Privacy policy
1. Who we are
LagerOS is an app for the stock, sales and finances of small businesses, available at lageros.app. The service is provided by Milan Milić ("LagerOS" or "we").
For any question about personal data, write to [email protected] or call +381 64 186 0217.
This policy explains what personal data we process, why, for how long, and what rights you have, in line with the Serbian Law on Personal Data Protection ("Official Gazette of RS", No. 87/2018, the "Law").
2. When we are the controller and when the processor
- Data that businesses enter into the app (customers, suppliers, sales, debts and payments): the business using LagerOS is the controller. We process that data only on the business's behalf, as a processor, under the Data processing agreement. If you are a customer or supplier of a business, contact that business about your rights; we will help it respond.
- Data of website visitors, app users, and people who contact us: we are the controller. Section 3 applies to this data.
We do not sell data or use it for advertising. The website has no analytics and no tracking cookies.
3. Data for which we are the controller
| Data | Why | Legal basis (Art. 12) | How long |
|---|---|---|---|
| Enquiry (website form or email): name and company, phone or email, message, language; for the form also the IP address and approximate location (city and country) | To reply and start your free month; the IP address protects the form from abuse | Steps at your request before a contract; legitimate interest | 12 months after the last contact, if you do not become a customer |
| User account: name, email, role and permissions in the business, language; we never store your password, only a secure hash of it | Signing in and using the app | Contract with the business | While the account exists |
| Access log: sign-in time (successful and failed), IP address, approximate location, browser and device | Account security; the business owner sees who signed in and from where | Legitimate interest (security) | 12 months |
| Change history: who entered or changed what in the business's data, and when (for example, who received goods or made a sale) | So the business knows who entered what and mistakes can be fixed | Contract; legitimate interest | As long as the related record exists |
| Problem reports from the app: description, page, attachments (screenshots) and sender | To fix the problem and reply | Contract | Attachments 90 days after resolution; text 2 years |
| Phone notifications: the delivery address your browser creates for notifications | Sending the notifications you turned on | Consent (turning notifications on) | Until you turn them off or delete the account |
| Subscription payments: business, amount, date, payment method, note | Recording the subscription and its validity | Contract; legal obligation | 2 years |
| Server technical logs: time, page address, errors, user and business identifiers; no content of entered data | Running, securing and fixing the app | Legitimate interest | 30 days |
4. Data entered by businesses
The business decides what it enters and how long it keeps it. The app typically holds:
- items, barcodes, prices, goods receipts and stock levels (these are not personal data);
- suppliers: name and contact details (name, phone, email, address of the contact person);
- customers and resellers: name, contact details, address, purchases, debt and payments;
- sales and receipts: what was sold, to whom, when, at what price, and who made the sale.
We use this data only to run the app for that business. Each business sees only its own data. The platform administrator sees only aggregate numbers (for example, number of users and items), not the content. Only the service provider has server access, for maintenance and backups.
When a business deletes a record, it disappears from the app immediately and from backups within 30 days.
Camera. When you scan a barcode with your phone camera, the image is processed only in your browser. Only the barcode number that was read reaches LagerOS; images are not sent or stored.
5. Artificial intelligence (AI)
Some features use Claude, an AI model by Anthropic PBC (USA), through its API:
- “Import from image”: reading items, prices and barcodes from an image or PDF of a supplier's price list, receipt or invoice (Pro plan);
- the AI assistant for questions about the app (it answers from the user guide);
- checking and tidying up the text of a problem report (without attachments).
Only what a request needs is sent to Anthropic (the image or PDF the user picks for an import, the question or the report text), and only when a user starts it. Other data about goods, customers and sales is not sent. For the content of import images we act as the business's processor (Data processing agreement). Under Anthropic's commercial terms, this data is not used to train models and is automatically deleted within 30 days. If Anthropic's automated systems flag a request as violating its usage policy, it may be kept for up to 2 years. Our logs record only the request type, token counts and duration, not the content.
6. Who receives data
We use the following service providers (sub-processors). Each receives only what it needs for its part of the work.
| Who | What it does | Where |
|---|---|---|
| netcup GmbH | Server, database and files | Germany (EU) |
| Cloudflare, Inc. | Protecting and delivering traffic to the website and the app, off-site backups, DNS, forwarding email to [email protected] | Backups in the EU; US company |
| Anthropic PBC | AI features (section 5) | USA |
| Sendinblue SAS (Brevo) | Sending app emails: invitations, reminders, password changes | France (EU) |
| Browser push services (Google, Apple, Mozilla, Microsoft) | Delivering phone notifications; message content is encrypted | Depends on the browser |
We determine approximate location from the IP address using a local database on our server (DB-IP), without sending the address to anyone. Technical logs are kept on our own server. When a website enquiry arrives, we receive a short notification through ntfy.sh, without the enquiry's data.
Transfers outside Serbia. Germany and France provide an adequate level of protection. For transfers to the USA (Anthropic, Cloudflare) we rely on the standard contractual clauses in those companies' data processing agreements (Art. 65 of the Law).
We disclose data to public authorities only when required by law, and we inform the business unless the law forbids it.
7. How we protect data
- All traffic uses HTTPS.
- Passwords are never stored, only a secure hash. After 5 wrong attempts, the account is temporarily locked. Two-step sign-in is available to every user.
- Each business sees only its own data, and each user only the parts the owner allows.
- We record who changed what and who signed in when.
- Uploaded files are checked, and hidden data (such as GPS location) is removed from images.
- Backups are made every day and also kept at a second location.
If a data breach occurs, we notify the Commissioner and the affected businesses without delay (Art. 52 and 53).
8. Your rights
You have the right to request:
- access to your data and a copy (Art. 26);
- correction and completion of inaccurate data (Art. 29);
- erasure (Art. 30) and restriction of processing (Art. 31);
- a copy of your data in a machine-readable format (Art. 36);
- to object to processing based on legitimate interest (Art. 37);
- to withdraw consent, without affecting earlier processing (Art. 15).
Write to [email protected]. We reply within 30 days. If the request concerns data a business entered (for example, your debt with that business), we will forward it to that business.
If you believe your rights have been violated, you can file a complaint with the Commissioner for Information of Public Importance and Personal Data Protection, Bulevar kralja Aleksandra 15, 11120 Belgrade, www.poverenik.rs.
9. Cookies and local storage
The website uses no cookies. The app uses an essential sign-in cookie (lageros.auth). It is encrypted, not readable by scripts, sent only over HTTPS, and valid for 14 days after last use. With two-step sign-in, two more essential cookies are used: one for the confirmation step (5 minutes) and one if you choose to remember the device. The browser's local storage keeps your language choice, similar display settings and an unsaved draft of a goods receipt.
There are no tracking or advertising cookies, so we do not ask for cookie consent.
10. Changes to this policy
We publish every change on this page with a new date. We inform businesses of important changes by email or in the app.