{
  "contour": "org",
  "version": "org-2026-10-18.1",
  "owner": "Latyshov Mikhail, Individual Entrepreneur",
  "jurisdiction": "Georgia",
  "address": "Nino and Ilia Nakashidze Street N1, Building N3, Apt N3, 0105 Tbilisi, Georgia",
  "registration": "Identification code: 304814921; NAPR registration record: B26362340, 18 May 2026",
  "email": "tevio@stoodia.org",
  "phone": "+995551003016",
  "language": "en",
  "documents": {
    "terms": {
      "title": "Terms of use",
      "sections": [
        [
          "Operator and scope",
          "The website stoodia.org is operated by Latyshov Mikhail, Individual Entrepreneur, Tbilisi, Georgia. Contact and address appear below. These terms cover the website account, sign-in and contact requests. Account access is currently free."
        ],
        [
          "Your account",
          "Registration requires a separate affirmative acceptance of these terms. Keep your password private and provide an email you control. Do not bypass security, impersonate others or access another person’s data. Contact the operator if you discover a security issue. Access may be restricted to protect users or comply with law."
        ],
        [
          "Separate products",
          "These terms apply only to stoodia.org and its account. Sign-in establishes access to this website, not payment, ownership of somebody else’s documents or rights to materials that do not belong to you. Your rights in your own materials remain yours."
        ],
        [
          "Payments and responsibility",
          "Payments, paid products and subscriptions are not available on the central site. The payment information page does not create an order. Product, price, cancellation and refund terms will be published before a paid offering becomes available. These terms do not waive liability or mandatory consumer rights that cannot lawfully be excluded."
        ],
        [
          "Law, changes and complaints",
          "The operator is established in Georgia. Georgian law applies subject to mandatory protections applicable to you, including applicable consumer and data-protection law. This is not an exclusive Georgian court clause. Contact the operator to resolve issues; rights to approach competent courts and regulators remain intact. A policy update does not itself grant consent to a new optional purpose or marketing. Versions and effective dates are shown on the pages."
        ]
      ]
    },
    "privacy": {
      "title": "Privacy notice: Georgia and applicable GDPR",
      "sections": [
        [
          "Controller and scope",
          "Latyshov Mikhail, Individual Entrepreneur in Tbilisi, Georgia, is the controller of stoodia.org. This notice concerns stoodia.org accounts and contact forms. The Georgian Law on Personal Data Protection applies; GDPR protections apply where the processing falls within its territorial scope."
        ],
        [
          "Purposes and legal bases",
          "Account creation, authentication and requested profile functions use data needed to provide the account service (contract, GDPR Article 6(1)(b) where applicable). Security, abuse prevention and restricted operational logs protect the platform and its users (legitimate interests, Article 6(1)(f)). Legal duties use the applicable obligation (Article 6(1)(c)). Contact-form processing and optional persistent journey history rely on your separate choice (consent, Article 6(1)(a)). No marketing consent is bundled with sign-up or a contact request."
        ],
        [
          "Information processed",
          "Account data include email, password hash, profile fields you supply, language, status, verification and sessions. Contact forms collect your name, email, optional organisation and other contact, category, task text, language, page, referring host, submission identifier, hashed network abuse-prevention value and consent version/time. Operational logs may contain IP address, request path, time and result. Please do not submit sensitive personal data, passwords or third-party confidential documents through the contact form. If you enable a second factor, we store the encrypted authenticator secret, hashes of single-use recovery codes and the last accepted time step. The secret is provided during setup; recovery codes are shown once. Disabling the feature deletes its settings. Resetting a password does not disable the second factor."
        ],
        [
          "Recipients and international processing",
          "Authorised staff and selected providers support this website, including hosting, message delivery and abuse prevention. Team email notifications contain the contact request. Telegram notifications contain only its reference and a protected dashboard link. The controller and selected providers may process data in different countries when needed to operate the website and comply with law. Each recipient receives only the data needed for its task."
        ],
        [
          "Retention and your choices",
          "Data is kept only for as long as needed for the stated purposes, legal duties and the establishment or defence of claims. You may request access, correction, erasure or restriction and withdraw optional consent."
        ],
        [
          "Rights and complaints",
          "Where applicable, you may object to legitimate-interest processing and request data portability for data processed by consent or contract. You may contact the controller to exercise your rights. Applicable law provides the relevant response periods and permits a complaint to the competent supervisory authority."
        ],
        [
          "Storage and analytics",
          "The website uses necessary cookies for sign-in and requested functions. Optional storage for history requires your consent and can be disabled in the cookie settings."
        ],
        [
          "Return after sign-in",
          "To continue a requested action, the website may retain a return address for up to 30 days. It is used only for that purpose and deleted when the period ends or earlier on request."
        ],
        [
          "Encrypted backups",
          "The operator may create backups to restore the website and protect data. Backups are kept for a limited period."
        ],
        [
          "Technical retention periods",
          "Temporary data is removed when its purpose ends or its retention period expires."
        ]
      ]
    },
    "cookies": {
      "title": "Cookies and browser storage",
      "sections": [
        [
          "Necessary storage",
          "The central web account uses per-tab sessionStorage for account tokens and the current service return journey, rather than a shared parent-domain account cookie. Necessary storage supports a function you requested. Your explicit language choice is stored as stoodia.locale."
        ],
        [
          "Optional history",
          "History across browser sessions is off by default. Choose “Remember journeys” to allow it or “Necessary only” to decline. Neither choice prevents sign-in, registration or return to your service in the current tab. You may use the site without making a choice. Storage settings in the footer let you withdraw as easily as you consent; withdrawal removes persistent journeys on this origin."
        ],
        [
          "Keys and periods",
          "stoodia.cookie-choice.v1 records your choice and version for up to 180 days. With consent, stoodia.auth-journey.v1 in localStorage stores up to five service routes eligible for return for 30 days. The same sessionStorage key supports the current tab. Routes can contain a document identifier, but never authentication codes, state or passwords. Account access lasts 15 minutes and refresh up to 30 days; these are token validity periods, not a promise of storage after closing the tab. Expired optional history is removed on the next history access. Necessary sessionStorage keys: stoodia.web.session.v2 (account tokens and email) and stoodia.web.accessToken.v1 (compatibility access token)."
        ],
        [
          "No advertising or payment trackers",
          "No advertising cookies, Google Analytics, Yandex Metrica or payment SDKs are enabled on this website. The preference record is necessary to honour your storage choice. Clearing site data removes it. Blocking browser storage must still allow the current sign-in flow to return to the requested address."
        ],
        [
          "Return after sign-in",
          "After successful sign-in or registration, the account retains up to five requested service routes for up to 30 days to offer continuation in another browser or after tabs close. Records contain the service identifier, relative path and time, not sign-in codes, passwords, document text or research data. A route can include a document identifier. This functional continuation of a requested journey is separate from optional localStorage history and stays in its own contour. Reading it requires sign-in to the same account; later visits do not automatically redirect. In the account you can forget one route or clear routes. Expired records are removed on subsequent use of the feature."
        ]
      ]
    },
    "consent": {
      "title": "Consent for a contact request",
      "sections": [
        [
          "Specific purpose",
          "By selecting the initially unchecked contact-form box, I authorise Latyshov Mikhail, Individual Entrepreneur in Tbilisi, Georgia, to process the information I submit to answer my request and discuss the work I requested. This is separate from the terms of use, persistent browser history and marketing. The controller’s contact details appear below."
        ],
        [
          "Data and recipients",
          "My name, email, optional organisation and other contact, category, task description, language and submission information are received, recorded, stored and used by the responsible team, with corrections and deletion as appropriate. The request is stored in the protected central dashboard. Email notifications contain the submitted details; Telegram notifications carry only a reference and protected dashboard link."
        ],
        [
          "Withdrawal",
          "Consent lasts until the request is completed or I withdraw it. To withdraw, contact the controller with my request reference or the email used in the form. Withdrawal does not invalidate earlier lawful processing; data required for legal duties or claims may be retained on another lawful basis. Without the box, the form does not submit; other contact options are available on the contacts page."
        ]
      ]
    }
  },
  "telegram": "https://t.me/mlatyshov",
  "productEmail": "vision@stoodia.org",
  "hosting": "Protected infrastructure operated by the controller and selected providers",
  "mailProvider": "Message-delivery providers required to send notifications"
}
