L O C A T E

This Privacy Policy explains how the Locate platform (locate.ge) collects, uses, shares, and protects your personal information.

We take data protection seriously and comply with the Law of Georgia on Personal Data Protection and the GDPR where it applies.

Data controller:
Yevhen Sokolenko
Registration number: 145950110
Tax ID: 145950110
Address: Georgia, Batumi, 129 Bagrationi St, 6004
Email: support@locate.ge

2.1. Information you provide:

• Registration: first name, last name, email address, phone number, and password
• Professional profile: specialty, experience, portfolio, and photographs
• Platform use: reviews, messages, and order or booking history
• Dental clinics: complaints, diagnoses, treatment plans, dental charts, images, documents, patient consents, appointments, and treatment payments
• Payment information: transaction details; Locate does not store full bank card details

Medical records are entered and maintained by the clinic through its authorized staff. Locate provides the technical storage, display, and access controls for this information, but does not interpret it to diagnose a condition or provide individual treatment recommendations. The clinic is responsible for the content of medical records and the legal basis for entering them.

2.2. Information collected automatically:

• Technical data: IP address, browser type, and operating system
• Usage data: pages visited and time spent on the platform
• Location: approximate location, such as city
• Cookies: session identifiers and user preferences

2.3. Information from third parties:

• Google: email address, name, and profile picture when you sign in with Google, plus address or place data when Google Maps or Google Places is used
• Payment providers: payment and transaction status information

We use collected information to:

• Provide the service: create and manage accounts, profiles, bookings, and communication between users
• Improve the platform: analyze usage, maintain features, and fix errors
• Communicate: send booking notices, service messages, platform news, and marketing communications where permitted
• Protect users and the platform: prevent fraud, abuse, and spam
• Meet legal obligations: comply with applicable laws and valid official requests
• Analyze performance: measure traffic and understand popular services

Depending on the context, we process personal information on the basis of:

• Contract: to provide and operate the platform services you request
• Consent: for optional marketing communications and other consent-based processing
• Patient consent: for medical data processed by a dental clinic, document storage, and informed consent for treatment
• Legitimate interests: to improve the service, protect security, and prevent misuse
• Legal obligations: to meet requirements imposed by applicable law

We may share information with:

• Other users: profile and contact information you choose to publish may be visible to clients, professionals, and companies
• Clinics and their staff: medical information is available only to authorized clinic staff with the required access rights
• Service providers: hosting, email delivery, Google Sign-In, Firebase Authentication, Google Maps Platform, and analytics when enabled with the required consent
• Freemius: purchaser and SaaS subscription information needed for payment, renewal, receipts, and refunds; medical records are not part of SaaS billing
• A company's acquiring provider: information required to process a direct payment to that company; this is separate from Freemius
• OpenAI: public profile and service information, prompt text, and help context required for the AI feature selected by the user, as explained below
• Public authorities: when required by a valid official request or applicable law
• A successor to the business: in connection with a merger, sale, or transfer of the platform

We do not sell your personal information to third parties for their own marketing purposes.

Your information is stored on servers in Georgia. Some service providers, including Google, Freemius, and OpenAI, may process information outside Georgia.

Where required, international transfers are protected using measures such as:

• European Commission Standard Contractual Clauses
• Adequacy decisions where applicable
• Other approved data-transfer mechanisms

We use technical and organizational security measures, including:

• Encryption in transit: HTTPS/SSL for data transmission
• Password protection: passwords are stored using secure hashing
• Access controls: information is available only to authorized personnel and users
• Medical records: access to dental files, charts, and documents is checked against staff permissions and logged
• Monitoring: systems and processes designed to identify suspicious activity
• Backups: regular infrastructure-level backups

No method of transmission or storage can be guaranteed to be completely secure.

We retain information for the following periods or purposes:

• Active accounts: while the account is used and the information is needed to provide the service
• After deletion: for up to 90 days where recovery is requested or technically required
• Dental information: archiving a patient does not automatically delete the medical history; the clinic retains it for periods required by applicable law and medical-record obligations
• Legal requirements: for up to three years where needed to meet tax or other legal obligations, or longer if applicable law requires it
• Analytics: anonymized or aggregated information may be retained for longer

For dental clinics, the platform supports patient archiving without physically deleting the medical history, staff activity logs, consent records, and infrastructure-level backups.

Subject to applicable law, you may have the right to:

• Access: receive a copy of your personal information
• Correction: update inaccurate or incomplete information
• Deletion: request deletion of your account and information
• Restriction: restrict processing in certain circumstances
• Portability: receive information in a structured format
• Objection: object to processing based on legitimate interests
• Withdrawal of consent: withdraw consent for optional communications or processing
• Complaint: submit a complaint to the applicable data-protection authority

To exercise your rights, contact us at privacy@locate.ge.

We use the following categories of cookies:

• Necessary: required for platform operation, authentication, and security
• Functional: remember settings such as language and theme
• Analytics: help understand platform use when analytics is enabled and the user has provided any required consent
• Advertising: support relevant advertising and campaign attribution when these services are enabled and the user has provided any required consent

You can manage optional cookies through the consent banner or cookie settings on the site and through your browser settings. Disabling some cookies may limit platform functionality.

See the Cookie Policy for more information.

When you sign in with Google, we receive information needed to create or access your account, such as your email address, name, and profile picture when available. We use this information for authentication, account identification, and profile display.

Google Maps Platform and Google Places may be used to select an address, display a map, and create location links. Google's terms and policies are available here: Google Privacy Policy, Google Terms, and Google Maps Platform Terms.

The platform is not intended for people under 18. We do not knowingly collect information directly from children. If you believe that a child has provided information to us, contact us so that we can review and delete it where appropriate.

We may update this Privacy Policy. We will notify users of material changes by email or through a notice on the platform where appropriate.

The date of the latest update appears at the beginning of this document.