Privacy Policy

The operator of advilad.ge is Inavi LTD, identification code 404815875, address Unit 28, 17 G. Rcheulishvili Street, Tbilisi, Georgia.

For questions or data-protection requests, use info@inavi.ge.

We may collect: full name, phone, email, preferred language, and preferred contact channel.

We may collect request data: collateral category, item description, condition, brand, model, serial number if entered by the user, weight, purity, certificate/valuation if relevant, estimated value, desired loan amount, term, currency, location/branch preference, and other details entered by the user.

We may collect technical and analytics data: IP address, device type, browser, language, cookie/analytics identifiers, UTM, and source data.

At MVP stage, the platform may allow item photos/files for request assessment, but final identity documents, ownership checks, item inspection, and valuation are handled by the selected partner.

Data is used for calculations, preparing comparison results, sending the user’s request to a selected partner, creating a PDF summary, support, security, fraud prevention, analytics, and legal/audit purposes.

The platform must not use the data to make a final lending decision about the user.

Automated processing notice: The platform may use automated processing and comparison logic to prepare estimated comparison results, indicative advance calculations, collateral-risk indicators, and informational matching outputs. These processes are informational only and are not used to make final lending decisions.

After user consent, data is shared only with the partner lombard/collateral-loan provider selected by the user or selected in the request flow.

Data may also be processed by technical service providers such as hosting, email, CRM, analytics, security services, and document/PDF generation providers.

Data may be disclosed to a public authority or court where required by applicable law.

At partner handoff, the user separately confirms that their data may be shared with the selected partner or partners.

Consent may be withdrawn by writing to info@inavi.ge. Withdrawal does not affect processing already completed based on consent before withdrawal.

Data is stored only for as long as necessary for service delivery, audit, commission/partner settlement, prevention of legal disputes, or legally required retention. In particular:

Abandoned or incomplete requests are deleted or anonymised within 90 days.

Submitted requests are retained for up to 3 years after the request is closed or last active, for support, audit, partner-settlement, and dispute-resolution purposes.

Uploaded collateral photos and files (originals and partner-safe copies) are deleted within 12 months after the request is closed, unless an active dispute, legal hold, fraud or security investigation, or a legal retention obligation requires longer storage.

One-time codes (OTP) and security logs are kept only as long as needed for security and fraud monitoring, and are then deleted or anonymised.

Consent records, document-version stamps, key audit records, and partner-handoff records are retained for as long as reasonably necessary to prove consent, defend legal claims, evidence partner handoff and commission settlement, and satisfy legal and accounting obligations.

Where applicable law requires a longer retention period, the statutory period prevails.

The platform uses reasonable technical and organisational measures to protect data, including access control, logging, encrypted connection, and least-privilege access.

No online system is absolutely secure; users should not enter unnecessary or clearly unrequested sensitive information.

Under applicable law, users may have rights to information about processing, access, correction, deletion, restriction, objection, or other applicable rights.

Requests should be sent to info@inavi.ge. The operator will respond within the period required by applicable law.

The platform uses strictly necessary cookies for service functionality: session and sign-in security, request-draft continuity, language preference, and storing the user’s cookie-consent choice.

With the user’s consent, the platform also uses analytics cookies set through Google Tag Manager and Google Analytics (provided by Google Ireland Limited / Google LLC) to understand how the site is used and to improve the service.

Analytics cookies are disabled by default (Google Consent Mode v2, default “denied”) and are enabled only after the user accepts them in the cookie banner. Declining keeps analytics disabled. The choice is stored for 12 months in a first-party cookie (advilad-consent); the user can change it at any time by deleting the site’s cookies in the browser, after which the banner is shown again.

The platform does not use marketing or advertising cookies.

The platform is hosted on Google Cloud (Cloud Run and Cloud SQL) in the europe-west3 (Frankfurt, EU) region; configuration secrets are stored in Google Secret Manager.

Transactional email is delivered via Brevo, and one-time SMS codes via SMS Office.

If the user accepts analytics cookies, site-usage data is processed through Google Tag Manager and Google Analytics (Google Ireland Limited; processing may also occur within the Google LLC group); such data may be processed on Google servers in the EU and the United States.

Where a technical provider processes data outside Georgia, the operator ensures an appropriate legal basis and appropriate security measures for the transfer.

If additional providers (such as file/image storage services) are introduced, this section will be updated to name them.

The platform is intended for adults researching residential collateral-backed loan products. Minors should not use the platform without a parent/legal representative.

This policy may be updated. The new version will be published on the website or app with its effective date.

Electronic records notice: Electronic consent records, timestamps, and service-related communication logs may be retained for audit, compliance, security, and dispute-resolution purposes.