Privacy policy — SHARK DEV

1. Who is responsible for your data

The controller of the personal data collected through the English version of this website is FINDCAR LLC, a company registered in Georgia, which represents SHARK DEV outside Russia. SHARK DEV is a technology company that builds and supports digital products for businesses.

Phone: +374 91 539507
Telegram: @FINDCAR_support_bot
Registered address: 15 Tskneti I Dead End, Tbilisi, Georgia
Website: en.shark-dev.com

Company details: FINDCAR LLC, Identification Code 405864685, registered address: 15 Tskneti I Dead End, Tbilisi, Georgia.

Questions about how we process personal data, withdrawal of consent and requests to exercise your rights: write to our Telegram bot @FINDCAR_support_bot, call +374 91 539507 or send a letter to the registered address above. The same contacts are given in sections 5, 9 and 12.

FINDCAR LLC has not appointed a representative in the European Union under Article 27 of the GDPR: requests through this website are processed occasionally and on a small scale, do not include special categories of data and are unlikely to result in a risk to your rights and freedoms (Article 27(2) GDPR).

2. What data the website collects

The only place where the website asks you for anything is the request form “Tell us what you do by hand today” on the home page. It has five fields:

Name — your name or how we should address you. Required.
Company — the name of your organisation, if you write on its behalf. Optional.
Phone or email — the contact for our reply. Required.
What you want to change — free text. Optional; you decide what to write.
Budget — a choice from a fixed list (“Prefer not to say”, “Not set yet”, “After discovery”, “Approved”). There are no amounts in this field and no way to enter them. Optional.

Technical data is added to the fields: the address of the page the request was sent from, the time it was sent and the IP address it came from. The first two help us understand where the question came from; the IP address is recorded by the request receiver to block automated submissions (section 6).

The website asks for nothing else: there is no registration, user account, payment or file upload.

Visit data. Visit statistics are collected by Google Analytics, and only with your consent: on your first visit the website asks in a banner at the bottom of the screen whether it may be used. If you click “Allow”, Google Analytics receives data about your visit — what data, who receives it and how to opt out is described in section 7. If you decline or do not answer, Google Analytics is not loaded.

3. What the website does not do

It does not set cookies or load third-party trackers without your consent. The only thing it remembers is your answer in the banner — “allow” or “decline” — in your browser storage (localStorage), without cookies and without data about you; after a year it asks again.
It does not use advertising pixels or tags. The only counter is Google Analytics, and it works only with your consent (section 7).
It does not collect payment details, passport data or scans of documents.
It does not use visit data for advertising and does not make automated decisions about visitors.
It does not ask for special categories of personal data — about health, beliefs or private life. The “What you want to change” field is free text: please do not include such information or other people’s personal data in it.
It is not intended for children: the form is meant for business correspondence by people aged 18 and over. If a child’s data has been sent through the form, contact us (section 1) and we will delete it.

4. Why we need this data

There is one purpose: to contact you about your request, understand the task and reply. We need your name to address you and your contact so that the reply reaches you; the company name, task description and budget range help the right person answer and keep the conversation from starting from scratch.

Visit data serves a different purpose: understanding which sections people read and where they leave, so that we can improve the website. It is collected only if you allowed Google Analytics.

Request data is not used for mailings, advertising or sale. It is shared only with service providers acting on the controller’s instructions and bound to keep it confidential; everyone who can see the data along the way is listed in sections 6 and 7.

We collect, record, organise, store, update, use, transfer to service providers acting on our instructions, anonymise, restrict, erase and destroy this data, both with and without automated means.

5. Legal basis

The basis for processing the request form data is your consent. It is set out in a separate document — “Consent to the processing of personal data”. You give it by ticking the box next to the form: the box is not ticked in advance, and the request cannot be sent without it. For visitors in the European Union and the European Economic Area this is consent under Article 6(1)(a) of the General Data Protection Regulation (GDPR).

You may withdraw your consent at any time through the contacts in section 1 — the Telegram bot or the phone. Withdrawal does not affect the lawfulness of processing before it; after it, processing stops and the record of your request on the server and the message with it in the Telegram group are deleted.

Server access logs and the IP address recorded with a request are processed on the basis of our legitimate interest in keeping the website secure and protecting the form from automated submissions (Article 6(1)(f) GDPR).

Visit statistics are also based on consent, given separately with the “Allow” button in the banner. Without it Google Analytics is not loaded and the website works the same. You can withdraw this consent at any time: “Cookie settings” in the footer of any page, then “Decline” — the counter stops loading and its cookies are deleted from your browser.

Filling in the form is optional: the website lists direct contacts — phone and Telegram — and you can call or write without leaving anything in the form.

6. Where your request goes

The form sends the completed fields to the controller’s server, which is located outside the Russian Federation, in the Netherlands. The request does not pass through third-party form services and is not sent by email. Two things happen to it on the server:

Record. The request is written to a file on the server, so it is not lost even if the Telegram message is not delivered. Only the controller has access to the file; how long it is kept is set out in section 8.
Telegram message. The controller’s bot sends the request in full — your name, contact, company, task description, budget range, the page address and the time — to the working group of FINDCAR LLC in Telegram. Only the FINDCAR LLC employees who handle requests are members of this group. Telegram’s servers are located outside the Russian Federation.

If the server is unavailable, the form shows an error with our phone and Telegram; the data does not go anywhere and stays in the form fields.

Messengers

The website’s contacts include a link to the FINDCAR LLC bot in Telegram, @FINDCAR_support_bot. Writing to it is your choice, and the conversation is governed by Telegram’s terms; Telegram’s servers are located outside the Russian Federation. The controller’s server outside the Russian Federation forwards your messages to the FINDCAR LLC working group, and a person replies to you.

AI assistant on the website

The website has an assistant — a program that answers questions based on the website’s content and can put together a request. A conversation starts only after you agree in the assistant window. Your messages go to the controller’s server outside the Russian Federation and from there to a language model: via OpenRouter, Inc. (USA) to a model by Anthropic, PBC (USA). This is a transfer of data to the United States, so please do not write personal data in the chat: the assistant asks for your name and contact separately, and only for a request. Anthropic does not use data sent through its API to train models; request logging is disabled in the OpenRouter settings.

The conversation is kept on the server for no more than 30 days, without your IP address, so that we can check the assistant’s answers, and is then deleted automatically. A request from the conversation is sent only after you click the button in the request card, and then follows the same path as a request from the form (items 1–2 above), marked “from the assistant”.

7. What third-party services see

Even if you have not filled anything in, the page is seen not only by the controller when you open it.

Website hosting. The English version is served from a server located outside the Russian Federation, in the Netherlands. The web server keeps access logs: IP address, request time, page address and browser. Logs are kept for 14 days and then deleted automatically.
Telegram carries the request in full to the FINDCAR LLC working group (section 6) and the messages you write to the bot yourself. Telegram’s terms apply.
OpenRouter, Inc. and Anthropic, PBC (USA) — only if you start a conversation with the assistant: they receive the text of your chat messages so that the model can answer (section 6, “AI assistant on the website”). Without a conversation nothing is sent to them.
Telephone operators — if you call us.
Google Analytics — only if you allowed it in the banner. A web analytics service provided by Google LLC (USA); for users in the European Economic Area — by Google Ireland Limited. It receives the addresses of the pages you view and the page you came from, information about your browser and device, your approximate location and actions on the page — clicks on buttons leading to the request form, on phone and Telegram links, opening the assistant, sending a request. It sets its own cookies in your browser (named _ga and _ga_*). Google Analytics does not store IP addresses. What you type into the form fields is not sent. The data is kept in Google Analytics for 2 months; the controller sees it only as aggregated reports. Each cookie and how long it is kept are listed in the Cookie Notice.

There are no social media widgets, third-party chats, maps or embedded videos on the website: the assistant works through the controller’s server, and your visit has no other recipients than those listed here.

Transfers outside your country

The data of the English version is processed on servers outside the Russian Federation. Some recipients are in other countries; each transfer happens only with your consent — the box next to the form, the assistant’s consent window or “Allow” in the banner — and with these safeguards:

OpenRouter, Inc. (USA) — only if you use the assistant: standard contractual clauses approved by the European Commission, included in OpenRouter’s data processing agreement. OpenRouter passes the conversation to Anthropic, PBC (USA) under its own agreement with Anthropic.
Google LLC (USA) — only if you allowed Google Analytics: Google LLC is certified under the EU–U.S. Data Privacy Framework.
Telegram — your request and your messages to the bot: on the basis of your consent; Telegram’s terms apply.

8. How long data is kept

A request is kept in the file on the server for no more than one year from the date it was received and is then deleted automatically. Web server access logs are kept for 14 days (section 7).

Google Analytics data is kept for 2 months. Its cookies stay in your browser until you delete them or decline in “Cookie settings”; your answer in the banner is kept in the browser for a year.

The message with your request is kept in the FINDCAR LLC Telegram group as long as it is needed to reply and work on your request, and is deleted at your request or after you withdraw consent.

A conversation with the assistant is kept on the server for no more than 30 days and is deleted automatically; your answer in the assistant’s consent window is kept in your browser until you clear its data.

In any case, data is kept only as long as the purpose requires: it is deleted when the purpose is achieved, at your request or after you withdraw consent — earlier than any period stated above.

9. Your rights and how to exercise them

Under the Law of Georgia on Personal Data Protection and, for visitors in the European Union and the European Economic Area, under the GDPR, you have the right to:

find out whether we process your data, which data and where it came from, and receive a copy;
have inaccurate data corrected, and have your data restricted or erased;
object to processing based on our legitimate interests;
receive the data you provided in a structured, machine-readable format (data portability);
withdraw your consent at any time;
lodge a complaint with the State Audit Office of Georgia, which has supervised personal data protection since 2 March 2026, or, if you are in the EU/EEA, with the supervisory authority of your country.

To exercise any of these rights, write to our Telegram bot @FINDCAR_support_bot, call +374 91 539507 or send a letter to FINDCAR LLC at the registered address in section 1. So that we can find your request, give the name and contact it was sent from. We reply within the time limits set by applicable law: under the Law of Georgia on Personal Data Protection, within 10 working days (for a request for information or access, we may extend this by up to 10 more working days and will tell you so); under the GDPR, within one month.

10. How data is protected

The main measure is not collecting more than necessary: the form has only two required fields. Requests on the server are stored in a file accessible only to the service account of the request receiver; the server accepts requests only over HTTPS and limits the number of submissions from one address.

Pages and requests are transmitted over a secure connection (HTTPS): the website is published only with a valid certificate and with all requests redirected to HTTPS. In Telegram the request is available only to the members of the FINDCAR LLC working group.

11. Changes to this policy

If the way we process data changes — for example, a new field appears in the form — this policy is updated and the version date at the top of the page changes. Each version is kept by the controller with the date it took effect; earlier versions are available on request through the contacts in section 12. The current version is the one at en.shark-dev.com/privacy.html.

Version of 30 October 2026: the first version of the policy for the English version of the website.

12. Questions about this policy

Write to our Telegram bot @FINDCAR_support_bot or call +374 91 539507. If you would like this policy to answer a question it does not cover yet, tell us which one.

Back to the request form