Privacy Policy
In force since 2026-08-18.
Who is responsible
FinTech Caucasus decides what this platform processes and why, and is the controller of the data described below. Reach us on WhatsApp at +995 551 796910.
Registry data about companies and people
The corpus is built from sources that are already public: the company register, sanctions and watchlists, and the asset declarations senior officials are required to file. Nothing is bought from a data broker, and nothing is inferred about a person beyond what those sources state. It is processed so that a regulated institution can perform the customer due diligence its own law requires of it.
A person appears here because a public register names them — as an owner, a director, a declarant or a listed party. Politically-exposed status and foreign-influence registration are filing facts, not accusations, and the platform prints them as such.
What is stored about you as a user
Your username, your role, and a hash of your password — never the password itself. A session cookie while you are signed in, and a cookie holding your language choice. Your light or dark preference never leaves your browser.
The audit ledger
Every query is written to an append-only ledger: who asked, what they asked for, when, what the answer was, and the address the request came from. Each entry is hash-chained to the one before it, so an entry cannot be altered or removed without breaking the chain. That record is the point of the product — it is what proves to a supervisor that a check was performed — and it is deliberately not editable, including by us.
No tracking of any kind
No analytics, no advertising, no third-party scripts, no external fonts, no session recording. Every page loads only from this server, so no other company learns that you visited or what you looked at.
Server logs
The web server in front of the platform records the address a request came from, the page asked for and the time, which is what makes an attack or a fault diagnosable. Those logs rotate daily and are kept for about two weeks.
Where it is held, and who else sees it
Data is held on a single rented server inside the European Union and is not copied anywhere else. Nothing is sold, and nothing is shared with advertisers, analytics companies or data brokers. The hosting provider processes it only as infrastructure. Data is disclosed to an authority only where a Georgian court or a law binding on us requires it.
How long it is kept
The registry corpus is rebuilt from its sources and replaced with each run, so it holds what the sources publish today. Account records are kept while the account exists. Ledger entries are kept as evidence of the checks performed, for as long as the institution that performed them is required to be able to produce them.
Your rights
Under the Law of Georgia on Personal Data Protection you may ask what is held about you, ask for it to be corrected, ask for it to be deleted or blocked, and withdraw a consent you gave. Write to the contact above and we answer within the statutory period. Two limits are stated up front: a registry entry is corrected by the registry that issued it, not here, and a ledger entry recording a check that was performed is retained where the law requires that record to exist.
If you are not satisfied with our answer, the Personal Data Protection Service of Georgia supervises us and will hear your complaint.
How it is protected
The connection is encrypted, credentials are stored hashed, and what an account can reach is decided by its role rather than by the interface hiding a button. The ledger is sealed with a key held on the server, which is what makes tampering with it detectable rather than merely discouraged.
Changes to this notice
This notice carries the date it took effect. If what we do with data changes, this page changes with it and is redated.