Privacy Policy

1. Who is responsible for your data

The service provider and data controller is IE Ivane Kutateladze (identification code 01019013820), Georgia.

Email: kutateladze.ivane@gmail.com
Legal address: 57, Revaz Uridia Street, Tbilisi 0180, Georgia
Phone: +995 557 876 969.

2. Data we process

• Account data, including email, authentication identifier and preferences.
• Property, room, rate and team-member details.
• Booking and guest information entered by the customer, including names, contact details, dates, messages and notes.
• Operational and financial information such as expenses, invoice details, revenue and tax-calculation inputs.
• Channel-connection information, including calendar/iCal links supplied by the customer.
• If the customer connects Telegram: connection identifiers and notification preferences.
• Limited product-usage events, such as event type and interface language.

3. Why we use data

We use data to create and secure accounts, manage properties, rooms and bookings, synchronize calendars, send requested notifications, prepare operational reports, provide support, improve the service and meet legal obligations.

4. Legal grounds

Depending on the activity, processing is based on providing the service and performing the customer agreement, consent where required, legitimate interests such as service security and fraud prevention, and compliance with legal obligations.

5. Who may receive data

Data may be processed by providers and integrations needed to operate the service: Supabase for authentication and data infrastructure; Telegram only if the customer chooses to connect it and enable notifications; and relevant booking platforms when the customer uses calendar/iCal connections. If online bank-card payments are enabled, the relevant payment provider will process payment details under terms disclosed before payment. We do not sell personal data.

6. Retention and security

We retain data for as long as needed to provide the service, manage the account, resolve disputes and meet applicable legal retention requirements. We use access controls and other reasonable technical and organizational safeguards. No internet transmission or storage method is completely risk-free, so absolute security cannot be guaranteed.

7. Your rights

Subject to applicable law, you may request access to, correction or deletion of your personal data, restriction or objection to processing, and data portability where available. Contact us at the email address above. We may need to verify your identity.

8. Guest information

If you enter guest information into Stumari, you are responsible for having a lawful basis to collect and use it and for providing guests with notices required by law. Please enter only information necessary for your business operations.

9. Browser storage and technical data

The application stores authentication session information in your browser local storage to keep you signed in and may store interface preferences. Public-site usage measurement is limited to product event names and interface-language codes.

10. Changes

We may update this policy when the service or applicable law changes. The latest version will be published on this page with an updated date.