Privacy Policy

Operator details

Operator / Data controller

Individual entrepreneur Andrei Zaitsev

Identification number (ID)

305864758

Business activity

Software

Registered address

Georgia, Tbilisi, Saburtalo district, Bakhtrioni St. No. 22

Applicable law

Georgian Law on Personal Data Protection No. 2843-IIS

Effective date

22 August 2026

1. General provisions and data controller

This Privacy Policy (the “Policy”) sets out how Neighbor Paw (also known as Petsy, the “Platform”), available via website and/or mobile app, processes personal data of users.

Under the Georgian Law on Personal Data Protection, the controller responsible for processing personal data is Individual Entrepreneur Andrei Zaitsev (ID: 305864758; registered address: Georgia, Tbilisi, Saburtalo district, Bakhtrioni St. No. 22; activity: Software) (the “Operator” or “Neighbor Paw”).

This Policy applies to all Platform users: pet owners (customers), sitters (independent contractors), and unregistered website visitors.

2. Legal bases for processing

Neighbor Paw processes personal data only where a legal basis under Georgian personal data protection law applies, namely:

• Performance of a contract: the account, bookings, chat, and settlements. This is the basis for most processing — it is not consent-based, so it cannot be withdrawn while the account exists;
• Data subject consent: separately requested for things that are genuinely optional, such as marketing messages or publishing a profile photo. Consent can be withdrawn at any time without affecting the service;
• Legitimate interests of the Operator: platform security, fraud prevention, moderation, dispute handling, and service quality control;
• Legal obligations: compliance with Georgian tax, accounting, and other applicable law.

Special categories of data: the Platform does not ask for data on health, ethnic origin, religious or political views, or sexual life, and such data must not be uploaded to chat or profiles. Identity and residence documents submitted for verification are processed on the basis of written consent given in the verification flow, and only to check the sitter’s eligibility.

3. Categories of data and purposes

The Platform collects and processes the following personal data categories strictly for the stated purposes:

4. Access limits and contact confidentiality

• Personal contact details (phone, exact home address, personal messenger/social links) are not published publicly.
• Exact address and contact details are shared with the other party only after booking confirmation and payment through the Platform.
• The public catalogue shows only the sitter’s district or an approximate offset map pin.

5. Sitter verification

To improve safety, Neighbor Paw verifies sitters as follows:

• Sitters who claim veterinary education must upload a diploma scan or equivalent document.
• Foreign nationals must provide documents proving lawful residence and activity in Georgia (IE registration or a work permit).
• All verification documents are manually reviewed by Platform security (no automatic approval).
• Uploading documents is not a state licence and is used only for the Platform’s internal trust assessment.

6. Retention periods

Neighbor Paw retains personal data only as long as needed for the purposes in this Policy:

• Active account data: for the period of Platform use until account deletion.
• Verification documents: while the sitter account is active. If verification is refused, documents are deleted or anonymised within 30 calendar days.
• Chat history and dispute materials: for 3 years after an incident is closed, to defend against legal claims.
• Financial and accounting data: for 6 years, as required by Georgian accounting and tax legislation.

7. Third-party sharing and cross-border transfers

Neighbor Paw does not sell or share personal data with third parties for marketing. Sharing is allowed only:

• Payment provider (Flitt / acquiring bank): to process payments, commission, and sitter payouts;
• Partner insurers: when an insured event occurs (e.g. property damage or pet injury) to handle claims;
• Georgian public authorities: upon a lawful official request from law-enforcement or courts;
• Service providers acting on the Operator’s instructions: cloud hosting, email delivery, error monitoring, and customer support tooling, bound by written processing terms.

Cross-border transfers: the Platform uses cloud infrastructure that may be located outside Georgia. Such transfers are made only to a country with appropriate data protection, or on another ground provided by the Law on Personal Data Protection and with the safeguards it requires. A user may ask the Operator which providers are used and where the data is stored.

8. Security incidents

The Operator records data security incidents together with their consequences and the measures taken, and notifies Georgia’s Personal Data Protection Service no later than 72 hours after identifying an incident, as the Law on Personal Data Protection requires.

If an incident is likely to cause significant harm or a significant threat to fundamental rights, affected users are informed directly, in plain language, without undue delay.

9. Automated processing

Search ranking and profile visibility are calculated automatically from booking history, including completed bookings, cancellations, and no-shows. Reviews and moderation flags feed into the same calculation.

No decision to refuse verification, restrict, or close an account is taken by automated means alone. A sitter is told the reason, may object through support, and the objection is reviewed by a person.

10. Cookies and analytics

At the time of this Policy, the Platform uses only strictly necessary (functional) cookies required to store UI language choice (English, Georgian, Russian) and the user auth session.

Marketing and advertising cookies are not used. If third-party analytics or ad widgets are introduced, the Platform will add an appropriate banner and obtain prior user consent.

11. Data subject rights

Under Georgian personal data protection law, a user may:

• Receive information about whether, on what basis, and for what purposes their data are processed;
• Request access to their personal data and obtain copies;
• Request correction, update, blocking, or destruction of incomplete, inaccurate, or unlawfully processed data;
• Withdraw consent at any time (where processing is based on consent);
• Receive a copy of the data provided to the Operator in a structured, commonly used format, and ask for it to be transferred where technically feasible;
• Lodge a complaint with Georgia’s Personal Data Protection Service or in court.

Requests are answered within the time limits set by the Law on Personal Data Protection — as a rule within 10 working days, which may be extended once with notice to the user.

12. Account deletion and data withdrawal

A user may request deletion of their account and related personal data at any time in account settings or by written email to the Operator.

Upon request, the Operator deletes user data except information that must be retained under Georgian law (tax records, unfinished financial disputes).

13. Contacts and data protection

For questions about personal data processing, rights, or account deletion, contact the Operator:

• Operator: IE Andrei Zaitsev (ID: 305864758)
• Address: Georgia, Tbilisi, Saburtalo district, Bakhtrioni St. No. 22
• E-mail: privacy@neighborpaw.com (support@neighborpaw.com)
• Supervisory authority: Personal Data Protection Service of Georgia — www.pdps.ge