Processing of personal data

1. Who processes the data

The service is operated by Individual Entrepreneur Dmitrii Zelenskii, ID 347016864, address: Georgia, Kobuleti Municipality, Leghva Village, 13th Street, Lane I, No. 6, registered on September 9, 2026 by LEPL National Agency of Public Registry. Contact: hello@portie24.com, +995 557 57 55 71. Questions about data — hello@portie24.com.

2. What data and why

Phone number — to sign in and so the dispatcher can reach a member of staff. The service does not work without it: signing in is by number.

Name — so that tasks show who is doing what.

Photo — optional. Only colleagues in your company see it, and you can remove it at any time in the “Me” section.

What a person can do and how they travel — so that tasks go to whoever will actually do them.

Email — to restore access if a password is forgotten, and so letters about the company reach those who have no Telegram.

Guest requests — the text of the request and the time. The guest writes from a page opened via the QR code on the door; in the request itself we do not ask for their name or phone number. The guest enters document details separately, and only if the company has required it (see “Guest document data”).

Technical records — times of sign-ins and actions in the service. They are needed to settle a dispute and to notice access by someone else.

Partner agreement acceptance — if you are a partner, when you accept the agreement in the Partner Cabinet we store the version number, date and IP address as proof of your consent.

3. Guest document data

If a company turns on guest data collection, the guest enters their document details before arrival — name, document number, dates. The company needs this for its own records or where the law of the country the property is in requires it. Collection is off by default; the company owner turns it on.

We do not store a photo or scan of the document anywhere. The guest types the fields in; no image is created, kept or passed on.

Only the company the guest is staying with sees this data — its owner and staff within their role. Portie does not use it and does not pass it to anyone, except on a lawful demand from authorities.

The company sets how long it is kept; by default, 180 days after check-out, after which the data is deleted.

A guest may ask the company for access to their data or its deletion. If a guest contacts us, we forward the request to the company: for guest data the company is the operator (it decides what to collect and why), and Portie processes it on the company’s behalf.

4. Who we share it with

Only those without whom the service does not work: the hosting that runs the application and the database, the file storage, the email service and the operator that delivers codes in messages. Each of them receives exactly what their task requires. Nobody else — and never for advertising.

If the owner has turned on the assistant that replies to guests, we pass the text of the guest’s request and the unit’s information (address, check-in and check-out times, how to get there, specifics) to a third-party AI provider so it can help compose the reply. Door and intercom codes and the Wi-Fi password are not passed to the model — they are inserted into the reply on our side, after it. The assistant is off by default; the company owner turns it on.

Data may be disclosed on a lawful demand from state authorities. We comply with such a demand to the extent stated in it.

5. How long we keep it

While the company uses the service — and for one year after it leaves: that is usually enough to close mutual questions about payments. After that the data is deleted or anonymised.

6. Your rights

You may find out what data of yours we hold, correct it and demand its deletion. Name, photo and skills you edit yourself in the “Me” section. For everything else write to hello@portie24.com — we answer within thirty days, as the law requires.

Consent to processing can be withdrawn. After withdrawal the account is closed: using the service without processing a phone number is technically impossible.

7. How we protect it

Access to a company’s data belongs only to its staff and only within their role. Connections are encrypted, sign-in codes live for minutes, and file links are short-lived and signed.

8. Our own visit analytics

On the website pages and during sign-up we set our own cookie with a random number in your browser (up to 12 months) and count anonymous statistics: where you came from (the referring site and, if any, the ad tag), device type, OS and browser — including a messenger in-app browser (Threads, Instagram, Telegram, etc.), country and city from network data, language and screen size, and your path through the site — which pages you opened, where you stopped, how long you spent, which form field you touched and with what error. We do NOT store the IP address — only country and city. We never record the values you type (phone, email, password, any text) — only the fact that an event happened. In the working cabinet and on guest pages opened by QR code this analytics is not run.

Before sign-up the identifier is anonymous. After sign-up or sign-in we link this device to your account — to see where a registered user came from.

We keep raw events for 90 days and then delete them; only daily aggregate numbers remain for long-term history, not tied to a device.

For visitors from the EU/EEA we show a consent request: if declined, no identifier is set and only an anonymous page view is counted. We use the third-party Vercel Analytics only to reconcile overall figures.

To stop this browser from being counted at all, open the /analytics-off page and press one button — visits from it stop being counted.

9. Changes

This policy may change. The current version always lives at this address, and its date is shown at the top of the page.