All legal documents
Legal

Privacy Policy

Privacy disclosures for website visitors, prospects, customers, and authorized users of the Reala platform.

Effective date: April 12, 2026

1. Scope

This Privacy Policy explains how Avestan Ltd., the operator of Reala ("Reala," "we," "our," or "us"), collects, uses, discloses, and protects personal information in connection with:

  • the Reala marketing site;
  • demo requests, waitlists, support, and sales communications;
  • the Reala application and related hosted services; and
  • any other interactions that link to this Privacy Policy.

If Reala processes personal information solely on behalf of a customer as a processor or service provider, that customer's privacy notice governs the customer's relationship with the relevant individuals.

2. Information We Collect

We may collect the following categories of information:

A. Information you provide directly

  • name, work email, phone number, brokerage, team, role, and market;
  • account credentials and profile information;
  • sales, support, and demo request details;
  • files, prompts, notes, messages, and other content submitted to the Service; and
  • billing, invoicing, and contracting information.

B. Information collected automatically

  • device, browser, and log information;
  • IP address and approximate location inferred from IP;
  • pages viewed, referral URLs, and session interactions on the website;
  • service usage metrics, feature activity, and diagnostic information; and
  • cookie, local storage, session, and similar technology data described in the Cookie Policy.

C. Information from third parties

  • referrals, integrations, or account invitations from Customer administrators;
  • data provided by calendar, form, authentication, storage, or email providers used with the Service; and
  • publicly available business information relevant to demos, account qualification, or support.

3. How We Use Information

We use personal information to:

  • provide, maintain, secure, and improve the Service;
  • create and administer accounts;
  • process uploaded content and run workflow or AI features requested by users;
  • communicate about demos, onboarding, support, renewals, billing, or product updates;
  • monitor performance, troubleshoot issues, and detect fraud or misuse;
  • comply with legal obligations and enforce our agreements; and
  • develop aggregated and de-identified insights about product usage and market demand.

4. Legal Bases

Where required by applicable law, we rely on one or more of the following legal bases:

  • performance of a contract;
  • legitimate interests, such as improving the Service, securing systems, and communicating with business contacts;
  • consent, where required;
  • compliance with legal obligations; and
  • establishment, exercise, or defense of legal claims.

5. How We Disclose Information

We may disclose personal information to:

  • hosting, infrastructure, authentication, database, storage, form, scheduling, email, and support vendors acting on our behalf;
  • AI and automation providers used to power requested features;
  • payment processors, accountants, auditors, insurers, and professional advisers;
  • Customer administrators and other authorized users within the same workspace, based on the account's permissions and settings;
  • law enforcement or other parties when required by law or necessary to protect rights, safety, and security; and
  • a buyer, investor, or successor in connection with a merger, financing, acquisition, reorganization, or sale of assets.

Reala does not sell personal information for money and does not use an advertising cookie stack on the marketing site. If Reala adds behavior-based advertising or a materially different analytics setup, this Privacy Policy will be updated before that change goes live.

Current third-party processors and service providers include:

  • Hetzner for cloud hosting of the live marketing and application environment;
  • Clerk for user authentication and account session management in the product;
  • Supabase for hosted Postgres and application storage services;
  • Resend for transactional email delivery and webhook processing;
  • Calendly for demo scheduling workflows;
  • Tally for pre-call form collection; and
  • Anthropic for AI-assisted summaries, workflow suggestions, and file-aware chat features in the product.

6. Customer Data

Customers control the categories of Customer Data they upload to the Service and the users they authorize to access it.

Customers are responsible for:

  • deciding what information to submit;
  • providing any required privacy notices or obtaining required consents;
  • configuring account permissions and retention settings; and
  • responding to data subject requests that relate to Customer Data for which the customer is the controller or business.

7. International Transfers

Reala and its service providers may process information in Canada, the United States, the European Union, and other jurisdictions where Reala or its subprocessors operate.

When required, Reala will use appropriate transfer safeguards, such as contractual commitments, transfer assessments, or other legally recognized mechanisms.

8. Data Retention

We keep personal information for as long as reasonably necessary for the purposes described in this Privacy Policy, including to:

  • provide the Service;
  • maintain security and backup records;
  • comply with legal obligations;
  • resolve disputes; and
  • enforce agreements.

Retention periods depend on the type of information, the account configuration, legal requirements, and whether the information is tied to active subscriptions or support matters.

9. Security

We use administrative, technical, and organizational measures designed to protect personal information. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

10. Your Choices and Rights

Depending on where you live and the role in which Reala processes your data, you may have rights to:

  • access, correct, or delete certain personal information;
  • object to or restrict certain processing;
  • withdraw consent where processing is based on consent;
  • request portability of certain information; and
  • complain to a supervisory authority.

To exercise rights, contact contact@reala.agency. We may need to verify your identity and the request will be handled according to applicable law.

If you are an employee, contractor, or client of a Reala customer, please direct your request to that customer first when the request relates to Customer Data.

11. Marketing Communications

You can opt out of non-essential marketing emails by using the unsubscribe link in the message or by contacting us at contact@reala.agency. We may still send transactional or service-related communications.

12. Children's Data

The Service is intended for business use and is not directed to children under 16. We do not knowingly collect personal information directly from children under 16.

13. Changes

We may update this Privacy Policy from time to time. If we make material changes, we will post the updated version with a revised effective date and provide additional notice where required.

14. Contact

For privacy questions or requests, contact:

  • Privacy email: contact@reala.agency