Privacy Policy

This policy explains what data oop.ge — a website builder (“we”) — collects and how we use it when you use our control panel or visit websites hosted on our server.

1. Who we are

oop.ge builds and hosts websites and provides custom domains and email. For questions and requests, write to info@oop.ge.

2. What data we collect

Site owners (panel users)

• Account — email address, name and password. The password is stored only as a one-way hash; we cannot see it.
• Sign in with Google (if you use it) — your Google account identifier, email address and name. We never receive your Google password.
• Site content — texts, photos, videos, documents, contact details and settings that you add.
• Service records — your plan and paid-until date. We do not process payment card data.

Website visitors

• Contact form — the name, phone number, email address and message you enter, plus your IP address and browser type (for spam protection). The message is emailed to the site owner and kept in their panel until the owner deletes it. We process this data on behalf of the site owner, who controls it.
• Orders — if a site uses the “menu and ordering” module, order details are processed the same way, on behalf of the site owner.

Mailboxes

If your site has email mailboxes with us, messages are stored on our server. We do not read their contents, except for automated processing needed for delivery and spam protection, or where required by law.

Technical data

The server records IP addresses, browser type, the requested page and time — for security and protection against attacks (for example, limiting login attempts).

3. How we use data

• to provide the service: building, hosting and publishing websites, email;
• to keep accounts secure: sign-in, email verification, password reset;
• to send service messages (for example, a payment due reminder);
• to prevent abuse and spam.

We do not sell data, do not use it for advertising and do not share it with third parties, except as listed below or where required by law.

4. Cookies

We use no advertising, analytics or tracking cookies. Website visitors get no cookies from us. Your panel session is kept in your browser’s storage; strictly necessary cookies are used only during Google sign-in and when viewing an unpublished preview of a site. If a site embeds a map (for example, Google Maps), it is loaded from that provider and is subject to its terms.

5. Third-party services

• Google Gemini (AI) — when you ask the AI in the panel to write, improve or translate text, the text you enter and the relevant texts of your site are sent to Google. On the free tier, Google may use this data to improve its models — the panel tells you this as well. Do not put personal or confidential information into AI requests. Visitor messages are never sent to the AI.
• Pixabay — when you search for stock photos, only the search words are sent to Pixabay; no personal data.
• Sign in with Google — if you choose it, Google confirms your identity to us (see section 2).
• Facebook / Meta (coming soon) — if a site owner connects their Facebook Page in the panel, we receive the list of their Pages (name and ID) so they can choose one, and we store the access token of the chosen Page in encrypted form. We publish only the news posts that the owner publishes on their own website. The connection can be removed at any time; on disconnection or on a deletion request, the token is deleted.

6. Where data is stored

Data is stored on our own server in a European Union data center (netcup GmbH). Email is hosted on the same server — we do not use an external email provider. Encrypted backups are kept in the European Union (Backblaze, Amsterdam).

7. How long we keep data

• account and site content — for as long as the account or site exists;
• an unfinished (never activated) site is deleted automatically after 7 days of inactivity; a submitted but not activated one — after 30 days;
• visitor messages — until the site owner deletes them or the site is deleted;
• server logs — up to 90 days;
• a deleted site or account is removed from the live database immediately; it may remain in encrypted backups for up to 6 months, after which it is deleted automatically.

8. Your rights

You can ask to access, correct or delete your data, or object to its processing. You can correct most account data yourself in the panel (“My account”). How to delete data is described on the Data Deletion Instructions page. For other requests, write to info@oop.ge — we will reply within 30 days.

If you are a website visitor and want data you sent through a contact form deleted, contact that site’s owner or write to us — we will forward your request to the owner.

9. Changes

When this policy is updated, the “Last updated” date on this page changes. We will notify site owners of significant changes in the panel or by email.