Privacy Policy

1. Who we are

The Services are provided by Realla AI, Inc.(“Realla,” “we,” “us,” or “our”), a Delaware C Corporation (Delaware File No. 10620062). Realla is responsible for the personal information described in this policy. Business correspondence address: Kohllohstr 15, 95666 Mitterteich, Germany. For privacy questions or to exercise your rights, contact ceo@realla.ai.

2. Information we collect

Depending on how you use Realla, we may process:

• Account details: your name, email address, and password (stored only as a one-way hash), plus support correspondence.
• Report inputs: property addresses, listing links, your answers to our intake questions (such as investment strategy, budget, financing, and timeline), and logo or agent photos you upload for report branding.
• Reports: the reports generated for you and their status.
• Order and billing records, if you purchase a paid product: product, amount, transaction identifier, payment status, and refund history. We do not need or store full payment-card details.
• Technical and usage data: IP address, browser and device information, server log events, and security events such as rate-limit checks on sign-in and sign-up.
• Cookies: the strictly necessary cookies described in our Cookie Policy.
• Communications: information you include in messages you send us.

3. Where information comes from

We collect information directly from you and automatically when you use our website. To generate a requested report we also obtain property information from third-party and public data sources (see section 7). Such sources may contain information about a property or its ownership. Please do not submit confidential or sensitive personal information unless you are authorized to do so and it is necessary.

4. How and why we use information

We use personal information to create and manage accounts; authenticate users; generate and deliver requested reports; send account emails such as verification and password reset; process transactions and refunds where applicable; respond to support and privacy inquiries; detect abuse, fraud, or security incidents; maintain, troubleshoot, and improve the reliability of the Services; and comply with accounting and legal duties. We will send product news or marketing emails only if you have opted in where the law requires it.

5. Legal bases for processing (EEA/UK)

Where the GDPR or similar rules apply, our legal bases include: performance of a contract, for account management and delivering reports; compliance with legal obligations, for financial, tax, and regulatory recordkeeping; our legitimate interests in securing, troubleshooting, and improving the platform, balanced against your rights; and consent, for optional cookies or promotional communications where required. You may withdraw consent at any time without affecting processing already lawfully carried out.

6. AI tools and property reporting

To produce a report, we use automated systems, including external AI model providers acting on our instructions. Property information and your intake answers are sent to those systems to write report commentary. Results can contain errors and should be checked by a qualified human. Realla reports are designed to inform property evaluation, not to make decisions about an individual's eligibility for housing, credit, insurance, employment, or similar legally significant matters. Please do not upload personal or confidential files you are not authorized to disclose.

7. Who receives information

We do not sell your personal information, and we do not share it for targeted advertising.

We share information with service providers only as needed to run the Services:

If we introduce paid checkout, payments will be handled by a payment processor, and we will update this policy to name it. We may also share information with professional advisers under confidentiality obligations, with authorities where lawfully required, or as part of a corporate transaction subject to appropriate safeguards. We share a report with others when you choose to do so.

8. International transfers

We are a US-incorporated company with a business contact address in Germany, and our service providers may process information in the United States and other countries. Where EU or UK data transfer rules apply, we use an available lawful transfer mechanism, such as an adequacy decision or standard contractual clauses. Contact us to request information about the safeguards that apply.

9. Data retention

We keep account information while your account is active and for a reasonable period afterwards as needed for account administration, legitimate business purposes, and legal obligations. We keep order and tax records for the periods required by law, support requests as long as needed to resolve and document them, and technical logs for security and operational needs. Email verification links expire after 24 hours and password reset links after 1 hour. Report inputs and generated reports are kept while your account is active so you can access them. We delete or de-identify information when it is no longer reasonably necessary, unless law or a pending dispute requires us to keep it.

10. Cookies

We currently use only strictly necessary cookies, for sign-in and security. We do not use analytics or advertising cookies. If we add optional cookies, we will ask for your consent first where the law requires it. See our Cookie Policy.

11. Your rights and choices

Depending on where you live, you may have rights to access, correct, delete, or receive a copy of your personal information; to object to or restrict certain processing; to withdraw consent; and to appeal a decision about a privacy request. To make a request, email ceo@realla.ai. We may need to verify your identity, and we may keep records needed to comply with law. You may also lodge a complaint with a competent data protection supervisory authority.

12. California and other US state privacy rights

Residents of states with consumer privacy laws may request information about the categories of personal information we collect, the purposes, and the disclosures we make, and may exercise the rights those laws provide. We do not sell personal information or share it for cross-context behavioral advertising. If that ever changes, we will provide the required opt-out mechanism and honor applicable preference signals. To make a request, email ceo@realla.ai.

13. Security

We use reasonable administrative, technical, and organizational measures designed to protect information, including encrypted connections (TLS) and hashed passwords. No transmission or storage method is perfectly secure. Please use a strong password and contact us if you suspect unauthorized account activity.

14. Children

The Services are intended for adults aged 18 or older and are not directed to children. If we learn that we collected a child's personal information without a lawful basis, we will take appropriate steps under applicable law.

15. External websites and links

The Services may refer to listing platforms, mapping services, and other third-party websites. Their privacy practices are governed by their own notices, and we do not control them.

16. Changes and contact

We may update this policy as our services or legal requirements change. We will post the revised policy with a new effective date and, where the law requires it, give additional notice or ask for consent.