01 · Scope
How to read this list
Rashtan Soft uses external providers to operate Dental Lab Guru. A provider may act as a processor, subprocessor or independent controller depending on the service and data involved. For example, Lemon Squeezy acts as Merchant of Record for its hosted-checkout transactions. PayPal processes alternative subscription payments under its own legal obligations and privacy statement.
This page covers the Dental Lab Guru client application, backend and configured processing services. The precise location of processing may vary according to the provider’s infrastructure, support operations and applicable contractual configuration. Provider service names below do not replace the identification of contracting entities or agreed safeguards in a processing agreement.
02 · Provider register
Current providers
| Provider | Purpose | Data involved | Processing region | Role |
|---|---|---|---|---|
| Amazon Web Services (AWS) | Backend API and background workers, private case-attachment storage, job queues and operational monitoring | Case attachments including audio; case information processed by the API and workers; job identifiers, connection metadata and limited operational diagnostics | Infrastructure configured for AWS eu-central-1; international support or administrative access may apply | Cloud service provider / subprocessor for Customer case data |
| Google — Gemini Developer API | Optional speech transcription and a separate request to extract stated information into draft case fields | Audio, complete transcript, generated output, laboratory product vocabulary and catalogue context, recording timestamp, timezone, language and dental numbering context | Processing under the applicable Gemini API terms and project configuration; no guaranteed EU-only processing region | AI service provider; processing role and contracting Google entity governed by the applicable service terms and processing agreement |
| Microsoft Azure | Static web application hosting and deployment | Public application assets and connection metadata associated with delivery of the frontend | Configured Azure service locations; international support may apply | Service provider / processor |
| Google Firebase | Authentication, Firestore realtime functions and cloud messaging | Identity and login data, device or notification tokens, and selected realtime application data | Google service locations; international processing may apply | Service provider / processor |
| Google Tag Manager | Tag management and product measurement | Device, browser and usage data according to the tags configured in the container | International | Service provider |
| Optional Google account sign-in | Account identity, email and authentication data selected for sign-in | International | Authentication provider | |
| Meta Platforms | Optional Facebook account sign-in | Account identity, email and authentication data selected for sign-in | International | Authentication provider |
| Lemon Squeezy | Hosted subscription checkout, Merchant of Record services, recurring billing, taxes, refunds and payment disputes | Customer, billing, payment, tax, subscription, transaction, status, security and dispute data; no patient or dental-case data | International | Merchant of Record / independent controller |
| PayPal | Alternative subscription payment processing, recurring billing, refunds and payment disputes | Business billing, payer, subscription, transaction, status, security and dispute data; no patient or dental-case data | International | Payment provider / independent controller |
Audio-processing retention and permitted use
Original audio and transcripts are retained by DLG as case records. Google files and stored interactions have separate cleanup and retention rules, including potential security or abuse-monitoring retention. Google’s Paid Services terms exclude use of prompts and responses to improve its products; unpaid-service terms differ and prohibit submitting sensitive or personal information. The applicable project and contractual arrangements determine provider handling. See the Privacy Policy for the data flow and retention details, and the Gemini API terms for Google’s service-specific conditions.
03 · Updates
Changes to the provider list
Rashtan Soft may add, replace or remove providers as the Service develops. This page will be updated to reflect material changes. Where law or the applicable processing agreement requires advance notice of a new subprocessor, Rashtan Soft will actively provide that notice using the agreed contact method and allow an opportunity to object where required. Updating this page alone does not replace that notice.
04 · Contact