Privacy Policy

Last updated:

This policy explains what personal data "BLS AI AUTOMATION" DOO PODGORICA ("we", "us") handles when a clinic uses DentVideo or when someone visits dentvideo.com, why, who else receives it and how long we keep it.

DentVideo is built to work without patient data. Patients do not use DentVideo, and we ask clinics not to upload anything that identifies a patient without that patient's consent.

1. Who is responsible

The controller for account, billing and website data is:

Company
"BLS AI AUTOMATION" DOO PODGORICA
Legal form
Limited liability company under the laws of Montenegro (društvo sa ograničenom odgovornošću)
Registered office
Neznanih Junaka 60, 81000 Podgorica, Montenegro
Register
Central Register of Business Entities (CRPS), Montenegro
Registration number
5-1333594
Tax ID (PIB)
03784410
Managing director
Berke Bulsu
Email
hello@dentvideo.com · info@bulsulabs.com
Brand
Bulsu Labs — product: DentVideo

For recordings and other material a clinic uploads, the clinic decides what is uploaded and why: the clinic is the controller and we process that data on its behalf under our Data Processing Agreement.

Privacy questions and requests: hello@dentvideo.com.

2. What we collect

  • Account: your email address and your login (we store a password hash, never the password itself), and whether your email address is confirmed.
  • Clinic profile: clinic name, city and country, language, the treatments you offer, tone, social-media handle, booking link, brand colours and logo.
  • Recordings you upload (on plans that include them): video and audio, which contain the voice and image of whoever appears, and a transcript.
  • What we make for you: topics, scripts, captions, narration, rendered videos, check results and your approvals.
  • Billing: your plan, subscription status, renewal date and the Dodo Payments subscription, customer and payment references. Card details are handled by Dodo Payments and never reach us.
  • Emails: a record of which service emails we sent to your clinic, and whether you unsubscribed from reminders.
  • Usage events: a small first-party record of steps such as "landing page viewed" or "plan chosen", with the page language, campaign tags (utm) and the referring website's host. These events store no cookie ID, no IP address, no browser details and no name or email.
  • Technical data: your IP address and request details are processed to deliver pages, keep the service secure and limit abuse (short-lived rate-limit counters).

3. Cookies and browser storage

We use only what the service needs: login session cookies, a cookie that remembers your language, a cookie that remembers how far you got in sign-up, and short-lived browser storage while you sign up. We use no advertising or third-party analytics cookies.

4. Why we use it and on what legal basis

  • To provide DentVideo under our contract with you: make your videos, process your recordings, show them in your library and email you about them (contract).
  • To take payment and manage your subscription (contract).
  • To keep the service secure, prevent abuse and fix errors (legitimate interests).
  • To understand which pages and channels bring clinics, using the anonymous usage events above (legitimate interests).
  • To send reminders about an unfinished sign-up, which you can stop with the unsubscribe link (legitimate interests).
  • To meet legal obligations, such as accounting and tax records (legal obligation).

We do not sell personal data, we do not use it for advertising, and we do not use your uploads or videos to train AI models.

5. Who receives it

We use a small number of providers. Each receives only what it needs for its task:

  • Hostinger

    Purpose:
    Virtual private server that runs dentvideo.com, the video workers, our database, logins and file storage (our own installation of the open-source Supabase software).
    Data:
    All service data: account, clinic profile, uploads, videos, billing references, logs.
    Location:
    Germany (EU)

  • OpenAI

    Purpose:
    Writes and reviews scripts, creates the synthetic narration, and transcribes uploaded recordings when our own transcription service is unavailable.
    Data:
    Clinic profile details used in scripts, script text, recording audio (for transcription).
    Location:
    United States

  • Resend

    Purpose:
    Sends service emails (sign-in codes, "your videos are ready", billing notices).
    Data:
    Email address, clinic name, email content.
    Location:
    United States

  • Dodo Payments

    Purpose:
    Checkout, subscriptions, invoices, taxes and refunds as merchant of record. For payment data Dodo Payments is an independent controller.
    Data:
    Email address, name and billing details, payment data, subscription status.
    Location:
    See Dodo Payments' privacy policy

We also look up general search terms (such as a treatment name and language) in Google's public search suggestions and in the Pexels stock-video library. These requests contain no personal data. Our database, logins and file storage run on our own installation of the open-source Supabase software on our server; Supabase Inc. does not receive the data.

6. International transfers

We are established in Montenegro, which is outside the EU/EEA. Some providers process data in other countries, including the United States. Where the law that applies to the data requires a safeguard for such a transfer, we rely on an adequacy decision where one exists or on standard contractual clauses (for the UK, with the UK addendum) in our agreements with those providers.

7. How long we keep it

  • Account, clinic profile, uploads and videos: while your account exists. When you delete your account in Settings, we delete your files, videos, clinic profile and billing references from our live systems straight away, and your login unless you also use it for another Bulsu Labs app. Copies in server backups are overwritten as the backups roll over; within 30 days of deletion no DentVideo data about your account remains with us, except as listed below. We do not restore deleted accounts from backups.
  • Usage events: kept as anonymous statistics; deleting your account removes their link to your clinic.
  • Invoices and payment records: kept by Dodo Payments as merchant of record under its own legal obligations, and by us as far as accounting and tax law requires.
  • Rate-limit counters: minutes to hours.

8. Your rights

Depending on the law that applies to you, you can ask us for access to your data, correction, deletion, restriction, a copy in a portable format, and you can object to processing based on legitimate interests. You can delete your account yourself in Settings. Write to hello@dentvideo.com; we answer within one month.

You can also complain to a data protection authority: in Montenegro the Agency for Personal Data Protection and Free Access to Information; in the EU/EEA the authority in your country; in the UK the Information Commissioner's Office; in Türkiye the Personal Data Protection Authority (KVKK).

We apply Montenegro's law on personal data protection and, where they apply to our processing, the EU General Data Protection Regulation (GDPR), the UK GDPR and Türkiye's Law No. 6698 on the Protection of Personal Data (KVKK).

9. Security

Connections are encrypted (HTTPS). Each clinic's data is isolated in the database by access rules, files are served only through short-lived signed links, and access to the servers is limited to the people who run DentVideo. No system is perfectly secure; if a breach affects your data, we tell you without undue delay.

10. Children

DentVideo is a business service and is not meant for anyone under 18.

11. Changes

We update this policy when what we do changes, and change the date at the top. We email account holders about material changes.