This Privacy Policy (“Policy”) describes how Realyze (“Realyze,” “we,” “us,” or “our”) collects, uses, and shares information when you access or use the Realyze website, applications, and related services (collectively, the “Service”). By using the Service, you agree to the practices described in this Policy. This Policy should be read together with our Terms of Service.
1. Information We Collect
We collect information you provide directly, information generated through your use of the Service, and information from limited third-party service providers we rely on to operate the Service.
Account information. When you create an account, we collect your email address and an authentication credential (e.g., a password you set or a one-time code), along with any optional profile details you choose to provide. Authentication is handled through our hosting and infrastructure providers described in Section 4.
Deal and usage content. When you use the calculators, save deals, or build models in your dashboard, we store the inputs and outputs you create (e.g., property addresses, purchase price, rent assumptions, calculator results, notes). This content is associated with your account so that you can return to it later.
Payment information. If you subscribe to a paid plan, payment processing is performed by our payment processor (Stripe). Realyze does not receive, store, or have access to your full payment card number. We receive a Stripe customer identifier, subscription status, plan and billing interval, the current billing-period end date, whether the subscription is set to cancel at period end, and limited transaction metadata (e.g., the last four digits of your card, country, and ZIP code as reported by the processor) which we use to provision and manage your subscription and to gate access to paid features.
Beta invite codes. While Realyze is in beta, we may distribute invite codes that grant free access at the Premium tier. When you submit a code we record that you redeemed it (a flag on your profile), which we use to grant beta access and to understand how the program is performing. We do not associate invite codes with any third-party identity beyond your Realyze account.
Support communications. If you contact us through the in-app support form or by email, we collect the contents of your message, your email address, and any attachments or context you provide so that we can respond. Support messages are delivered through our transactional email provider (Resend) on our behalf.
Technical and log data. Like most web services, we and our hosting provider automatically collect limited technical information when you access the Service, including IP address, browser type, device type, referring page, pages requested, error traces, and timestamps. This information is used to operate, secure, and debug the Service.
Cookies and similar technologies. We use cookies and similar mechanisms strictly necessary to keep you signed in, remember your session, and secure the Service against abuse. We do not currently use advertising cookies, third-party trackers, or cross-site behavioral profiling.
2. How We Use Information
We use the information described above to:
- Provide, maintain, and operate the Service.
- Authenticate you, secure your account, and detect or prevent fraud, abuse, or unauthorized access.
- Process subscriptions, send billing-related notices (e.g., receipts, renewal reminders, failed-payment notices), and meet tax and accounting obligations.
- Respond to your support requests and other communications.
- Improve the Service, including diagnosing technical problems, measuring reliability, and developing new features.
- Comply with applicable law, regulation, and legal process.
We do not sell your personal information, and we do not share it with third parties for their own advertising or marketing purposes.
3. How We Share Information
We share information only as needed to operate the Service or comply with the law:
- Service providers. We use a small set of vendors (described in Section 4) to host, authenticate, process payments, and deliver email on our behalf. These vendors may only use the information to provide their services to us.
- Legal and safety. We may disclose information when we believe in good faith that disclosure is required by law, legal process, or to protect the rights, property, or safety of Realyze, our users, or the public.
- Business transfers. If Realyze is involved in a merger, acquisition, financing, or sale of assets, information may be transferred as part of that transaction, subject to continued protection consistent with this Policy.
4. Third-Party Service Providers
Realyze is built on top of a limited number of infrastructure providers. Each provider only receives the information needed to perform its function:
- Vercel — hosting and edge delivery of the Service. Receives request and log data necessary to serve the application.
- Supabase — authentication and database storage. Stores your account credentials, profile (including the beta flag if applicable), the deals and inputs you save, and the subscription state mirrored from Stripe.
- Stripe — payment processing and subscription management for paid plans. Stripe collects and stores payment card details on our behalf under its own privacy practices. We receive a customer identifier and the subscription metadata described in Section 1 via Stripe webhooks.
- Resend — transactional email delivery (e.g., support form submissions, account verification, password resets, and billing notices). Receives the email addresses and message contents needed to deliver the message.
Each of these providers is subject to its own privacy policy. We encourage you to review them to understand how those providers handle information.
5. Data Retention
We retain account and deal information for as long as your account is active or as needed to provide the Service. Subscription state (active or canceled) is retained for the life of your account so that paid and beta entitlements continue to work correctly. Billing and tax records held by Stripe on our behalf are retained for the period required by applicable law. Support communications and log data are retained for a limited period sufficient to operate and secure the Service. You may request deletion of your account and associated content as described in Section 7; we may retain certain limited information after deletion as required by law (for example, transaction records held by Stripe).
6. Security
We use commercially reasonable administrative, technical, and organizational measures to protect information against unauthorized access, loss, misuse, or alteration. These include encryption in transit, access controls, and reliance on established infrastructure providers. No system is perfectly secure, however, and we cannot guarantee absolute security. You are responsible for keeping your account credentials confidential and notifying us promptly of any suspected unauthorized access.
7. Your Choices & Rights
You may update or correct your profile information by signing into your account, and you can cancel a paid subscription at any time from your account page (which opens the Stripe customer portal). You may request access to, correction of, or deletion of the personal information we hold about you by contacting us through our support page or at the address posted on realyze.studio.
Depending on where you live, you may have additional rights under applicable law (for example, under the California Consumer Privacy Act, the California Privacy Rights Act, and similar U.S. state laws). These may include the right to know what personal information we have about you, the right to delete it, the right to correct it, and the right not to be discriminated against for exercising these rights. To exercise these rights, contact us at the address above. We do not sell personal information, and we do not engage in cross-context behavioral advertising as those terms are defined under applicable U.S. state privacy laws.
8. Children’s Privacy
The Service is not directed to children under 18, and we do not knowingly collect personal information from children under 18. If you believe a child has provided us with personal information, please contact us and we will take appropriate steps to remove it.
9. International Users
Realyze is operated from the United States, and information we collect is processed and stored in the United States and other jurisdictions where our service providers operate. If you access the Service from outside the United States, you understand that your information may be transferred to, processed, and stored in the United States, which may have data protection laws different from those of your jurisdiction.
10. Changes to This Policy
We may update this Policy from time to time. If we make material changes, we will provide reasonable notice (for example, by posting on the Service or sending email). Your continued use of the Service after the effective date of any updated Policy constitutes acceptance of the updated Policy.
11. Contact
Questions about this Policy, or requests related to your personal information, can be sent through our support page or to the contact address posted on realyze.studio.