Realfy – Privacy Policy

This Privacy Policy explains how Realfy Inc. (“we,” “our,” or “us”) collects, uses, shares, and protects your personal and business information when you use our Platform, APIs, and related services (collectively, the “Services”).

Realfy operates an advanced AI platform where Businesses, Agencies, and Individuals build and deploy AI SDR Agents, AI SDRs, and AI Agents. These AI agents are deployed across third-party communication channels (such as Meta, Instagram, WhatsApp, Telegram, and custom websites) where Customers interact with them.

We are fiercely committed to protecting your privacy, securing your data, and being transparent about our practices. Most importantly, we believe your data is yours; we do not and will never use your proprietary data to train our foundational models. This Privacy Policy is distinct from our Data Protection Policy, which describes country- or state-specific privacy rights (such as those under the GDPR and U.S. state laws). Please read this policy carefully to understand how we handle your information and your choices.

We collect information that you provide directly, information collected automatically when you use our Services or deploy an AI agent, and information we receive from third parties. We only collect information that is strictly necessary for the purposes described in this policy.

A. Information You Provide Directly

• Account Information: When you register for a Business, Agency, Individual, or Customer account, you provide information such as your legal name, company details, email address, phone number, and login credentials. If you undergo Biometric Verification (required for an AI SDR Agent), you provide government-issued ID and biometric data to our secure third-party verification partner.
• Subscription and Billing Details: To purchase a SaaS subscription plan (Starter, Pro, Elite, Custom) or a Customer sub pack, you provide payment information, such as billing address and credit card details, directly to our secure payment processors.
• Proprietary Training Data: Account holders who train an AI agent provide extensive training data. This may include brand guidelines, personal text, voice samples, images, videos, and historical chat logs. You retain absolute ownership of this data.
• Content and Communications: When a Customer interacts with a deployed AI SDR Agent or AI SDR via text, audio, or video, we process the content of those communications to facilitate the interaction. For safety, moderation, and to provide audience insights to the Account holder, we retain these interaction logs.

B. Information Collected Automatically

• Usage and Device Data: We automatically collect information about how you interact with the Realfy dashboard, including IP addresses, device identifiers, browser types, operating systems, and login timestamps.
• Deployment and API Logs: Because our AI agents are deployed on third-party channels (e.g., Meta, WhatsApp), we collect routing data, webhook payloads, and API interaction logs to ensure the agents respond promptly and correctly on those external platforms.
• Cookies and Similar Technologies: We use cookies, local storage, and similar technologies to enable essential dashboard functions, measure platform performance, and secure your session.
• Approximate Location: We may derive your approximate location from your IP address to comply with regional laws (such as the EU AI Act) and enforce geographic restrictions, but we do not collect precise GPS geolocation without explicit consent.

C. Information from Third Parties

We may receive information about you from third-party services. For example, our payment processor (Stripe) confirms transaction statuses. Additionally, because your AI agents operate on external networks (like Instagram or Telegram), we receive data from those platforms strictly to facilitate the routing of messages between the Customer and the AI agent.

We use the information we collect for the following operational and security purposes:

• To Provide and Operate the Services: To manage your Account, process SaaS subscriptions, route API calls to third-party networks, and deliver the infrastructure necessary for your AI agents to function.
• To Generate AI Outputs (Strictly for You): We process your training data only to operate and personalize your specific AI SDR Agent, AI SDR, or AI Agent.
• The Realfy Data Guarantee: We explicitly guarantee that we will NEVER use your proprietary training data, personal information, or Customer interaction logs to train, fine-tune, or improve Realfy’s own foundational AI models. Your data is ring-fenced for your exclusive use.
• To Provide Audience Insights: We use de-identified Customer interaction data to provide Businesses, Agencies, and Individuals with analytics and insights regarding their audience's behavior and engagement.
• To Ensure Safety and Compliance: To monitor for Acceptable Use Policy violations (e.g., deepfakes, NSFW content, fraud), secure the platform, and ensure compliance with the Artificial Intelligence Act (AI Act).
• To Communicate with You: To send service-related messages (API downtime alerts, billing receipts) and marketing communications (which you can opt out of at any time).

We share your personal information only as described below. We do not and will never sell your personal or business data for monetary consideration.

• With the AI Agent Owners (For Customers): If you are a Customer interacting with an AI SDR Agent or AI SDR, your interactions and associated profile data are shared with the Business, Agency, or Individual that operates that specific AI agent, allowing them to provide a personalized experience and gather audience insights.
• Service Providers and Infrastructure Partners: We engage third-party companies to perform services on our behalf, such as cloud hosting (e.g., AWS), payment processing (e.g., Stripe), identity verification, and AI compute infrastructure. These companies are strictly bound by confidentiality agreements and use your data only to provide these backend services.
• Third-Party Deployment Channels: To make the service work, we must transmit interaction data back and forth through the APIs of the platforms where you deploy your AI (e.g., Meta, Telegram). This data sharing is governed by the respective privacy policies of those third-party networks.
• Legal Requirements: We may disclose your information if required by law, subpoena, or valid legal process; to protect the rights, property, or safety of Realfy, our users, or others; or to enforce our Terms of Service.
• Business Transfers: If we engage in a merger, acquisition, reorganization, or sale of assets, your information may be transferred as part of that transaction, subject to prior notice and the continuation of these privacy protections.
• Google API Services: The use and transfer of raw or derived user data received from Google Workspace APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

To comply with global regulatory frameworks, including the AI Act, and due to the commercial nature of our platform, Realfy is strictly restricted to adults. You must be at least 18 years of age to register an Account, purchase a subscription, deploy an AI agent, or interact as a Customer. We do not knowingly collect personal information from anyone under 18. If we become aware that a minor has accessed the Platform or provided personal information, we will terminate the account and delete the associated data immediately.

We retain personal and business information only for as long as your Account is active or as necessary to fulfill the purposes described in this policy, comply with legal obligations, and resolve disputes.

• Upon Account Deactivation: If you delete your Account, we will immediately disconnect your AI agents from all third-party channels and systematically delete your proprietary training data, Customer interaction logs, and profile information from our active servers, save for transactional data required by tax or accounting laws.

We implement robust administrative, technical, and physical safeguards designed to protect your information and API keys from unauthorized access, disclosure, alteration, and destruction. Measures include end-to-end encryption in transit, at-rest database encryption, strict access controls, network segmentation, and regular security audits. While we utilize enterprise-grade security to protect your data on our end, we cannot guarantee the absolute security of data once it is transmitted to third-party deployment channels (like SMS or Meta platforms). You acknowledge that you deploy agents to these external networks at your own risk.

Realfy is headquartered in the United States and operates a globally distributed infrastructure. Therefore, your information may be transferred to, stored, and processed in countries outside your residence. When transferring personal data from the European Economic Area (EEA), the UK, or Switzerland to the United States, we rely on legally recognized transfer mechanisms, such as Standard Contractual Clauses (SCCs) and adherence to the EU–U.S. Data Privacy Framework, ensuring strict compliance with GDPR and the AI Act.

We use different types of cookies and similar technologies on the Realfy dashboard:

• Essential cookies: Required to authenticate you, secure your session, and load the dashboard.
• Analytics cookies: Help us understand how Users navigate the dashboard so we can improve the UI.
• Advertising cookies: Allow us to market Realfy to prospective users.

You can manage or opt-out of non-essential cookies via our cookie consent banner or your browser settings. We respond to Global Privacy Control (GPC) and "Do Not Track" signals as required by applicable law.

Depending on your jurisdiction (e.g., under the GDPR, CCPA, etc.), you have comprehensive rights regarding your personal data, including the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Delete your data (the "right to be forgotten").
• Restrict or Object to certain processing of your data.
• Portability to receive your data in a structured, machine-readable format.

Please refer to our Data Protection Policy for a detailed breakdown of these rights. To exercise any of these rights, please submit a request via your Account settings or contact our Data Protection Officer.

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact our privacy team:

Data Protection Officer (DPO)
Realfy Inc.
Lewes, Delaware 19958, United States of America
Email: hello@realfy.ai

As our AI technology and regulatory environments (such as the AI Act) evolve, we may update this Privacy Policy to reflect changes in our practices. When we do, we will post the updated policy and change the “Last Updated” date at the top. If we make material changes to how we treat your data, we will provide prominent notice via email or a dashboard alert before the changes take effect. Your continued use of the Services after the effective date constitutes your acceptance of the revised policy.