Privacy Policy

Last updated July 16, 2026 · Effective July 16, 2026

This Privacy Policy for JISO Group LLC (“JISO Group,” “we,” “us,” or “our”) describes how and why we might access, collect, store, use, and/or share (“process”) your personal information when you use our services (“Services”), including when you:

• Visit our website at https://jiso.ge or related pages under this domain (including founder portfolio pages such as bsordia and djibladze)
• Open or submit our visitor survey / feedback form
• Contact us by email or phone
• Engage with us in other related ways, including inquiries about websites, branding, automation, custom software, or similar services

Questions or concerns? Reading this Privacy Policy will help you understand your privacy rights and choices. We are responsible for decisions about how your personal information related to jiso.ge is processed. If you do not agree with our policies and practices, please do not use our Services. If you still have questions, contact us at contact@jiso.ge.

Summary of key points

• Who is the controller? JISO Group LLC. Contact: contact@jiso.ge · https://jiso.ge (no postal address published on this site).
• What personal information do we process? Survey answers (how you found us; whether you need services; which services you select); if you say you are interested now or maybe later — your name, email or phone, and a follow-up consent tick; optional message; plus technical data (page URL of the submission, IP address for abuse prevention, Vercel Analytics, and Meta Pixel PageView measurement).
• Where is survey data stored? Submissions go from your browser to our Vercel serverless API, then into a Supabase database controlled by JISO Group LLC. Only the founders access lead records and carry out follow-up. We do not use public “form email” redirect services for this form.
• When may we contact you? Only if you indicate interest now or maybe later, provide contact details, and tick the box agreeing that we may contact you about those services. We follow up by email or phone only (whichever you left). We do not run newsletters or promotional email blasts. We do run Meta ads for measurement.
• Do we process sensitive personal information? No. We do not intentionally collect special-category or sensitive data (such as health, religion, race, biometrics, or government IDs).
• Do we collect information from third parties? We do not buy personal profiles from data brokers. We receive technical/operational data from providers that host, analyse, and help measure the site (Vercel, Supabase, Meta, Google Fonts).
• Do we sell your data? No. We do not sell personal information. We use Meta Pixel (PageView) for advertising measurement and may share limited technical identifiers with Meta as described below.
• How do you exercise your rights? Email contact@jiso.ge. You may also ask us to stop follow-up contact and/or delete your survey record where applicable law allows.

1. What information do we collect?

Personal information you disclose to us

In short: We collect personal information that you choose to provide — mainly through the visitor survey and any email/phone contact.

We collect personal information you voluntarily provide when you submit our visitor survey / feedback form, request information about our services, or otherwise contact us.

Personal information provided by you may include:

• Names (for example first name) — only collected when you choose “Yes, I’m interested” or “Maybe later”
• Email address or phone number — only collected when you choose “Yes, I’m interested” or “Maybe later” (email must be a valid-looking address; phone should include country code)
• Survey answers — how you found this website; whether you need services; which service categories you select (for example websites, branding, automation, custom software, other)
• Follow-up consent — a tick-box, shown when you choose “Yes, I’m interested” or “Maybe later”, confirming that JISO Group LLC may contact you about the services you are interested in (by email or phone, matching the contact method you provide). If you submit without ticking it, we will not follow up; you would need to contact us yourself
• Optional free-text message you choose to send
• Any other information you include in later correspondence with us

If you choose “Just browsing,” we do not ask for contact details, do not offer Send, and do not store a survey row for that path — you can simply continue to the site.

Sensitive information. We do not seek to collect sensitive personal information. Please do not submit sensitive data (health, government IDs, financial account numbers, etc.) through our forms or email unless we specifically ask for something necessary for a project under contract.

All personal information you provide should be true, complete, and accurate. Please notify us of changes by emailing contact@jiso.ge.

How the visitor survey works (data flow)

1. You fill in the on-site form (available in English and Georgian).
2. Your browser sends the answers to our own API endpoint on Vercel (/api/lead).
3. The API validates the submission, applies spam checks, and — if accepted — stores a row in our Supabase leads table.
4. The founders of JISO Group LLC read those rows to review feedback and, where you consented, follow up about your requested services by email or phone.

Alongside the answers you type, a stored submission may also include: the page URL from which you submitted; a timestamp; a normalised contact key derived from your email/phone (used only to detect duplicate submissions); your IP address (used only for rate-limiting and abuse prevention); and a boolean record of whether follow-up consent was given.

Spam / abuse controls. We use a hidden honeypot field (ignored for real users; bot-like fills are accepted without writing a database row), reject empty submissions, soft-accept duplicate contacts without creating another row, and limit roughly three submissions per IP address per 24 hours. See also how we use your email or phone.

Information automatically collected

In short: Some information — such as IP address and browser/device characteristics — may be collected automatically when you visit our Services.

We and our service providers automatically collect certain information when you visit or use the Services. This may include device and usage information such as IP address, browser type and settings, operating system, referring URLs, approximate location derived from IP address, pages viewed, timestamps, and similar technical data. This information is primarily needed to maintain security and operation of the Services and for internal analytics.

Like many websites, we may collect information through cookies and similar technologies (including browser localStorage). See our Cookie Policy.

The information we collect may include:

• Log and usage data — service-related, diagnostic, usage, and performance information (for example IP address, browser type, pages viewed, and activity timestamps).
• Device data — information about the computer, phone, tablet, or other device you use (for example browser type, OS, and device identifiers available to analytics and advertising tools).
• Location data — approximate location derived from IP address (for example country/region), not precise GPS tracking by us.
• Advertising / measurement data — via Meta Pixel (currently PageView only; we do not send Conversions API events or extra browser events such as Lead/Contact from this site). Meta may collect or set cookies and similar identifiers used for ad measurement.
• Abuse-prevention data — IP address and normalised contact key associated with form submissions, used only to limit spam and duplicates.
• On-device preferences — language choice and whether the survey was dismissed or already sent, stored in your browser’s localStorage (not uploaded as personal profile data by themselves).

How we use your email or phone number

In short: We ask for email or phone only when you choose “Yes, I’m interested” or “Maybe later,” so we can follow up about your request (with consent) and reduce repeat spam from the same contact.

When you share an email address or phone number through the visitor survey, we use it for these purposes only:

• Follow-up about your request — if you tick the consent box, the founders of JISO Group LLC may contact you by that same channel (email or phone) about the services you indicated. This is not a newsletter signup and not promotional blast marketing.
• Without consent — if you submit without ticking consent (after the on-form warning), we store the submission as feedback where applicable but we will not use your email or phone to reach out; you would need to contact us at contact@jiso.ge.
• Spam and duplicate protection — we derive a normalised contact key from your email or phone and store it with the lead row so we can recognise the same contact if it is submitted again. A repeat contact is accepted softly for the site experience but does not create another database row. Separately, we limit submissions by IP address (about three per 24 hours) and use a honeypot against bots. These checks exist to stop spam and abuse; they are not used to build marketing lists or sell data.
• Format — email should look like a full address (for example name@example.com). Phone should be digits with a country code (for example +995…).
• Access — only the founders access lead records for feedback and consented follow-up.
• Retention — typically up to 1 year after the last meaningful contact, unless a client relationship or legal need requires longer (see the retention section below).
• Your choices — email contact@jiso.ge to withdraw follow-up permission, correct details, or ask us to delete your survey record where the law allows.

We do not sell your email or phone, add you to third-party marketing lists, or use survey contact details for Meta Pixel advertising audiences. Meta Pixel on the site measures PageViews separately and does not receive your survey email or phone from our form API.

2. How do we process your information?

In short: We process your information to run the site, understand feedback, follow up on service requests you authorised, prevent abuse, and comply with law.

We may process your personal information for the following purposes:

• To deliver and facilitate delivery of services — if you inquire about or engage us for websites, branding, automation, custom software, or related digital services.
• To respond to inquiries and follow up — founders reply when you submit contact details and tick consent that we may contact you about the services you selected. Follow-up is by email or phone only (the channel you provided), about your request (for example clarifying needs or next steps) — not newsletters, SMS blasts, or social DMs as a standard practice.
• To send administrative information — operational messages related to your request or an engagement (not marketing newsletters).
• To request and analyse feedback — through our on-site survey so we can understand how visitors find us and whether they need services (including submissions that do not include contact details).
• To protect our Services — diagnose problems; reduce spam/abuse (honeypot, rate limits, duplicate-contact checks); maintain security.
• To identify usage trends — analyse how the site is used (via Vercel Analytics) so we can improve it.
• To measure advertising — via the Meta (Facebook) Pixel PageView event, so we can understand visits related to Meta ads. We use this for measurement; we do not currently fire additional pixel events or a Meta Conversions API from jiso.ge.
• To comply with legal obligations and respond to lawful requests, or to protect vital interests where required.
• To enforce our terms, policies, and defend legal rights where necessary.

We do not use your information for: selling personal data; building or selling marketing lists; running email newsletters or promotional blasts; user account registration; payment processing on jiso.ge (we do not take card payments through this website); or automated decisions that produce legal or similarly significant effects about you. We do run Meta ads and use Meta Pixel for measurement as described in this policy.

Scope of follow-up consent. Ticking the survey consent box authorises the founders of JISO Group LLC to contact you about the services you indicated interest in, using the email or phone you provided. It does not sign you up to a newsletter or unrelated marketing programme. If you send the form without that tick, we will not reach out about your request — you can still contact us at contact@jiso.ge. If our practices change, we will update this policy and, where required, ask for a fresh consent.

3. What legal bases do we rely on to process your personal information?

In short: We process personal information only when we believe it is necessary and we have a valid legal reason under applicable law.

If you are located in the EU or UK

Under the GDPR and UK GDPR, we may rely on:

• Consent — in particular, when you tick the follow-up box so we may contact you about services you requested, and more generally when you voluntarily send optional messages. You may withdraw consent at any time by emailing us (withdrawal does not affect processing already performed before withdrawal).
• Performance of a contract / steps prior to a contract — when processing is needed to respond to a request to work with us or to perform a client engagement.
• Legitimate interests — where processing is reasonably necessary for our business interests and is not overridden by your rights. Examples include: operating and securing the website; understanding anonymised or lightly identified feedback trends (for example “how did you find us?”); preventing fraud/spam (IP rate limits, duplicate checks, honeypot); and storing survey rows that do not include a request for contact.
• Legal obligations — where processing is necessary to comply with law or respond to lawful requests.
• Vital interests — where processing is necessary to protect someone’s vital interests (rarely applicable).

In legal terms, JISO Group LLC is the “data controller” of personal information described in this Privacy Policy for jiso.ge.

If you are located in Canada

We may process your information with your express or implied consent, or as otherwise permitted by applicable Canadian law (including PIPEDA and, where applicable, Quebec Law 25). Follow-up contact about services you requested is based on the consent you give in the survey tick-box (and/or later correspondence). You may withdraw consent subject to legal or contractual restrictions and reasonable notice by emailing contact@jiso.ge.

Other regions (including Georgia)

We operate from Georgia and aim to handle personal information fairly, for clear purposes, and with appropriate security. Where other local laws apply to you, we will respect rights those laws provide when you contact us.

4. When and with whom do we share your personal information?

In short: We share information with service providers that help us run the site and store submissions. Lead rows are accessed only by our founders. We do not sell personal information.

We may share personal information with third-party service providers who perform services for us and need access to that information to do their work. We select providers that offer contractual and technical protections appropriate to their role. Survey / lead rows are accessible only to the founders of JISO Group LLC through our database and inbox tools (not published publicly, and not routinely shared with freelancers, agencies, or other partners for outreach).

Categories / examples of third parties we use:

• Website hosting & API — Vercel (hosts jiso.ge and runs the /api/lead endpoint that receives form posts)
• Web analytics — Vercel Analytics / Insights
• Advertising / measurement — Meta Platforms (Meta Pixel / Facebook Pixel) for PageView measurement related to our Meta ads
• Database — Supabase (stores survey / lead submissions for JISO Group LLC; inserts are performed by our server using a privileged service credential, not by anonymous browser clients)
• Content delivery / fonts — Google Fonts (font files; Google may process technical data such as IP address when fonts load)

We may also share information:

• Business transfers — in connection with any merger, sale of assets, financing, or acquisition of all or part of our business.
• Legal requirements — if required by law, regulation, legal process, or governmental request, or to protect rights, safety, and security.

Through Meta Pixel, Meta may receive technical identifiers (such as cookie IDs, IP address, browser/device data, and pages viewed) and use them according to Meta’s policies. Our current implementation fires a PageView event for measurement. You can manage Meta ad preferences in your Meta account settings and browser controls. Blocking Meta-related cookies or scripts may reduce our ability to measure ads, but the website itself should still load.

5. Do we use cookies and other tracking technologies?

In short: Yes — cookies and similar technologies for essentials, preferences, analytics, and Meta ad measurement.

We may use cookies and similar technologies to operate the site, remember preferences (such as language choice and survey dismiss/sent flags stored locally in your browser), understand traffic, and measure Meta ads. Specific details are in our Cookie Policy: https://jiso.ge/cookie-policy/.

We do not use Google Analytics on jiso.ge. We use Vercel Analytics for site metrics. We use the Meta Pixel (Facebook Pixel) for PageView advertising measurement. The pixel loads by default with the page; we do not currently show a separate cookie-consent banner. We do not use Google Maps APIs on this site.

6. Do we handle social logins?

In short: No.

Our Services do not offer registration or login with third-party social media accounts.

7. Is your information transferred internationally?

In short: Yes — information may be processed in countries other than your own.

We are based in Georgia (JISO Group LLC) and operate a website hosted and processed through providers that may store or process data in the United States, the EU/EEA, and other countries (for example Vercel, Supabase, Meta, and Google). Those countries may not have the same data-protection laws as your home country.

Where required, we rely on appropriate safeguards offered by our providers (such as standard contractual clauses or equivalent protections) and we take steps to handle personal information in accordance with this Privacy Policy and applicable law.

8. How long do we keep your information?

In short: We keep information only as long as needed for the purposes described here, unless a longer period is required by law.

• Survey / lead submissions (name, contact, survey answers, follow-up consent flag, message, page URL, and related fields): typically up to 1 year after the last meaningful contact, unless we enter a client relationship (in which case we may keep relevant project and correspondence records for the duration of the engagement and as needed for accounting, tax, or legal obligations).
• Abuse-prevention fields (IP address, normalised contact key): kept with the submission for the same retention window so we can enforce rate limits and detect duplicates; not used for marketing lists.
• Analytics / logs / Meta measurement: retained according to our providers’ settings (Vercel, Meta) and our operational needs.
• On-device localStorage (language / survey flags): remains on your device until you clear site data or we change the implementation.
• Correspondence: as long as needed to manage the relationship or fulfill legal requirements.

When we no longer have a legitimate need to process personal information, we will delete or anonymize it, or if deletion is not immediately possible (for example backups), securely isolate it from further use until deletion is possible.

9. How do we keep your information safe?

In short: We aim to protect personal information with appropriate organizational and technical measures.

Measures include HTTPS transport; limiting access to business inboxes and database tools to the founders who need them; using reputable infrastructure providers; storing survey data in Supabase with row-level security enabled so anonymous public clients cannot freely read/write the table; inserting submissions only through our server API with a privileged service credential; and form spam-reduction techniques (honeypot, rate limiting, duplicate checks). However, no electronic transmission or storage system is guaranteed 100% secure. Transmission of information to and from the Services is at your own risk; access the Services in a secure environment where possible.

If we become aware of a security incident affecting personal information, we will assess it and notify relevant authorities and/or individuals as required by applicable law (for example, timelines that may apply under GDPR in the EU/UK).

10. Do we collect information from minors?

In short: We do not knowingly collect data from or market to children under 18.

Our Services are directed to business decision-makers and similar adults. We do not knowingly collect personal information from anyone under 18. If you believe we have collected such information, contact contact@jiso.ge and we will take reasonable steps to delete it.

11. What are your privacy rights?

In short: Depending on your location, you may have rights to access, correct, delete, or restrict processing of your personal information, among other rights.

In regions such as the EEA, UK, Switzerland, and Canada, these rights may include:

• Right to request access to and a copy of your personal information
• Right to request rectification or erasure
• Right to restrict processing
• Right to data portability (where applicable)
• Right to object to certain processing
• Right not to be subject to solely automated decision-making that produces legal or similarly significant effects (we do not engage in such decision-making on jiso.ge)
• Right to withdraw consent where processing is based on consent — including withdrawing permission for us to follow up about your survey request

To withdraw follow-up consent or ask us to delete a survey submission, email contact@jiso.ge with enough detail for us to locate your record (for example the email or phone you used). We will stop new outreach based on that consent and handle deletion/restriction according to applicable law (and any separate client-contract needs if you already engaged us).

If you are in the EEA/UK and believe we unlawfully process your information, you may complain to your local data protection authority. In Switzerland, you may contact the Federal Data Protection and Information Commissioner.

We do not send marketing newsletters or promotional email blasts from this website. We run Meta ads and measure PageViews with Meta Pixel. We may still send non-marketing messages needed to respond to an inquiry you initiated (by email or phone), while consent remains valid or another lawful basis applies.

Cookie preferences: see our Cookie Policy and your browser settings.

12. Controls for Do-Not-Track features and Global Privacy Control

Most browsers include a Do-Not-Track (“DNT”) setting. There is no uniform standard for recognizing DNT signals, and we do not currently respond to DNT browser signals.

Global Privacy Control (GPC): Our current site setup does not implement automated GPC signal handling. If you wish to opt out of sale/sharing of personal information where such concepts apply, email contact@jiso.ge. We do not sell personal information.

13. Do United States residents have specific privacy rights?

In short: Yes — certain US state laws provide rights such as access, deletion, correction, and opt-out of sale/sharing/targeted advertising.

This section is intended to help address laws such as the CCPA/CPRA (California) and similar state privacy laws (including those covering Colorado, Connecticut, Virginia, Texas, and other states listed in comprehensive multi-state policies). Rights and definitions vary by state.

Categories of personal information we collect

The table below describes categories of personal information we may collect in connection with the Services. Illustrative examples are included. For a full picture, also read Section 1.

Retention for Categories A, B, D (survey signals), F, G, and consent flags generally follows Section 8 (typically up to 1 year for lead data unless a longer client/legal need applies).

Sources

Directly from you; automatically from your device/browser; and from service providers processing data on our behalf (Vercel, Supabase, Meta, Google Fonts).

Use and disclosure

See Sections 2 and 4. We disclose personal information to service providers for business purposes such as hosting, running our form API, analytics, database storage, and Meta ad measurement. Lead records are reviewed only by our founders for feedback and consented follow-up.

We do not sell personal information. We use Meta Pixel (PageView) for advertising measurement, which may involve sharing technical visit data with Meta. We do not use additional ad-network pixels beyond Meta on jiso.ge as part of our current setup, and we do not operate email newsletters.

Your rights (US state laws)

Subject to applicable law, you may have the right to:

• Know whether we process your personal data
• Access your personal data
• Correct inaccuracies
• Request deletion
• Obtain a copy of personal data you provided
• Non-discrimination for exercising your rights
• Opt out of sale, sharing, or targeted advertising (to the extent those activities apply — we do not sell personal information; for Meta ads, use Meta’s ad settings and/or email us)
• Limit use of sensitive personal data (we do not collect sensitive PI for profiling)

How to exercise your rights

Email contact@jiso.ge with the subject line “Privacy Request.” You may also use the same email to appeal a decision we made about your request, where appeal rights apply.

We may need to verify your identity before fulfilling a request. You may designate an authorized agent where allowed by law; we may require proof of authorization.

California “Shine the Light”

California residents may request certain information about disclosure of personal information to third parties for direct marketing purposes. We do not disclose personal information to third parties for their direct marketing. For requests, contact contact@jiso.ge.

14. Do we make updates to this policy?

In short: Yes, as needed to stay accurate and compliant.

We may update this Privacy Policy from time to time — including when we change how the survey, storage, providers, or consent works. The updated version will be indicated by an updated “Last updated” date. If we make material changes, we may provide additional notice (for example a notice on the website). We encourage you to review this page periodically.

15. How can you contact us about this policy?

If you have questions or comments about this policy or our privacy practices, contact:

• JISO Group LLC (controller for jiso.ge personal data described here)
• Email: contact@jiso.ge
• Website: https://jiso.ge

We publish email and website contact only (no postal address on this site). We have not appointed a Data Protection Officer or separate EEA/UK representative. Use the email above for privacy and data-subject requests (access, deletion, withdraw follow-up consent, etc.).

16. How can you review, update, or delete the data we collect from you?

Depending on applicable law, you may request access to, correction of, or deletion of personal information we hold, or exercise other privacy rights. To submit a request, email contact@jiso.ge and include the contact details you used in the survey if relevant so we can find your row.

Related policies: Cookie Policy.

This Privacy Policy is provided for transparency about how JISO Group LLC handles information on jiso.ge. It is drafted to match our current technical setup (Vercel hosting/API, Supabase lead storage with founders-only access, Vercel Analytics, Meta Pixel PageView for ad measurement, Google Fonts, on-site survey with follow-up consent by email/phone). It is not legal advice and cannot guarantee outcomes in every jurisdiction. If you need formal legal review for your situation, consult a qualified attorney.