Privacy Policy | Dr.AlignNavi Billing

1. Data we collect

Account and contact data: user ID, name, email address, organization information, role, login and account status.
Billing data: selected plan, payment status, transaction ID, subscription ID, customer ID, billing email, invoice and receipt records.
Service data: project and case identifiers, case status, usage history, supported 3D scan and model files, editing results, notes, exports, and other customer content submitted by authorized users.
Technical data: IP address, device and browser information, access logs, security events, error logs, and operational monitoring records.
Support data: inquiries, refund requests, troubleshooting records, and communications with our support team.

2. Purpose of processing

Providing, maintaining, securing, and improving Dr.AlignNavi.
Account verification, access control, subscription management, billing support, and payment status synchronization.
3D model workflow operation, case management, customer support, troubleshooting, and fraud or abuse prevention.
Compliance with legal, tax, accounting, audit, dispute-resolution, and security obligations.

3. Customer content and data minimization

The service is designed to use project labels, reference IDs, and case IDs that do not directly identify a person.
Do not enter names, birth dates, contact details, record numbers, or other direct identifiers in project names, reference IDs, filenames, notes, metadata, or uploaded files.
Do not submit regulated or sensitive personal data unless a written agreement with us expressly permits it. We process permitted customer content only to provide, secure, support, and maintain the requested 3D model workflow.

4. Controller, processor, and regional compliance

For our website, billing platform, sales inquiries, account administration, and support operations, we generally act as an independent data controller for the personal data we determine how to process.
For customer content and account data controlled by an organization, that organization generally decides the processing purpose and legal basis, and we process the information to provide the service.
Where required by applicable law or customer agreement, this processing may be governed by a Data Processing Agreement, standard contractual clauses, or other written data-protection terms.
If a person asks us to exercise rights over data controlled by a customer, we may direct the request to that customer or support the customer in responding as required by law.

5. International transfers and service providers

The billing platform is operated from the Republic of Korea, and some service providers, payment processors, support systems, or infrastructure providers may process data in other countries.
Where international transfer rules apply, we take steps intended to use lawful transfer mechanisms or contractual safeguards required by applicable law.
For customers subject to GDPR, UK GDPR, Korea PIPA, or other data-protection laws, additional notices, consent records, transfer terms, or contractual documents may be required before regulated data is uploaded.

6. Payment processing and third parties

Payments are processed by PayPal. PayPal independently processes payment method, transaction, fraud-prevention, dispute, and related data under the PayPal Privacy Statement.
We do not store full card numbers or payment authentication credentials on our servers.
We may use hosting, security, monitoring, email, customer support, and analytics service providers as needed to operate the service.

7. Automated processing and user review

The service may automatically process, analyze, or transform 3D scan and model files to support editing workflows.
These functions produce editable software results that the user must review for the intended project.

8. Retention and deletion

Personal data is retained for as long as necessary to provide the service, manage billing, resolve disputes, maintain security, or meet legal obligations.
Billing, tax, accounting, and audit records may be retained for the period required by applicable law.
When retention is no longer required, data is deleted, anonymized, or securely isolated according to operational and legal requirements.

9. Security measures

We apply reasonable technical and administrative safeguards, including HTTPS transport protection, access control, logging, backup, and monitoring.
No internet-based service can be guaranteed to be completely secure, but we work to reduce risks and respond to security events in a timely manner.

10. User rights and requests

Users may request access, correction, deletion, suspension of processing, or other rights where permitted by applicable law. Requests can be sent to contact@innodtech.co.kr. We may need to verify the requester's identity and authority before processing a request.

11. Privacy contact

Company: 이노디테크 주식회사 (Innodtech)
CEO: 주보훈
Business registration no.: 177-85-01214
Business address: 서울특별시 강남구 강남대로94길 27-11, 301호(역삼동, 상경빌딩)
Room 301, 27-11 Gangnam-daero 94-gil, Gangnam-gu, Seoul, Republic of Korea
Registered head office: 전남광주통합특별시 북구 삼소로 77, 513호(오룡동, 실증창업동)
Room 513, 77 Samso-ro, Buk-gu, Gwangju, Republic of Korea
Contact: contact@innodtech.co.kr / 02.501.2801