Privacy Notice
This notice explains what KavBuild processes, why, who receives it and how to exercise your rights.
- 01
- Controller: The controller and official privacy contact must be completed before commercial launch.
- 02
- Version 2026-08-04-v1 · 2026-08-17
The controller and official privacy contact must be completed before commercial launch.
1. Data collected
KavBuild processes account and company data, contact details, roles, verification documents, requests, private offers, contracts, payment amounts and statuses, messages, content, media, project progress, reports, preferences and support exchanges.
2. Technical data
Login, action, security and error logs are processed to protect accounts, limit abuse and diagnose incidents. Legal acceptance evidence stores a cryptographic hash rather than a raw IP address or user agent.
3. Purposes and grounds
Data is used to perform the platform contract, authenticate users, publish and route content, deliver requested features, secure the service, prevent fraud, comply with law, handle disputes and, where applicable, pursue legitimate security and improvement interests.
4. Visibility and recipients
Published profiles and content are visible according to service settings. Offers remain limited to the relevant supplier and authorised buyer. Supabase provides authentication, database, storage and realtime; Vercel hosts the app; BOG or TBC processes payments when enabled. Authorities receive data only where a legal basis requires it.
5. Transfers and security
Technical providers may process data outside Georgia according to their infrastructure and contractual safeguards. KavBuild uses access control, RLS, encryption in transit, file validation, rate limiting, logging and secret separation. No system can provide absolute security.
6. Retention
Active data is retained for the account lifetime. Deleted content, backups, contract evidence, transactions, reports and logs may be kept as needed for security, disputes, limitation periods and accounting or legal duties, then deleted or anonymised.
7. Your rights
Subject to legal conditions, you may request information, access, a copy, correction, updating, deletion, restriction or objection and withdraw consent without affecting prior processing. Identity verification may be required before a response.
8. Children and sensitive data
KavBuild is a professional service not directed to children. Users should not upload unnecessary sensitive data or personal documents. Site documents should be redacted of information unrelated to the transaction.
9. Incidents and contact
Send incidents and rights requests to the privacy contact above. KavBuild documents incidents and informs individuals or authorities where required by law. Complaints may also be submitted to the competent Georgian authority.
