Privacy Policy

Last updated: 23 October 2026

1. Controller

Real IQ LLC (in formation; incorporation in the State of Wyoming, USA, is in preparation), e-mail: stefan@real-cyprus.com, phone: +90 533 820 01 19.

2. Applicable law

For individuals in the European Union and the United Kingdom we process personal data under the General Data Protection Regulation (GDPR) and the UK GDPR. In all other cases we process personal data under applicable United States law.

3. What data we process and why

AreaDataPurposeLegal basis
Website and demo sign-upname, e-mail, company, phone (optional), technical access dataprovide the demo, contact about the productconsent or pre-contractual steps
Customer accountusers' names and e-mail addresses, role, login timescontract performance, securitycontract
Billingcompany name, billing address, tax number, payment statusinvoicing, statutory retentioncontract, legal obligation
Card paymentcard data is processed only by our bank; we receive the payment result and a masked card numberpaymentcontract
Supportcontent of the request, contact detailsanswer requestscontract or legitimate interest
Data in CRM workspaceseverything customers enter (e.g. prospects, contacts)processing on behalf of the customerdata processing agreement; the customer is the controller

4. Artificial intelligence

Some features send text to an AI service provider to generate descriptions, translations or summaries. Only the content needed for the feature is transmitted. AI-generated content is labelled. According to the provider, the data is not used to train its models (checked 13 Sept 2026 against the current OpenAI policy: business customers' API data is not used for training by default, only after an explicit opt-in).

5. Recipients and service providers

We use carefully selected service providers that process data only on our instructions: database hosting (Supabase, Frankfurt data centre, EU), delivery and storage (Cloudflare), AI processing (OpenAI, Anthropic), e-mail (Google Workspace, Resend), maps (Mapbox), notifications (Telegram, only if enabled by the user), payment processing. A current list is available on request.

6. Transfers abroad

Some providers process data outside the European Economic Area, in particular in the USA. Where we transfer personal data out of the EEA or the United Kingdom, we rely on appropriate safeguards, in particular the EU standard contractual clauses.

7. Retention

Account data is kept for the term of the contract. Workspace data is deleted after the contract ends as set out in the Terms (30-day export, deletion within 60 days). Billing data is kept as long as tax law requires. Demo sign-ups without a contract are deleted after 12 months.

8. Security

Encrypted transmission (TLS), separation of workspaces per company, role-based access, change logging, regular backups.

9. Cookies and analytics

The application uses only storage that is technically necessary for login. On the product website we set analytics or advertising cookies only with consent. (Checked 5 Oct 2026 in the source code of real-cyprus.com: no analytics or advertising tool is integrated and no cookies are set. The scripts only remember the chosen language in the browser's local storage, send the inquiry form, play the product film and, on the contact page, protect the e-mail addresses against spam bots via Cloudflare.)

10. Your rights

You have the right of access, rectification, erasure, restriction of processing, objection and, where applicable, data portability, and the right to withdraw consent. We answer requests within 30 days. If your request concerns data a customer entered into its workspace, we forward it to that customer.

11. Complaints

Individuals in the European Union may complain to the supervisory authority of their country of residence; individuals in the United Kingdom to the Information Commissioner's Office (ICO).

12. Changes

We update this policy when services or the law change. The version published here applies.