Privacy policy

1. Who is responsible for your data?

The data controller is the operator of the Realyst service at the domain you use to access the product (for example realyst.net). For privacy-related requests, use the support or contact details provided in your account area, on our website, or in transactional emails. If you do not have an account, use the public contact route we publish for privacy enquiries.

2. What information we collect

We collect only what we need to run the service, improve it, comply with law, and keep accounts secure.

2.1 You give us directly

• Account details: email address and password (password is stored using secure hashing; we do not store it in plain text).
• Email verification: codes or links we send to confirm your address.
• Investor profile / questionnaire: preferences and criteria you enter so we can score and match properties (e.g. locations, budgets, property types—whatever the app asks for).
• Content you add in the product: for example notes or status updates you attach to saved listings or suggestions.

2.2 We receive when you use the site or extension

• Property listing content: when you use the Realyst browser extension on supported property websites, the extension reads the listing page you have open (for example address snippets, price, and other fields visible on the page) and sends that information to our systems so we can store the listing, enrich it, and show match scores. We do not access your browsing history as a list; we process the active listing context you trigger.
• Technical and usage data: IP address, browser type, approximate region derived from IP where relevant, timestamps, and server logs for security, debugging, and abuse prevention.
• Session and authentication: session cookies on the website, and (if you use it) an API token stored in your browser for the extension to call our APIs on your behalf.

2.3 Payments

If you subscribe or pay, payment details are processed by our payment provider (Stripe). We do not receive or store your full card number on our servers. We receive status, subscription identifiers, and limited billing metadata needed to operate your account.

3. How we use your information

• To create and manage your account, authenticate you, and send service-related emails (e.g. verification, password reset, important notices).
• To provide matching, scoring, enrichment, dashboards, and saved listings.
• To run the extension features you activate (saving listings, batch match, notes, etc.).
• To process payments and manage subscriptions.
• To secure the service, detect fraud or misuse, and comply with legal obligations.
• To improve reliability and fix errors (including aggregated or de-identified analytics where appropriate).

4. Legal bases (UK GDPR)

Depending on the activity, we rely on:

• Performance of a contract — providing the service you signed up for.
• Legitimate interests — securing accounts, preventing abuse, improving the product, and limited logging, balanced against your rights.
• Consent — where required (for example optional cookies as described in our Cookie policy).
• Legal obligation — where we must retain or disclose information by law.

5. Cookies

We use cookies as described in our Cookie policy. We do not use cookies for third-party advertising or cross-site tracking as described there.

6. Sharing with third parties

We do not sell your personal information. We share data only as needed to operate Realyst:

• Infrastructure and hosting providers that store or process data on our instructions.
• Stripe (or successor payment processors) for payments—subject to their privacy policy.
• Email delivery providers we use to send transactional messages.
• Authorities if required by law, court order, or to protect rights, safety, and security.

Enrichment uses public and licensed datasets; see Data sources & disclaimers. Those sources are not typically given your identity unless we use an external API that receives queries (in which case we minimise what is sent).

7. International transfers

Your information may be processed in the United Kingdom and, where we use suppliers that operate elsewhere (for example US-based cloud or payment services), we rely on appropriate safeguards such as the UK extension to the EU GDPR, standard contractual clauses, or other mechanisms approved under UK law, together with technical and organisational measures.

8. How long we keep data

We retain account and listing data for as long as your account is active and for a reasonable period afterwards for backups, disputes, and legal requirements. Server logs are kept for a limited period (typically weeks to months unless law requires longer). You may request deletion of your account subject to any legal retention we must honour.

9. Security

We use industry-standard measures (encryption in transit where appropriate for HTTPS, access controls, hashed passwords, and secure configuration). No method of transmission over the internet is completely risk-free; we work to reduce risk and respond to issues promptly.

10. Your rights

Under UK GDPR you may have the right to:

• Access a copy of your personal data.
• Rectify inaccurate data.
• Erase data in certain circumstances (“right to be forgotten”).
• Restrict or object to certain processing.
• Data portability for data you provided, where technically feasible.
• Withdraw consent where processing is based on consent (without affecting earlier lawful processing).
• Lodge a complaint with the Information Commissioner’s Office (ICO) — ico.org.uk.

To exercise rights, contact us using the details in section 1. We may need to verify your identity before fulfilling a request.

11. Children

Realyst is intended for adults making property decisions. We do not knowingly collect personal information from anyone under 18. If you believe we have, contact us and we will delete it.

12. Automated decision-making

The service may use automated scoring or matching to rank properties against your stated preferences. This assists your research and is not a legally binding decision about you (such as credit or lending). It does not replace professional advice (legal, financial, or surveying).

13. Changes

We may update this policy from time to time. We will post the revised version on this page and adjust the “last updated” date. For material changes we may also notify you by email or in-app notice.