Who is responsible
Inavi LLC operates Rallo. This policy covers rallo.ge, staging.rallo.ge, and the Rallo mobile apps. The venue that provides your court may separately decide how it uses information it receives to fulfil your booking. Contact us using the details below for questions about Rallo's processing.
Information we collect
We collect the name, phone number or email you give for an account, sign-in, and booking; booking details such as venue, court, time, price, and status; and messages you send to us. A club inquiry also includes the venue name, your contact details, and your message. We record limited device, session, request, and security data needed to run and protect the service. Optional account features may hold a derived quiz level or a private eligibility preference. Raw quiz answers stay in your browser tab and are not sent to Rallo. In the mobile app, we also record search and checkout-view events with a random pseudonymous journey ID stored on your device; it is not derived from your name, contact details, or account. If you enable push notifications, we store an Expo push token linked to your session.
Why we use it
We use account and contact details to authenticate you, manage your account, process booking requests, show your receipts, send necessary service messages, answer inquiries, and resolve cancellations or payment issues. We use operational records to secure the service, prevent abuse, support users, and meet applicable accounting or legal duties. These activities rely, as appropriate, on providing the service you request, legal obligations, and our legitimate interest in operating a secure booking platform. Optional analytics on rallo.ge runs only after your separate choice. We do not use booking contact details for direct marketing without the required consent. We use these first-party mobile events to understand search and checkout journeys and improve the booking service. If enabled, the push token lets us send booking updates and watched-slot notices.
Who receives information
A participating venue receives the details it needs to manage your court booking. Where a venue uses a connected booking or hosted-payment provider, the necessary name, contact, slot, and booking reference are shared with that provider; the payment page may collect payment details under its own notice. Rallo does not store your card number. Our hosting, email and SMS suppliers process information needed to operate the service. On the venue map, your browser may request map tiles from OpenFreeMap, exposing your IP address and the public venue location. We disclose information to authorities when legally required. When you enable app push notifications, Expo processes the push token and notification content needed for delivery.
Cookies, analytics, and local storage
Essential cookies keep your language, session, and security state. On rallo.ge, optional Google analytics tags load only if you accept analytics; you can reject them or change your choice at any time in Cookie settings. The preference cookie lasts up to 365 days. Analytics is disabled on staging.rallo.ge. The app may keep a copy of your own booking receipts on your device for offline viewing; signing out removes those saved receipts.
How long we keep data
We keep information while needed for the purposes above, then delete or anonymize it unless law or a documented dispute, security, or accounting need requires longer. Club inquiries are deleted after one year. Some sign-in and abuse-prevention evidence is deleted after 30 days. Closing your account removes your name and contact details and ends your sessions, but linked booking and financial records may remain without those identifiers where necessary. A future active booking must be resolved before account closure. Copies held by venues or other providers follow their own retention practices.
International processing and security
Some service providers may process information outside Georgia. Contact us for details of a particular transfer and its safeguards. We limit access by role, use encrypted connections, and protect account credentials and provider secrets. No online service can guarantee absolute security.
Your choices and rights
You may ask to access, correct, erase, restrict or object to processing of your personal data, and withdraw consent where processing is based on consent. You can update account details or close your account in your profile, subject to an active booking and lawful record holds. Contact us using the address below for other requests; we may verify your identity before disclosing account data. You may also complain to the competent Georgian data-protection authority or a court.
Changes to this policy
We may update this policy as the service changes. We will post the revised date here and give additional notice when a change materially affects how we use your information.
Service operator
Inavi LLC · 404815875
95 Lvovi Street, Tbilisi, Georgia