1. Who controls your data
Individual Entrepreneur ARSVOIM is the controller of personal data processed for operation of the platform. The operator details and contact information are shown above.
2. Data we collect
- Account and identity data: name, email, verified email status, phone, city, country, profile photo, preferred language and authentication identifiers.
- Publication and interaction data: listing text, categories, prices, locations, photos, documents, responses, questions, messages, reviews, complaints, moderation history and transaction outcome status.
- AI input and output: text, voice-to-text content, files and metadata you submit for drafting, classification, matching or moderation, together with generated drafts and recommendations.
- Payment and balance data: package, order amount, currency, payment status, publication and promotion balance, use history and payment-provider reference. Arsvoim does not intend to store full payment-card details.
- Technical and security data: IP address, browser/device information, session identifiers, login and security events, timestamps, error logs and anti-abuse records.
- Third-party sign-in data: verified email, name, provider identifier and profile information supplied by Google when you choose those sign-in methods.
3. Where data comes from
We receive data directly from you, from your use of the platform, from other users who interact with your publications, from authentication and payment providers, and from security or moderation tools. Do not upload another person’s personal data unless you have a lawful reason and permission to do so.
4. Why and on what basis we process data
- To create and manage accounts, publications, responses, balances and support requests.
- To perform the service requested by you and administer our contract with you.
- To verify accounts, prevent fraud, secure the platform and enforce the Terms.
- To provide AI-assisted drafting, classification, matching and moderation.
- To process payments, refunds, accounting records and legal obligations.
- To send transactional emails and important service notices.
- To improve usability and reliability based on legitimate interests, while respecting your rights.
- To send marketing only where consent or another lawful basis is available and opt-out is provided.
Depending on the activity, the legal basis may be performance of a contract or steps requested before a contract, compliance with law, legitimate interests, protection of rights and security, or your consent.
5. AI-assisted processing
Arsvoim may use AI service providers, including OpenAI when enabled, to turn your instructions into a draft, identify a likely category, improve wording, suggest matches or flag possible policy violations. AI output can be inaccurate. You must review a draft before publication. Automated indicators may support moderation and matching, but you may contact us to request human review of a disputed decision.
Avoid submitting secrets, unnecessary identification documents, medical information or other sensitive data to AI tools.
6. Public and private information
Publication titles, descriptions, price, category, city, public images, rating and selected account information may be visible publicly. Contact details and documents marked private are intended to remain restricted to authorised users, managers or connected parties. No online system can guarantee absolute confidentiality; upload only what is necessary.
7. Who may receive data
Data may be shared only as needed with hosting and infrastructure providers, email providers, AI providers, Google authentication services, Bank of Georgia or another payment provider, professional advisers, contractors supporting moderation or customer service, and public authorities where legally required. Other users receive only information required by the platform flow and your settings.
We do not sell personal data.
8. International transfers
Some service providers may process data outside Georgia. Where required, we use appropriate contractual, organisational and technical safeguards and assess the lawful basis for the transfer.
9. Retention
We keep data only as long as reasonably necessary for the purposes described above. Account and publication data may remain while the account is active and for a reasonable period after closure for disputes, fraud prevention and legal claims. Payment and accounting records are retained for statutory periods. Security logs and rate-limit records are retained for limited operational periods. Data may be preserved longer where required by law, a legal hold or an active dispute.
Facebook sign-in and Facebook catalog imports have been permanently discontinued. Previously created Facebook account links and import records may remain subject to the retention rules and your deletion rights.
10. Security
We use access controls, password hashing, secure session cookies, rate limiting, restricted document access, logging, backups and other technical and organisational measures. You are responsible for keeping your password confidential and notifying us of suspected unauthorised access.
11. Your rights
Subject to applicable law, you may request information and access, a copy of your data, correction or updating, deletion or destruction, blocking or restriction, withdrawal of consent, objection, data portability where applicable, and information about significant automated processing. We may need to verify your identity and may retain information where another lawful ground requires it.
Send requests to hi@arsvoim.com. You may also complain to the competent supervisory authority, including the State Audit Office of Georgia.
12. Children
Arsvoim is intended for persons aged 18 or older. We do not knowingly create accounts for children. If we learn that a child’s data was submitted, we may remove it and close the account.
13. Cookies and local storage
We use essential session technology and preference storage. Details are in the Cookie Policy.
Optional visitor analytics runs only after you allow it in Cookie settings. The arsvoim_analytics_choice cookie stores your choice for 180 days. When allowed, arsvoim_vid stores a random identifier for up to 180 days; the server stores its hash, page path without query parameters, time, referring website hostname and traffic source. Full IP addresses, full referrer URLs and contact details are not stored in this analytics system. Detailed events expire after 90 days; inactive browser identifiers expire after 180 days. Daily totals contain no browser identifiers and are retained. Refusal or withdrawal stops future collection and removes the visitor cookie. You can change your choice using Cookie settings on the site. Browser Do Not Track and Global Privacy Control signals disable this analytics.
In the current Arsvoim iOS app, optional website visitor analytics and advertising cookies are disabled. Essential cookies for sign-in, security and preferences remain. Arsvoim does not use app data for tracking across other companies’ apps or websites for targeted advertising, or share it with data brokers. The website’s optional analytics choice described above applies to browsing the website outside the iOS app.
14. Changes and contact
We may update this Policy as the platform or law changes. Material changes will be indicated by the updated date and, where appropriate, an in-platform notice. Questions and requests may be sent to hi@arsvoim.com or the contact details above.
15. The iOS app, Apple services and technical data
If you choose Sign in with Apple, we receive an app-specific account identifier and the name and email that Apple provides with your consent; the email may be a private relay address. We use these to sign you in and link your Arsvoim account. Digital packages in the iOS app use Apple In-App Purchase. Apple handles the payment details; Arsvoim receives signed purchase information, including product and transaction identifiers, purchase status and an account-linked token, to credit packages, handle refunds and prevent duplicate grants. Arsvoim does not receive your full card details from Apple.
If you allow notifications, we associate an Apple Push Notification service (APNs) device token with your account to deliver notifications. You can disable notifications in iOS Settings. This token is used to route notifications, not for advertising tracking.
Google sign-in is optional. Google’s iOS sign-in component declares account and device identifiers, approximate location, and other technical and usage data for functionality and analytics, in addition to account contact information. Its privacy declaration marks these data as linked to the user and not used for tracking. This provider processing is distinct from Arsvoim’s optional website visitor analytics.
Arsvoim also retains functional records such as saved publications, support requests and reports, plus technical and security error records needed to operate and protect the service. The current release does not collect new publication-statistics events; previously recorded figures may remain visible. Turning off optional visitor analytics does not delete records needed for these functions. The retention, deletion and contact provisions of this policy apply.