Privacypolicy

01Who is responsible for your data

The website www.mody.ge and the Mody booking service are operated by LLC Mtislab, Farnaoz Lapiashvili St 6, Tbilisi, Georgia (“Mody”, “we”, “us”). We decide how your personal data is used and are responsible for it.

We process personal data in line with the Law of Georgia on Personal Data Protection. This policy explains what we collect when you search for and buy bus tickets on Mody, why, who we share it with and the rights you have.

Questions or requests: support@mody.ge.

02What we collect

When you book a ticket

• Passenger first and last name and ID or passport number, exactly as you enter them.
• Contact email address and mobile number.
• Trip details: route, date and time, the flight the bus is matched to, number of passengers, price, promo code if you use one, and your booking reference.

When you create an account

• Your name, email address and password. Passwords are stored only in encrypted (hashed) form by our sign-in provider — we cannot read them.
• Optional details you add: mobile number, saved passengers (name and ID number) and notification preferences.
• If you sign in with Google, Google shares your name, email address and profile picture with us. We use your name and email address.

When you pay

• You enter your card or internet-banking details directly on TBC Bank’s payment page. We do not receive or store full card numbers.
• TBC Bank tells us the payment ID, amount, status and, where TBC provides it, a masked card number (for example 4154 •••• •••• 8365).

Automatically

• Your IP address, which we pass to TBC Bank with each payment to help prevent fraud.
• Standard technical logs kept by our hosting providers (IP address, browser type, pages requested, time).
• A few items stored in your browser — see Cookies and browser storage.

03How we use it

We do not use your data for automated decisions that have legal or similarly significant effects on you, and we do not sell personal data.

04Who we share it with

• Georgian Bus — the carrier that operates the bus. To issue your ticket we send them the trip, the number of passengers and your mobile number. Georgian Bus uses this under its own privacy terms.
• JSC TBC Bank — processes your payment. We send the amount, your booking reference and your IP address; you give your card details to TBC Bank directly.
• Supabase — hosts our database and account sign-in. Your data is stored on Supabase servers in Mumbai, India.
• Vercel — hosts the website and delivers it through its global network.
• Google — if you choose Google sign-in. Our pages also load fonts from Google Fonts, which receives your IP address when a page loads.
• jsDelivr — delivers a software library used by the site and receives your IP address when a page loads.
• Authorities — when Georgian law requires us to disclose information, or to protect our rights and the safety of others.

05Data stored outside Georgia

Our database is located in India, and some of our providers process data in the European Union and the United States. When data leaves Georgia we rely on our providers’ data-protection agreements and security measures, and we only use providers that commit to protecting personal data.

06How long we keep it

• Account and saved passengers — until you remove them or delete your account.
• Bookings and payments — for as long as needed to provide your trip and handle questions or refunds, and then for the period required by Georgian tax and accounting rules. If you delete your account, these records are kept separately and are no longer linked to it.
• Unfinished or failed payments — kept with booking records for security and accounting checks.
• Technical logs — for the limited periods set by our hosting providers.

07Your rights

Under Georgian data-protection law you can ask us to:

• tell you what data we hold about you and give you a copy;
• correct data that is wrong or incomplete;
• delete your data, or stop or restrict how we use it;
• withdraw consent you have given (for example to offers);
• transfer data you gave us to you or to another company, where this applies.

You can do most of this yourself in your profile: edit your details and saved passengers, turn notifications on or off, or delete your account. For anything else write to support@mody.ge from the email address on your booking or account. We reply within the time limits set by Georgian law and may ask you to confirm your identity first.

If you think we have handled your data unlawfully, you can complain to the Personal Data Protection Service of Georgia (pdps.ge).

08How we protect it

• All pages and connections use HTTPS encryption.
• Database rules ensure that each signed-in customer can only read their own account, passengers and bookings. Bookings can only be created by our server.
• Payment card details are handled by TBC Bank, not by Mody.
• Keys for our partners’ systems are kept in an encrypted vault on the server, never in the website’s code.

No online service can be completely secure. If a breach affects your data, we will tell you and the authorities as Georgian law requires.

09Children

You must be at least 18 years old to create an account or buy tickets. Children can travel on tickets bought by a parent or guardian, who provides the child’s details and confirms they are allowed to do so.

10Cookies and browser storage

Mody does not use advertising or analytics cookies, tracking pixels or third-party ad networks. We store only what the site needs to work:

These are kept in your browser’s local and session storage. TBC Bank’s payment page and Google’s sign-in page set their own cookies under their own policies.

11Changes to this policy

We may update this policy when our service or the law changes. The date at the top shows the latest version. If a change significantly affects how we use your data, we will tell you on the website or by email before it applies.

12Contact