Last updated: Jun 2026

1. Who We Are

Email: [email protected]

2. Categories of Personal Data We Collect

2.1. When You Use Our Website

• Your IP address;
• Browser type and version;
• Pages visited on the website;
• Time spent on the website;
• Information collected through cookies and similar tracking technologies.

2.2. When You Contact Us Directly

• Full name;
• Email address;
• Company name;
• Telephone number (if provided);
• The content of your message and any additional information you choose to include in your communication.

2.3. When Using the Helpdesk Portal

• User authentication credentials, including email address and password. Authentication credentials are stored using appropriate technical and organizational security measures designed to protect them from unauthorized access, disclosure, alteration, or loss;
• The content of support tickets submitted through the Helpdesk portal and any files or documents attached thereto;
• The complete history of communications and correspondence between the user and the Company relating to support requests, service issues, and other customer support activities.

2.4. In the Context of a Contractual Relationship with a Client

• Billing and payment information;
• Company registration, legal, and identification information;
• Information relating to contracts, service agreements, and the provision of services;
• Information required for tax, accounting, and financial record-keeping purposes.

3. Purposes of Personal Data Processing

Personal data is processed only for specific, clearly defined, and legitimate purposes, including:

• Responding to users’ requests, inquiries, and submissions;
• Providing and delivering the requested services;
• Managing user accounts and support tickets;
• Ensuring communication related to contractual relationships and the provision of services;
• Improving the quality, functionality, and performance of our website, software systems, and services.
• To comply with legal, regulatory, and other obligations arising under applicable laws.

4. Legal Bases for Processing Personal Data

Personal data is processed based on the following legal grounds:

4.1. Performance of a Contract

The processing of personal data is necessary for the performance of a contract entered into with the user, or for taking steps at the user’s request prior to entering into a contractual relationship.

4.2. Legitimate Interests

Personal data may be processed based on the Company’s legitimate interests, including:

• Ensuring the security and reliability of information systems;
• Improving the quality and functionality of services;
• Efficient management of business processes;
• Managing inquiries, claims, and disputes.

4.3. Legal Obligation

The processing of personal data may be necessary to comply with applicable legal obligations, including Georgian tax, accounting, labor, and other regulatory requirements.

4.4. Consent

In cases where applicable legislation requires the consent of the data subject, personal data will be processed only after obtaining the relevant consent.

This may include, for example, marketing communications or the use of non-essential analytical cookies.

5. Disclosure and Transfer of Personal Data to Third Parties

The Company does not sell, rent, or disclose personal data to third parties for their direct marketing purposes.

Personal data may be shared with the following categories of recipients:

• Odoo S.A. — for the purpose of managing user accounts, ERP systems, and customer support processes;
• Google LLC — for website analytics purposes (Google Analytics) and business workspace tools, including Gmail and Google Drive;
• Meta Platforms, Inc. — where interactions with social media platforms or advertising tools are used. Data processed through such platforms is subject to Meta’s own privacy policy;
• Hosting providers and infrastructure service providers;
• Government authorities and regulatory bodies where disclosure is required by applicable law.

Third parties process personal data only in accordance with applicable contractual obligations, confidentiality requirements, and appropriate data protection measures.

6. How Long We Keep Your Data

7. Cookies

Our website uses cookies, which are small text files stored on the user’s device.

We use the following categories of cookies:

• Strictly Necessary Cookies — used to ensure the proper functioning, security, and essential features of the website;
• Analytics Cookies — used to analyze visitor behavior, monitor website performance, and improve the quality of our website and services;
• Social Media Cookies — used where social media integrations or related functionalities are implemented.

You can manage or disable cookies through your browser settings. Disabling analytics cookies will not affect your ability to access or use the website.

8. Meta/Facebook

When using SoftArt Ltd.’s Facebook page or other services provided by Meta, personal data processing may be carried out by Meta Platforms, Inc. in accordance with its own independent privacy policy.

Where Meta Pixel or similar technologies are used in connection with Facebook advertising campaigns, Meta Platforms, Inc. may process information related to users’ interactions with our website. Such information may be used for the purposes of measuring advertising effectiveness, creating and managing audiences, and delivering more relevant advertisements to users.

Such processing is carried out in accordance with Meta’s platform terms, Meta’s privacy policy, and applicable data protection legislation. Where required by law, such processing will only be conducted based on the user’s prior consent.

9. Data Subject Rights

In accordance with applicable Georgian legislation, you have the right to:

• Obtain information about the processing of your personal data;
• Request access to your personal data;
• Request the correction of inaccurate or incomplete personal data;
• Request the deletion of your personal data in cases provided for by law;
• Request the restriction of personal data processing;
• Object to the processing of your personal data;
• Withdraw your consent at any time where processing is based on consent;
• Receive your personal data in a structured, commonly used, and machine-readable format (Data Portability).

To exercise your rights, please contact us at: [email protected]

The Company will review your request and provide a response no later than 30 calendar days from the date of receipt of the request.

10. Data Security

The Company implements appropriate technical and organizational measures to protect personal data against unauthorized access, alteration, loss, destruction, or disclosure.

Security measures include:

• Encrypted communications (HTTPS/TLS);
• Access control mechanisms;
• Backup and data recovery procedures;
• Regular security monitoring and assessments.

Despite these measures, the Company cannot guarantee the absolute security of data transmission over the Internet.

11. Personal Data Security Incidents

In the event of a personal data security incident, the Company will act in accordance with applicable legislation and, where required, will notify the relevant individuals and competent authorities.

12. Changes to the Privacy Policy

The Company reserves the right to update this Privacy Policy from time to time.

Any updated version of the Privacy Policy will be published on the website, with the relevant update date indicated. In the event of significant changes, active clients will be notified via email.