Privacy Policy
Last updated: July 21, 2026
BBauto, operated by LLC BB Auto Service and registered in Georgia, respects your privacy. This Policy explains what information we collect, why, and what rights you have over it. It is written to comply with the Georgian Law on Personal Data Protection, supervised by Georgia’s Personal Data Protection Service.
1. Who We Are
LLC BB Auto Service, operating the BBauto platform, is the data controller for the personal information described in this Policy. You can reach us at privacy@bbauto.ge for any question or request related to your data.
2. What We Collect
We deliberately collect as little information as possible:
- Name, email address, and phone number — provided when you create an account.
- Profile photo — entirely optional; only if you choose to add one.
- Listing content — vehicle details, photos, and descriptions you submit when listing a vehicle for sale.
- Messages — content you send through the in-platform chat, retained to allow the conversation to function and, if needed, to investigate abuse or fraud reports between users.
- Basic usage data — through Google Analytics, we collect standard analytics information such as pages visited, device and browser type, and approximate region, to understand how the Platform is used and to improve it.
We do not collect: precise geolocation, government-issued identity documents, or a history of your searches for any purpose beyond the immediate functioning of the site.
3. What We Never See: Payment Card Data
When you pay for a subscription or the Expertise Service, you are securely redirected to Bank of Georgia’s iPay payment system. Your card number, expiry date, and CVV are transmitted directly to Bank of Georgia and never reach BBauto’s servers. We do not store, process, or have access to this information at any point.
4. Why We Process Your Data
| Purpose | Data used | Legal basis |
|---|---|---|
| Creating and securing your account | Name, email, phone | Performance of contract |
| Phone verification (OTP) | Phone number | Performance of contract |
| Enabling buyer–seller communication | Chat messages | Performance of contract |
| Processing paid Subscription / Expertise Service requests | Name, email (payment itself handled entirely by Bank of Georgia) | Performance of contract |
| Understanding site usage and improving the Platform | Analytics data (Google Analytics) | Consent |
| Meeting Georgian accounting and tax obligations | Records of paid transactions | Legal obligation |
5. Who We Share Data With
We do not sell, rent, or share your personal data with any third party for marketing or any other purpose. The only recipients of limited data are:
- Bank of Georgia (iPay) — to process payments you initiate. We share only what is necessary to complete the transaction; we never share your card details, because we never receive them.
- Google Analytics — receives anonymized/pseudonymized usage data to help us understand Platform traffic. Google may process this data outside Georgia; Google’s own privacy safeguards apply to this transfer.
We do not share your data with insurance companies, leasing providers, marketing partners, or any other third party.
6. How Long We Keep Your Data
If you delete your account, your personal data is deleted promptly. The one exception: records of paid transactions (Subscription and Expertise Service payments) are retained for six (6) years, as required by Georgian accounting and tax law, even after account deletion. This retained data is limited to what is needed for financial recordkeeping and is not used for any other purpose.
7. Cookies
We use cookies required for the Platform to function (e.g., keeping you logged in) and analytics cookies via Google Analytics. A detailed list of specific cookie categories will be added to this page once the cookie consent banner is implemented.
8. Your Rights
Under Georgian data protection law, you have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your data (subject to the retention exception in Section 6)
- Object to or restrict certain processing, including analytics
- Lodge a complaint with Georgia’s Personal Data Protection Service if you believe your rights have been violated
To exercise any of these rights, email privacy@bbauto.ge. We will respond within a reasonable time as required by law.
9. Children
The Platform is intended for users aged 18 and older. We do not knowingly collect data from minors.
10. Security
We apply reasonable technical and organizational measures to protect your data, including encrypted transmission (HTTPS) and access controls that limit who at BBauto can view stored data. No system is perfectly secure, and we encourage you to use a strong, unique password for your account.
11. Changes to This Policy
We may update this Policy from time to time. Material changes will be announced on the Platform before they take effect.
12. Contact
Email: privacy@bbauto.ge
See our Contact Us page for full details.

