Data Requests

• Access: whether we hold data about you, and a copy of it.
• Correction of data that is wrong or incomplete.
• Deletion of your data, except what the law requires us to keep.
• Restriction: pausing the use of your data while a question about it is resolved.
• Portability: your data in a structured, machine-readable file.
• Objection to processing based on legitimate interest, and withdrawal of consent.

See the Privacy Policy for what we hold and why.

• Residents, guests and staff of a property: the property you live at or work for is responsible for your data, so ask it first. It will act on your request with our help. You can also write to us and we will pass the request on to the property and support it.
• Founders, operators and anyone else: write to us directly at zuka@meurneoba.ge, or, if you are signed in, open a ticket at Support with the category data request.

Say what you want, and include the email you use for Meurneoba OS and the property's name. To protect you, we confirm that the request comes from you, normally by replying to the email on your account, before we send or delete anything.

• We answer within 10 working days of receiving the request, as Georgian law requires.
• If a request is complex, we may extend this once, by up to 10 more working days. We tell you why within the first 10 days.
• When we restrict processing at your request, we confirm it within 3 working days.
• When you withdraw consent, we stop that processing and delete the data concerned within 10 working days.

These deadlines are shorter than the GDPR's one month, so they meet both laws.

Requests are free. Only where the law allows, for a request that is clearly unfounded or excessive (for example repeated very often), may we refuse it or ask a reasonable fee, and we explain why.

The property's founder handles requests in Meurneoba OS (Settings → Personal data), and each one is recorded. Corrections are made directly on your account or home.

• Copies come as one machine-readable file (JSON) with everything held about you in that property, sent to you by a safe channel.
• Deletion anonymises your name, email and phone, closes your account and ends your sessions, removes your home links, Telegram links and staff record, and removes your email from the audit log. It cannot be undone.

• Financial records (statements, payments, ledger entries) stay for as long as accounting and tax law requires, linked to an anonymous reference instead of your name where the law allows.
• Backups keep a copy for up to 30 days, after which they are deleted automatically. A deleted record is not restored from a backup except to recover from a failure, and is deleted again if that happens.
• A short record of the request itself, so we can show it was handled.
• Data inside a connected hotel or point-of-sale system is not deleted by deleting it here. Ask the property, which can remove it in that system.

You can complain to the State Audit Office of Georgia, which supervises personal data protection in Georgia, or go to court. If you live in the EU, you can also complain to your country's data protection authority.