Privacy policy
Updated 14 October 2026
In short
This policy covers the public pages of aivis.one (the home page, About, Courses and Questions) and the cabinet, where registered users manage their SANKORD licences and purchases. It is the one privacy policy for both.
The public pages run no analytics, load no third-party scripts, have no sign-up or contact forms, and our own pages set no cookies on them. You reach us by e-mail or Telegram, and then we hold what you send us.
The cabinet is different. To register, verify your identity and pay, we hold your account data, the documents and photographs you send for identity verification, and the records of your payments. Our staff can see them in the way described below. The sections “The cabinet” and “Who can see your data in the cabinet” say exactly what and why.
Who is responsible
The controller of your data is AIVIS.ONE LLC, a limited liability company registered in Georgia (identification number 404804422), at Georgia, Tbilisi, Mtatsminda district, village Okrokana, Akaki Tsereteli str., N14. SANKORD is a product of AIVIS.ONE LLC. The full details are on the company details page.
The director, Artem Baliakno, is the contact for questions about your data. Write to him at legal@aivis.one. For everything else, write to hello@aivis.one or on Telegram at @aivisone.
Which law applies
We are established in Georgia, so the Law of Georgia on Personal Data Protection applies to us first. Its supervisory authority is the State Audit Office of Georgia, which has taken over the functions of the Personal Data Protection Service. Visitors and users in the EU and the UK: see “Visitors and users in the EU and the UK”.
What data we handle and why
We handle the following data, grouped by where you meet us. Each group names the reason and the basis.
The public pages
When you open a page, the technical data that any web server receives reach the company’s server through Cloudflare, Inc.: your IP address, the page requested, the date and time, browser and device details, and the page you came from. We use them to deliver the site and keep it secure and running. The basis is our legitimate interest in running a secure site. They stay in the operating logs of Cloudflare, Inc. and of the server. We do not export or analyse these logs.
When you write to us by e-mail, we receive your e-mail address, your name if you give it, and whatever you write or attach. We use them to read and answer your message. The basis is your request and our legitimate interest in answering. See “How long we keep it”.
When you write to us on Telegram, we receive your Telegram name, username and ID, and whatever you write or send. We use them to read and answer your message. The basis is your request and our legitimate interest in answering. We keep them as we keep e-mail.
When you press the light/dark theme button, one word, “light” or “dark”, is saved in your own browser. It is never sent to us. It is used to show the theme you chose the next time you visit. The basis is your own action. It stays in your browser until you delete it. See the cookie and local storage notice.
You do not have to give us any data through the public pages. If you do not write to us, we receive nothing from you except the technical data a web server needs to answer your request.
The cabinet: your account
When you register, we receive the e-mail address you register with, or your Telegram name, username and ID if you sign in through Telegram, and the language you choose. In your profile you may give your first and last name, your country and your telephone number. We use them to create and run your account, to sign you in, to send you messages about it, and to show you the documents you have accepted. The basis is the agreement between you and AIVIS.ONE LLC on the cabinet’s terms, and our legitimate interest in running the cabinet securely.
If you come through the link of an integrator, we record which link you used. We use it to work out the integrator’s share of your payments. The basis is our agreement with the integrator and our legitimate interest in running that scheme correctly.
We record the documents you accept, with the version and the time. The basis is our legal interest in proving what was agreed.
The cabinet: identity verification
Nothing can be bought in the cabinet before you pass identity verification. We receive the type of your identity document (passport, ID card or driving licence), photographs of its front and, except for a passport, its back, and a photograph of yourself. Our staff look at them and decide by hand; no automated decision is taken. We use them to confirm who you are and that we may deal with you under our AML policy. The basis is our legitimate interest in knowing who we sell to, our duty of care in payments, and your request to buy. The KYC notice says what the check costs and what happens to the result.
The cabinet: payments
When you pay, we receive and keep the amount, the currency, the time, the payment method, the references the payment service gives us, and the state of the payment. Records of money in the cabinet are kept for the accounting period the law sets; a mistake is corrected by a reversing entry. We use them to credit your payments, to show them to you, to keep the company’s books and to meet our legal duties. The basis is the agreement for your purchase, and our legal duties of accounting.
The cabinet: an agreement signed outside it
An investment in the company is never bought in the cabinet. A person who has signed such an agreement directly with the company may also register in the cabinet. If you do, our staff may book in your account the money received under your agreement, with its basis document, and may upload your signed agreement as a PDF into your account. You and our staff can see it there, and no one else. We do this to give you one place for your papers and to keep the company’s books in agreement with them. The basis is that agreement. Whether you register is up to you, and the agreement stands without it.
The cabinet: integrators
If you apply to become an integrator, we hold your application, the results of your training and examinations, your qualification, the buyers attributed to you and the shares due to you, and the details needed to pay them. The basis is the integrator agreement. Staff approve the application.
The cabinet: messages and records of use
We send you messages about your account and purchases: confirmation of your address, the result of verification, payments, changes to the documents. We send no marketing messages. If you ask for help through the cabinet, we keep your request and our answer.
We keep a log of important actions in the cabinet, such as signing in, changes to your account, payments and every action of our staff in your account, with the time, your IP address and your browser details. We use it to keep the cabinet secure, to solve problems and to show what happened. The basis is our legitimate interest in security and in being able to prove what was done.
What we do not do
We do not sell data, build profiles of visitors or users, or take any decision about you by automated means alone. We run no advertising and no analytics on the public pages.
Who can see your data in the cabinet
Only the company’s staff can see what is in the cabinet, and each person only what the work needs. Staff can see your account data and your payments, review the documents and photographs you sent for verification, reverse a payment, approve or refuse an integrator’s application and approve a withdrawal. The links through which staff open verification documents stop working after a few minutes.
To help you, staff may also enter your account in a support session, as if they were you. Every such session and every action in it is recorded in the log with the member of staff, the time and the account. Staff use it only to solve a problem you have raised or to protect the cabinet.
Who receives data
The site and the cabinet run on the company’s own server. Traffic to them passes through Cloudflare, Inc. as a proxy for protection and speed, so Cloudflare, Inc. sees technical data such as your IP address, the page requested, the time and your browser, and also the traffic of the cabinet while it passes. For us it acts as a processor of this data, under its published data processing addendum.
Other services handle data for the cabinet on our instruction. An e-mail delivery service sends the messages of the cabinet. Telegram carries your sign-in if you use it and the notices you choose. The cabinet’s pages also load Telegram’s Mini App script from telegram.org, so that the cabinet can open inside Telegram; Telegram receives that request under its own policy. The payment service we use receives the details of a payment to process it. Our legal advisers see data when we need advice. Our staff are described above.
If you write by e-mail or Telegram, your message passes through your provider, through our mailbox provider and through Telegram, which handle it under their own terms.
We pass your data to no one else, unless the law requires it or a competent authority lawfully asks for it.
The pages link to other services, such as Telegram, LinkedIn, X, Medium and our product site sankord.com. Once you follow a link you are on a service we do not run, and its own policy applies.
Transfers abroad
We work from Georgia. Cloudflare, Inc. handles traffic through servers in many countries, and our e-mail, Telegram and payment providers may store data outside Georgia. The countries where your data is stored are not fixed.
How long we keep it
We keep data only as long as the purpose needs it, then delete or anonymise it, unless a law requires us to keep it.
- Ordinary correspondence: as long as it is needed for our talks with you and to protect our rights, and then we delete it.
- Your account and its documents: while the account exists, and afterwards only what the law requires us to keep.
- Identity documents and photographs: while your account exists. When it is closed, we delete them, except what the law requires us to keep.
- Payment records and the signed agreements booked in your account: for the accounting period the law sets.
- Logs of the cabinet: as long as they are needed for security and to show what was done.
- Backups of the cabinet are kept for seven days and then overwritten.
- Server logs of the public pages follow the schedule of Cloudflare, Inc. and of our server.
- The theme setting stays in your browser until you delete it.
Your rights
Under the Law you have these rights:
- to ask whether we handle data about you, and to see it and receive a copy;
- to ask us to correct, update or complete it;
- to ask us to stop handling it;
- to ask us to delete or block it;
- to withdraw any consent you gave;
- not to be made subject to a decision taken only by automated means that has legal or similarly significant effect on you. We take no such decision.
We answer your request within 10 working days of receiving it. For information and copies the Law allows a further 10 working days in special cases.
To use a right, write to us at legal@aivis.one, or through the cabinet. To protect you, we may ask you to confirm who you are before we act. Where the law requires us to keep a record, such as an accounting record, we keep it and tell you so.
You may complain to the supervisory authority, the State Audit Office of Georgia. Its decisions can be appealed to a court.
Security
The public pages are static and we keep no database of visitors. The cabinet does keep a database of its users, with the data described above. We protect it by limiting access to staff by their role, by signed-in sessions, by logging staff actions and by the short life of the links to verification documents. As the Law requires, we record a data incident and notify the State Audit Office not later than 72 hours after identifying it, except where the incident poses a minimal threat to fundamental rights and freedoms.
Visitors and users in the EU and the UK
This site and the cabinet are written in English and in Russian for readers worldwide and for Russian speakers outside Russia. Whether they are aimed at the EU or the UK, and so whether the GDPR or the UK GDPR applies to them, is not settled. We have not appointed a representative in the EU or the UK.
If the GDPR or the UK GDPR applies to you anyway, the same practice holds. Our grounds are the performance of our agreement with you, our legal obligations, and our legitimate interest in running a secure site and cabinet, in knowing who we sell to and in answering messages. You have the rights of access, correction, erasure, restriction, portability and objection, and you may complain to your national data protection authority (in the UK, the Information Commissioner’s Office).
Changes
When we change this policy, we replace the text here and show the line “Updated” with the date at the top of this page.