Privacy Policy

This Privacy Policy describes how we collect, store, use and disclose information we receive from users when they use the website and services of TAUS Core (the "Platform"). Personal data is processed in accordance with the legislation of Georgia, including the Law of Georgia on Personal Data Protection.

The data controller is LLC “TAUS CORE” (შპს „ტაუს კორ“, ID 400465297), Tbilisi, Georgia. For any questions regarding the processing of your data, contact: info@taus.ge.

We collect several types of information to provide and improve our services. Fields marked as required at registration and publication are necessary for the service to work — without them an account cannot be created or a listing published:

The information collected is used for:

• Providing access to TAUS services (Market, My Park).
• Connecting sellers and buyers.
• Providing paid listing-promotion services.
• Sending news, offers and service updates (by email and/or SMS) — only with your consent.
• Account security and fraud prevention.
• Improving the Platform and developing new features.

We process each category of data on a legal basis provided by law:

• Account, profile and internal chat — performance of the contract with you (the Terms of Use).
• Listings (specifications, VIN, photos, contact number) — performance of the contract; by publishing a listing you make its content available to Platform visitors, while the contact number is revealed to signed-in users only.
• Location — your consent (permission in the browser or on the device).
• Wallet and payments — performance of the contract and compliance with legal obligations (accounting and tax records).
• Security, sign-in logs and fraud prevention — our legitimate interest in protecting the Platform and its users.
• Marketing communications — only your separate consent (see "Newsletters and marketing").
• The consent journal (records of accepting the terms, the policy and subscriptions, with date and document version) — compliance with a legal obligation: the law places the burden of proving consent on us.

We do not sell or rent your personal data. We may share data only in the following cases:

The Platform's core servers and database are located in the European Union (Supabase — Frankfurt, Germany; Vercel server functions — Frankfurt, Germany): the EU's level of personal data protection is recognised as adequate by the legislation of Georgia. Certain technical providers process data outside the EU and Georgia (Resend, Google and Cloudflare — USA): data is transferred to them only to the extent necessary to run the service, under data processing agreements (DPA) and appropriate safeguards. Payments are processed by Bank of Georgia (Georgia), SMS verification by GoSMS (Georgia).

We take appropriate organizational and technical measures to protect your personal information from unlawful or accidental access, destruction, alteration, blocking, copying or distribution. To prevent automated abuse (spam, brute-force attempts), we apply request rate-limiting. Sign-in events (including IP address) are logged for security.

We keep your data while your account is active. When you delete your account, a 30-day recovery period applies. After final deletion: your username and email address are released; your avatar, profile cover and personal documents are deleted; payment records and wallet transaction history are kept for up to 6 years (accounting requirements and payment dispute resolution); the log of your consents to Platform documents is kept as proof of consent; chat messages remain with the other participant and in the system for up to 3 years from account deletion (dispute resolution and safety) and are then deleted or anonymised; published listings and their photos may be kept in anonymised form (vehicle history). A service archive record of the deleted account (identifier, username, contact details, deletion date) is kept for the periods above and is accessible to Platform administration only. Data we are legally required to retain (e.g. for tax or judicial purposes) is kept for the periods established by law.

We use cookies and local storage for session management (logging in), listing view counts and security. This data is not shared with third parties except technical providers necessary to run the site. Disabling cookies may limit some platform features.

We also use error monitoring tools (e.g. Sentry) to identify technical issues and improve application stability; this may involve processing device and runtime data to the extent necessary for diagnostics.

News and promotional messages (email, SMS) are sent only with your separate consent. You can unsubscribe at any time via the link in the email or SMS, or by writing to info@taus.ge — unsubscribing is free, and the use of your contact details for marketing stops promptly, no later than 7 business days after your request. Without consent we do not use your contact details for marketing. Service (transactional) messages — purchase confirmations, verification codes, notifications about messages and bookings — are not marketing and are sent regardless of your subscription.

The Platform is intended for users aged 18 and over. By registering, you confirm that you are at least 18 years old. If we become aware of an account belonging to a user under 18, the account will be blocked and the associated personal data deleted.

You can update your personal data at any time in the Profile section.

To delete your account, use the deletion option in your profile settings or send a request to info@taus.ge. We process deletion and correction requests within 15 business days (usually faster); a 30-day recovery period applies after deletion. Please note: some data is retained after deletion under legal obligations or legitimate interest — payment records, the consent log, chat messages and anonymised listings; the categories and periods are listed in the “Data retention” section.

Under the legislation of Georgia you have the right to access your data, to its rectification, erasure, restriction of processing, data portability and objection to processing, and to lodge a complaint with the personal data protection supervisory authority — the State Audit Office of Georgia (pdp.sao.ge). We respond to requests concerning your rights within 10 business days.

This Policy is provided in Georgian, Russian and English. In case of discrepancy between versions, the Georgian version shall prevail.