Privacy Policy

Last updated: April 4, 2026

1. Introduction

RealIntel One ("we", "us", "our") is committed to protecting your privacy. This policy describes how we collect, use, store, and protect information when you use our parcel intelligence platform.

2. Information We Collect

Account Information

When you create an account, we collect:

• Email address
• Name (if provided)
• Organization / tenant association
• Subscription tier

Usage Data

When you use the Service, we automatically collect:

• Addresses and parcel identifiers you submit for analysis
• Analysis results and pipeline metadata
• IP address, browser type, and request timestamps
• Audit trail events (immutable, per SOC 2 requirements)

Demo Usage

The public demo at /demo does not require an account. Demo analyses are tagged with a generic tenant identifier and are not linked to any individual.

3. How We Use Your Information

Purpose	Legal Basis
Provide parcel analysis	Contract performance
Maintain audit logs	Legal obligation (SOC 2)
Improve the Service	Legitimate interest
Prevent abuse / rate limiting	Legitimate interest
Send service notifications	Contract performance

4. Data Sources

Our pipeline aggregates data from publicly available government databases and licensed commercial sources, including:

• County ArcGIS systems (parcel boundaries, zoning)
• USFWS National Wetlands Inventory
• EPA Envirofacts
• USDA NRCS Soil Data Access
• USGS 3DEP Elevation
• FEMA National Flood Hazard Layer
• Google Solar API, Google Places API
• Regrid parcel data

We do not collect personal data from these sources. All queried data relates to land parcels, not individuals.

5. AI-Generated Content

Analysis narratives are generated by Google Gemini AI. These are clearly labeled as "[AI-Generated]" in the interface. AI outputs are derived solely from the data sources listed above and your submitted address. We do not use your data to train AI models.

6. Data Storage and Security

• Data is stored in Google Cloud SQL (Cloud Run, us-central1 region)
• All data is encrypted at rest and in transit (TLS 1.2+)
• Database access is restricted to application service accounts
• Passwords are hashed with bcrypt (never stored in plaintext)
• JWT session tokens expire after 24 hours
• Audit logs are immutable and append-only

7. Data Retention

• Account data: Retained while your account is active, deleted within 30 days of account closure
• Analysis results: Retained for the duration of your subscription
• Audit logs: Retained for 7 years per SOC 2 requirements
• Demo data: Purged periodically (not permanently stored)

8. Your Rights (GDPR)

If you are in the European Economic Area, you have the right to:

• Access — request a copy of your personal data
• Rectification — correct inaccurate data
• Erasure — request deletion of your data (subject to legal retention requirements)
• Portability — receive your data in a machine-readable format
• Objection — object to processing based on legitimate interest

Data erasure requests are processed through our GDPR compliance gate, which requires legal/compliance approval before execution. Contact us to exercise any of these rights.

9. Third-Party Services

Service	Purpose	Data Shared
Google Cloud Platform	Infrastructure	All application data (encrypted)
Google Gemini AI	Narrative generation	Parcel data (no personal data)
Sentry	Error tracking	Error metadata, IP addresses
Google Analytics	Usage analytics	Page views, anonymized IP

10. Cookies

• session-token — httpOnly, authentication (24h expiry)
• csrf-token — CSRF protection (24h expiry)
• _ga / _gid — Google Analytics (if enabled)

11. Children's Privacy

The Service is not intended for individuals under 18 years of age. We do not knowingly collect data from minors.

12. Changes to This Policy

We may update this policy from time to time. Material changes will be communicated via the Service or email. The "Last updated" date above reflects the most recent revision.

13. Contact

For privacy inquiries or to exercise your data rights, contact us at privacy@realintel.com.