. We do not sell or monetize personal data.
The data controller for the napravi.site platform is the Platform Operator. Inquiries: privacy@napravi.site
When purchasing from or interacting with a specific business via their branded mobile application, the business (Tenant) acts as the Data Controller of your customer records, while our Platform operates as the secure Data Processor.
Credit card details (number, CVV, expiry) are never stored on our infrastructure — they are handled exclusively by PCI-DSS Level 1 certified Stripe.
| Purpose | Legal Basis (GDPR) | Data Categories |
|---|---|---|
| Mobile app generation & maintenance | Performance of contract (Art. 6(1)(b)) | App configuration, push tokens, account data |
| 14-Day Live Companion device testing | Performance of contract / Pre-contractual steps | Live preview sessions, device telemetry |
| Licensing billing & contract execution | Performance of contract & Legal obligation | Company details, digital signatures, invoices |
| Push notification delivery | Legitimate interest / Consent | APNs/FCM tokens, notification text |
| Security & fraud prevention | Legitimate interest (Art. 6(1)(f)) | IP logs, session tokens, audit trail |
We employ only strictly necessary session technologies required for administrative and mobile app operations:
| Technology | Purpose | Duration | Classification |
|---|---|---|---|
| mslf_session (Web) | User authentication session on CMS portal | 24 hours | Strictly Necessary |
| CSRF token (Web) | Cross-site request forgery defense | Session | Strictly Necessary |
| AsyncStorage / SecureStore (Mobile App) | Server-Driven UI layout caching & active session token | Until logout | Functional |
We do not utilize cross-site tracking trackers or advertising brokers.
| Provider | Purpose | Data Transferred | Location |
|---|---|---|---|
| Apple Inc. | App Store distribution & APNs push services | App binaries, APNs device tokens | USA (SCCs) |
| Google LLC | Google Play distribution & FCM push services | App binaries, FCM device tokens | USA (SCCs) |
| Stripe, Inc. | Subscription & licensing payment processing | Email, Stripe ID, transaction IDs | USA (SCCs) |
| Cloudinary Ltd. | Image optimization and global CDN delivery | Uploaded catalog and brand assets | USA/EU (SCCs) |
| BulkGate s.r.o. | SMS order alerts and verifications | Phone number, message text | Czechia (EU) |
| OpenAI, Inc. | Automated AI content translations | Text submitted for translation | USA (SCCs) |
| Data Category | Retention Window | Legal Rationale |
|---|---|---|
| Account and app configurations | Duration of 12-month agreement + 30 days | Enabling service delivery and renewal |
| Executed B2B agreements and invoices | 10 years | Statutory accounting and tax compliance |
| Device push tokens | Until app uninstallation or token rotation | Notification delivery |
| Uploaded catalog media | Until deletion by client or account termination | Customer-owned assets |
In accordance with GDPR Arts. 33-34, any data breach posing a risk to rights and freedoms will be communicated to users within 72 hours of confirmation.
The Platform is designed for commercial entities and individuals aged 16 and above (or 13+ under US COPPA guidelines). We do not knowingly collect personal information from children.
You maintain full statutory rights to access, rectify, erase ("right to be forgotten"), restrict processing, and export your personal data in structured JSON formats. Submit requests to: privacy@napravi.site.
Material updates to this policy will be announced with updated dates and communicated via email at least 14 days before enforcement.
Under the California Consumer Privacy Act (CCPA), California residents have rights regarding access, deletion, and non-discrimination. We do not sell or monetize personal information.
We do not sell personal information for monetary or valuable consideration (Cal. Civ. Code §1798.140(ad)).
Contact our Data Protection Office for any data requests or inquiries.
privacy@napravi.site