This translation is a draft: a lawyer and a native speaker are reviewing it. If the translation and the Russian text differ, the Russian text applies.
Privacy Policy
1. Who processes your data
Your data is processed by the doberi service (doberi.ge, hereinafter “we”). We comply with the Law of Georgia “On Personal Data Protection”. For questions about your data, write to privacy@doberi.ge.
2. What data we collect
| Data | Source and purpose |
|---|---|
| Name, avatar, email, Telegram ID and @username, Google ID | When you sign in — to create your account and recognize you |
| Phone number | If you provide it. Hidden: shown only to signed-in users when they tap the button; every reveal is logged |
| Listings, photos, receipt photos | From the listing form. We remove metadata from photos, including geolocation. Only we can see receipt photos |
| “Looking for a place” requests | From the request form: city, districts, budget, dates and what you wrote about yourself. Shown without your name or contacts for 14 days (can be extended once); the text is checked by AI |
| Search in the Telegram bot | Telegram ID, the language you chose, city or region, the number of requests per day and the conditions of your current search: section, city, budget, filters, dates and number of people — to refine the results and subscribe you to new listings; your answer to “Do you need a work permit?” — so we don't ask again and show suitable jobs right away. We don't store the text of your messages: AI parses it and only the conditions stay in the database. Search conditions are deleted after 7 days, the work-permit answer after 90 days, the rest after 12 months without messages to the bot or together with your account |
| Posting an ad via the Telegram bot | The photos and text you send the bot for an ad, and the progress of posting: section, city, questions. Text sent before the draft is created is kept until the draft is created and for no longer than a day — after that it is the text of your draft, just like when posting on the website. Photos are saved in the ad without metadata or location tags. An unfinished posting is deleted after a day or together with your account |
| “Going” and “Interested” marks | When you mark an event in Events — to open a hidden address and send you a reminder. Visible only to you: the organizer sees only the numbers, without names. We delete them 30 days after the event date |
| Location | City and district from the listing; we shift the map pin by up to ~300 m and do not show the exact address |
| Messages and reviews | From chat and reviews — to deliver messages and resolve disputes |
| Profile verification documents | If you upload them. Reviewed by a moderator; we delete the file 30 days after the decision |
| Technical data: IP address, browser, device, sign-in logs | Collected automatically — for security and protection against fraud |
| How you use the site | Analytics without advertising: PostHog, Google Analytics and Vercel speed measurements — see cookies. It is on by default; you can turn it off in the banner on your first visit or on the cookies page. If you are signed in, PostHog events are linked to your account id — without email, name or phone number; we do not send the account id to Google Analytics |
| Site errors | The page (address without parameters), the error type and text (we remove addresses, emails and numbers from it), the browser and device: system, screen size, language, time zone; if you are signed in and analytics is on — with your account id. Information about server failures, not linked to a person, is sent even when analytics is off |
| Bug reports | If you report a bug — with the form on the site or the /bug command in the Telegram bot: what you wrote, screenshots, the page address (without parameters), language, browser and system, browser window size, site version; the account — if you are signed in or Telegram is linked; a contact — if you are a guest and leave one; from the bot — Telegram ID, name and @username. We remove metadata from screenshots. Only the site team sees them: new reports reach the admins on Telegram. Screenshots are deleted after 90 days; the text and other data are kept without a time limit — this is the history of fixes. For guests we keep a hash of the IP address for one day — for the limit of 5 reports an hour |
3. Why and on what legal basis
- Providing the service — account, listings, chat, reviews, subscriptions. Legal basis: our contract with you (terms of use).
- Security — checking listings and first messages, detecting duplicate photos, rate limits, logs. Legal basis: our legitimate interest in protecting users.
- AI assistant and translation — to fill in fields and translate listings and chat messages into the other person’s language. Legal basis: the contract.
- Telegram and email notifications — according to your settings; you can turn them off in your account. Newsletters about doberi news — only with your consent.
- Analytics — to understand what to improve. It is on by default; you can turn it off in the banner on your first visit or on the cookies page. Legal basis: our legitimate interest in improving the service.
- Legal obligations — responding to lawful requests from public authorities.
4. AI
Listing texts and photos (and the receipt photo, if you add one), the texts of “Looking for a place” requests and of events, the first messages in new conversations, messages with links, card numbers or mentions of prepayment, and requests to the Telegram bot are processed at our request by an AI model provided by Anthropic: to fill in fields, translate, check for violations, and understand what you are looking for. To translate a chat message into the other person’s language, its text is also processed by this model; translations are stored with the conversation and deleted with it, and you can turn translation off in Settings. Under Anthropic’s Commercial Terms of Service (version of 17 June 2025), this data is not used to train models. The decision on whether to publish a disputed listing is made by a human moderator.
5. Who can see your data
- Other users — your name, avatar, rating, and the listings and reviews on your profile. Your phone number — only via the button, and only if you have not hidden it. Conversations — only their participants. A moderator sees a conversation only if messages in it have been reported, and every such access is logged.
- Our contractors that process data on our behalf: Supabase (database, sign-in and chat; servers in the EU, Frankfurt), Vercel (website hosting; page speed measurements, unless analytics is turned off), Cloudflare (storage of photos of listings and events, of receipts, of documents for profile verification and of bug screenshots — private, documents are deleted 30 days after the decision, bug screenshots after 90 days; serving photos on the website — it sees the browser’s IP address; bot protection; receiving emails sent to our addresses), Anthropic (AI), PostHog (analytics and error reports, servers in the EU), Google (Google Analytics — visit statistics, unless analytics is turned off; sign-in with Google, if you choose it), Resend (email delivery), Telegram (the bot, notifications and sign-in with Telegram, if you use them; bug reports — copies of the text and screenshots reach the team on Telegram and are not deleted there automatically), OpenFreeMap and OpenStreetMap (maps: when a map is shown, they receive the browser’s IP address).
- Public authorities — only upon a lawful request.
We do not sell personal data and do not share it with advertising networks.
6. Transfers abroad
Some of our contractors store and process data outside Georgia, including in the EU and the US. They process data on our behalf and under their data processing agreements, which contain data protection obligations and rules for transfers abroad. Telegram and Google (if you sign in with Google) process data under their own policies.
7. How long we keep data
- Account, listings with photos, favourites and subscriptions — for as long as the account is active.
- A withdrawn or expired listing remains accessible via its link for 30 days, after which the page disappears from the site. The listing itself, with its photos, stays in My account until the account is deleted.
- Listing drafts that have not been changed for 30 days are deleted.
- Conversations, reviews, complaints and the log of phone number views have no separate retention period: they are kept while the account exists. After it is deleted, your messages and the reviews you wrote remain with the other people without your name, and reviews about you are deleted.
- Account deletion — immediately: profile, phone number and Telegram ID, listings with photos, documents, Telegram bot data; files that could not be deleted right away are removed during the daily clean-up. What remains, no longer linked to you: AI cost records, the history of the profile address and bug reports (we erase the Telegram ID, name and @username in them), and in PostHog analytics — events with the deleted account’s ID, without name, email or phone. Data leaves database backups as they are routinely replaced. An account blocked for violations cannot be deleted by its owner — write to privacy@doberi.ge.
- Profile verification documents — 30 days after the decision.
- Bug reports: screenshots — 90 days, a guest’s IP address hash — one day, the text and other data of the report — no time limit. Copies in the team’s Telegram are not deleted automatically.
- Importing listings from a spreadsheet (for companies): a checked file from which no drafts were created and which was not cancelled — 7 days; rows of other files — 30 days; the file name, dates and number of rows — while the account exists.
- Moderator action log — 12 months; log of AI checks of a listing — 90 days; technical marks for limits — 7 days.
- Statistics in Google Analytics — 14 months.
8. Your rights
- Find out what data we process and get a copy of it — in your account: Settings → “Download my data”.
- Correct inaccurate data.
- Delete your account and data — Settings → “Delete account”.
- Restrict processing or object to it; withdraw your consent.
- Lodge a complaint with the State Audit Office of Georgia, which supervises personal data protection, or with a court.
Send requests to privacy@doberi.ge. We respond within the time limits set by law.
9. Children
doberi is intended for people over 18. We do not knowingly collect children’s data. If you learn that a child has created an account, write to us and we will delete it.
10. How we protect data
Connections are encrypted, access to data in the database is restricted by row-level rules, and private data — phone number, email, Telegram ID — is stored separately and is not accessible to other users. We will notify the supervisory authority and you of any serious data breach within the time limits set by law.
11. Changes
If this policy changes, we will update the version date at the top and give notice of significant changes on the site or in Telegram.