Privacy Policy

This policy explains what RealClear Systems Inc., a corporation (“RealClear,” “we”), collects when you visit our website or use the RealClear service, how we use it, how long we keep it, and the choices you have. It covers the public website at realclear.ai and the signed-in service. Where your organization has signed a customer agreement with us, the Data Processing Agreement attached to it governs personal data inside the content you submit; our draft DPA is available for discussion, subject to counsel. For our broader security and compliance posture, see our Trust Center.

Information We Collect

Account data. A verified work email can create a prospect workspace. Paid service access is provisioned after direct onboarding. We hold your name, business email address, organization and role, a hashed password if you set one, and the secrets needed for multi-factor authentication.

Customer content. The service works on what you give it: property addresses and parcel identifiers, the use you propose, deal inputs, notes, site-boundary files you upload, and the questions you ask the research assistant. This is mostly commercial information about places, not people, but it can incidentally include personal data about your contacts. Please do not submit special categories of personal data (such as health or financial-account details) or data about private individuals that the research does not need.

Access requests.When you ask for access through our website, we collect the name, work email, company, role, property, timeline, and message you type. To tell people from bots and to understand where requests come from, the form also records your IP address, browser user agent, language, time zone, and screen size, together with the page you were on, any approved campaign tags, the link you arrived by, and the external referrer, if present. A first-party cookie keeps the page, campaign tags, and referrer for up to 30 days so that a later request can carry them. The submitted request is recorded before operator notifications are attempted. When email delivery is configured, we attempt to email the fields you typed and the page you came from to the operator’s mailbox. When an operator chat-alert destination is configured, we attempt a brief alert with your email, company, and inquiry type. Notifications may fail or go unread; the recorded request does not prove that a person received or reviewed it.

Operational records. We keep security and audit logs of sign-ins and of actions taken in the service (who did what, when, and from which address), email delivery events, and application error reports. Error reports are scrubbed of known personal-data patterns before they reach our error-monitoring provider.

What we do not collect. We do not use third-party analytics or advertising tools on the public website or in the signed-in service, we do not build advertising profiles, and we do not sell personal information. We do not collect sensitive personal data beyond what is necessary to operate the service.

How We Use Your Information

• To provide the service: to run research on the properties you submit, deliver site memos and answers, and operate your workspace.
• To communicate with you about your account, deliveries, product changes, and announcements you have opted into.
• To keep the service secure: to authenticate users, detect abuse, enforce usage limits, and investigate incidents.
• To improve the service using aggregate operational measurements, independently verified public-source knowledge, and approved de-identified aggregate calibration. Your organization’s private material, inputs, site memos, and the facts and strategy derived from them are never shared with or reused for other customers.
• To respond to support requests and feedback.
• To meet legal obligations and enforce our terms.

Research and Model Providers

Research tasks may send property and proposed-use details, relevant deal inputs, and selected source passages to model providers, which process property research, cited research, verification, memo composition, review, and embeddings. Provider retention follows each provider’s applicable terms, so we make no blanket zero-retention or no-training claim on their behalf. RealClear does not use your content to train machine-learning models. Customer-visible claims must tie back to cited sources. Provider categories are listed on the sub-processor page; customers can see the named providers in their workspace (Settings → Sub-processors) and in the sub-processor annex to our Data Processing Agreement.

Sharing

We share information only with the providers that host and operate the service for us (their categories are listed on our sub-processor page; each is bound by data-protection terms and limited to its stated purpose), when the law requires it, to protect the rights and safety of RealClear or others, or as part of a merger, acquisition, or sale of assets, in which case the successor is bound by this policy. We do not sell or rent personal information and do not share it with advertisers. RealClear gives customers advance written notice before any change to its sub-processors, including adding or replacing one or changing a purpose or data location, and a right to object. We work in good faith to resolve any objection.

Data Retention

We keep account data and customer content for as long as your organization’s account is active. When an account is closed, or when you ask us to delete your data, our operator handles deletion or anonymization requests, subject to retention required by law, fraud prevention, dispute resolution, or enforcement of our agreements. Deletion and export require operator assistance; there is no self-service control. Scheduled backups and separately held archives can retain copies beyond deletion from the active service; contact us for the current retention schedule and any applicable exception. Access-request records, including the attribution details described above, are kept until you ask us to delete them. One thing we do not delete: the security audit entry recording that a request was received (email, company, IP address, and user agent) lives in an append-only log that is kept for the life of the service. Audit logs for an organization are kept for the life of that organization.

Where Data Is Processed

RealClear is operated from the United States. Application hosting and the primary database run in a United States region. Object storage is not pinned to a region, and our other providers, including model providers, may process data in their own regions; the sub-processor page gives the data location for each provider category. If you use the service from outside the United States, your data may be transferred to and processed in the United States and other provider regions. Contact us about arrangements needed for your organization before submitting regulated data.

Security

How we protect data in transit and at rest, how access is controlled, and how we handle incidents is described on our Security page. If we learn of a breach affecting your personal data, we will notify your organization as required by applicable law and your agreement.

Your Rights

Depending on where you live, you have the right to:

• Access — request a copy of the personal data we hold about you.
• Correction — request correction of inaccurate or incomplete data.
• Deletion — request deletion of your personal data, subject to applicable legal obligations.
• Opt-out — unsubscribe from marketing communications at any time via the unsubscribe link in any email or by contacting us directly. Messages needed to operate your account, such as sign-in links and delivery notices, continue.
• Portability — request a machine-readable export of your data.

To exercise any of these rights, email arvind@realclear.ai from the address on your account, or tell us how to verify that the request is yours. We respond within 30 days. Requests about content your organization submitted go to that organization first, because it controls that data and we process it on its behalf.

California residents (CCPA/CPRA): You have the right to know what personal information we collect and how we use and share it, the right to delete it, the right to correct it, the right to opt out of its sale or sharing (we do neither), and the right not to be discriminated against for exercising these rights.

EEA/UK residents (GDPR): Our legal bases for processing are performance of a contract (providing the service to your organization), our legitimate interests (securing and improving the service, and handling access requests), and consent (marketing communications, which you can withdraw at any time). You have the right to lodge a complaint with your local supervisory authority.

Cookies

Signed-in product areas. When you are logged into RealClear (your account dashboard, workspaces, and admin surfaces), we set only essential cookies necessary for the platform to function — such as authentication session tokens and security tokens. We do not run third-party analytics or advertising cookies in these signed-in areas, so your account activity, property research, and workspace URLs are never sent to third-party analytics providers.

Public marketing pages. Our public marketing pages do not run third-party analytics and do not set third-party analytics or advertising cookies. We use one first-party operational cookie for up to 30 days to preserve the original public page, the approved campaign tags, and the external referrer that led to an access request. This information operates the directly provisioned access-request process; it is not advertising data and never grants access or controls authorization. Blocking this cookie prevents that attribution from being preserved but does not replace the essential authentication and security cookies required in signed-in product areas.

Children

The service is for businesses and is not directed to anyone under 18. We do not knowingly collect personal data from children.

Changes to This Policy

We will post any changes here with a new “last updated” date. If a change materially affects how we handle personal data, we will also notify account holders by email before it takes effect.

Contact

For privacy-related questions, requests, or concerns, please contact us at arvind@realclear.ai, or write to RealClear Systems Inc., 400 Beale Street, Apt 606, San Francisco, California 94105. We aim to respond to all privacy requests within 30 days.