SIVRCE Privacy Policy
Version 2.0 of 27 September 2026
In short
- We collect what a renovation needs: contacts, property details, photos, documents, receipts, messages.
- We do not sell your data. Ever.
- Data is stored in the EU (Frankfurt). Some services are in the USA (sign-in, SMS, AI and others) — the list is below.
- A client's contacts are seen only by the contractor the client chose or who accepted the request.
- PostHog analytics on the site switches on only if you pressed “Accept”.
- You can ask for a copy, a correction or deletion — we reply within 10 working days.
1. Who processes the data
Controller: LLC Marstone Group, identification code 405819315, address: 7 Otar Taktakishvili St., Vake, Tbilisi. Questions about data: hello@sivrcespace.ge.
This policy is based on the Law of Georgia on Personal Data Protection.
2. What data we collect
- Account: name, email, phone (via Clerk).
- A client's property: type, area, city and district, address, budget, photos, documents, contact name and phone for the request.
- A contractor's profile: name or company, phone, WhatsApp, cities, specialisations, tax ID, verification documents, photos of work.
- A shop: name, contact person, phone, email, prices, documents.
- Money: receipt photos, amounts, payment records, dispute text.
- The site journal and messages, support conversations.
- A contractor's proposal (by link): when it is opened, only the date of the first opening is recorded — nothing else.
- Notification settings, Telegram chat number, push subscription, Google Calendar key (encrypted) — if you turned them on.
- Technical: server logs (Vercel), error log (user ID and page address, without the request contents), analytics — only with consent.
3. Why, and on what legal ground
| Purpose | Legal ground |
|---|---|
| Account, estimate, project, sending the request to contractors, notifications about your project | Performing a contract, or entering into one at your request |
| AI reading of receipts and the journal, room visualisation | Contract — a feature you turned on yourself |
| Contractor review, fraud prevention, security, the error log | Legitimate interest |
| Invoices for SIVRCE plans and fees, accounting | Legal obligation |
| Site analytics (PostHog) | Consent — through the cookie banner |
We do not send marketing messages. If we start, it will be only with your consent and with an easy way to unsubscribe.
Requests are distributed among contractors by rules (specialisation, city, review, no overdue debt) — without AI. We make no automated decisions with legal effects for you.
4. Who sees your data inside SIVRCE
- A project — its participants: you, the chosen contractor and their crew, the chosen architect or designer.
- Before accepting a request, a contractor sees the first word of the name and the district. Phone and address open after the choice or acceptance.
- A contractor's and a shop's public profile (name, city, specialisations, reviews, work) is visible to everyone. Tax ID and WhatsApp are not public.
- SIVRCE administrators — for support, review and disputes.
We do not sell your data — not to contractors, not to banks, not to advertisers.
5. Who we share it with and where it is stored
These companies process data on our instructions and only for the stated purpose:
| Service | What for and which data | Where |
|---|---|---|
| Supabase | Database and files (photos, documents, receipts) | EU (Frankfurt) |
| Vercel | Hosting of the site and API, server logs (IP, page address, time) | functions — EU (Frankfurt); company — USA |
| Clerk | Sign-in: name, email, phone, sessions | USA |
| Cloudflare (Turnstile) | Bot protection at sign-in and sign-up: IP and browser data | USA |
| Resend | Email notifications: address and notification text | USA |
| Twilio | SMS: phone and text | USA |
| Meta (WhatsApp Business) | WhatsApp messages; price-list photos sent by shops | USA / EU |
| Telegram | If you linked it: chat number and notification text. Also the name, email and text from the contact form — to the support team chat | outside Georgia |
| Anthropic (Claude) | Reading receipts, documents, price-list photos and journal notes (with photos) | USA |
| Google (Gemini) | Room photo for the visualisation | USA |
| Google Calendar | Only if you connected it: stage dates and names | USA |
| PostHog | Analytics on sivrcespace.ge — only with your consent: which pages were opened. The screen, clicks and what you type into fields are not recorded | EU (Frankfurt) |
| Browser push services | Only if you enabled them: push notification text | the browser maker's country |
The USA and some other countries are not on the list of countries recognised in Georgia as having adequate data-protection safeguards. Transfers there are made on the basis of contracts with these companies that oblige them to protect the data.
We disclose data to public authorities only where the law requires it.
6. Artificial intelligence
- Anthropic Claude reads: a receipt or document you upload; a journal note and its photos (up to three) — only at the author's request; a shop's price-list photo.
- Google Gemini receives a room photo when you press a style button and returns a picture. The photo and the result are stored in the project.
- The model's answer is only a draft: a record becomes a fact after a person confirms it, and notifications carry our text, not the model's words.
7. How long we keep data
- Account and profile — while the account exists. On deletion — see section 9.
- An unsent estimate with no account — deleted automatically after 30 days without activity.
- Projects, payments, documents, files — while the project exists; the other side needs them too. There is no automatic period yet — you can ask for deletion.
- Invoices for SIVRCE services — for the period set by tax law.
- The error log — while needed to fix the error; it holds only the user ID and page address.
- Analytics (PostHog) — for the period set in PostHog's settings.
8. How to delete your account
Homeowners and shops: account menu → manage account → delete. Contractors, architects, designers: write to hello@sivrcespace.ge.
9. What happens on deletion
- Deleted: profile, notifications, Telegram and calendar links, push subscription, invitations.
- Contacts erased: name and phone in projects, requests and contractors' CRM; email and name in support conversations; a contractor's WhatsApp and tax ID; a shop's contact details.
- A contractor's profile leaves the catalogue.
- Kept, without your name and contacts: projects, payments, disputes, shop prices — the other side needs them.
- Photos and documents stay in the project. If you want them deleted, write to us — we will delete them unless the other side needs them for a dispute.
10. Your rights
- to get information about your data and a copy of it;
- to correct inaccurate data (much of it yourself, in your profile);
- to ask for deletion or blocking;
- to get your data in a structured format or have it sent to another controller;
- to withdraw consent (for example, to analytics — on the cookie page); this does not affect processing already done;
- to complain to the Personal Data Protection Service or to a court.
Send requests to hello@sivrcespace.ge. We reply within 10 working days. We may ask you to confirm that the account is yours.
11. Security and incidents
Connections are encrypted. Contracts, drawings and receipts are private and open through a temporary link. Property photos and visualisations sit behind a long random link — anyone with the link can see the photo. The calendar key is stored encrypted.
We report a data-security incident to the Personal Data Protection Service within the period set by law, and to you without delay if there is a serious risk of harm to you.
12. Children, cookies, changes
The service is for people aged 18 and over. Cookies are described on a separate page. We will tell you about material changes 14 days in advance.
Questions about this document
Platform operator: LLC Marstone Group · ID code 405819315 · 7 Otar Taktakishvili St., Vake, Tbilisi · full details in the registry