Privacy Policy

1. Data controller

The data controller is P/E Iuliia Polevaia, the DeckEstate service.

2. What data we collect

• Account: name, email, hashed password, interface language.
• Profile and contacts: agency, phone, messengers, office address.
• User content: properties, photos, descriptions, collections, notes.
• Agent's client contacts: name, phone — entered by the User.
• Technical data: IP, logs, device identifiers, usage telemetry.
• Support requests.

3. Purposes and legal bases

• Account creation and operation — performance of contract.
• Billing and subscription — performance of contract (payments via Paddle).
• Security and fraud prevention — legitimate interest.
• User support — contract and legitimate interest.
• Product improvement — legitimate interest.
• Marketing emails — only with consent.

4. Who we share data with

• Paddle.com Market Limited — Merchant of Record: payments, subscriptions, taxes, refunds.
• Hosting, analytics and support providers (sub-processors).
• Professional advisors.
• Authorities — where required by law.

5. Data retention

Data is kept while the account is active. After deletion — removed or anonymised within 90 days.

6. International transfers

We use Standard Contractual Clauses (SCC) and other safeguards.

7. Your rights

Access, correction, deletion, restriction, portability, withdrawal of consent, complaint to a supervisory authority. Response within 30 days. Requests: privacy@deckestate.ge.

8. Security

TLS, encryption at rest, RLS, logging, daily backups. See Security Policy.

9. Cookies

We use only essential cookies for authentication. Analytics — only with consent.

10. Contact

Data processing questions: privacy@deckestate.ge.