What we collect, and why.

1Scope & Who We Are

This Privacy Policy applies to realcompany.ai, our verification dashboard, our API, and related services (collectively, the "Service"), operated by Development 180, LLC, doing business as RealCompany.Ai ("RealCompany.Ai," "we," "us," or "our").

This Policy covers two kinds of people: Customers, the businesses who sign up for and integrate the Service, and End Users, the individuals a Customer asks to complete a verification session. If you're an End User, the business that asked you to verify is our Customer, and their own privacy policy governs their use of your verification result; this Policy covers what we, as the verification provider, do with your information.

2Information We Collect

We collect this information directly from you, automatically through your use of the Service, and, in the case of Customers, from the business information you provide when signing up.

3Biometric Information

A verification session may involve the collection of biometric identifiers or biometric information, such as a facial scan derived from a selfie or liveness check, used to compare against a submitted ID document. Where required by law (including, for example, the Illinois Biometric Information Privacy Act), we or our Customer will obtain informed written consent before collection, and we will:

• Use biometric data solely to perform the verification requested;
• Not sell, lease, trade, or otherwise profit from biometric data;
• Store, transmit, and protect biometric data using reasonable security measures; and
• Delete or permanently destroy biometric data on the schedule described in Section 6, or sooner upon a valid deletion request as described in our Data Deletion page.

4How We Use Information

We use the information we collect to:

• Perform identity verification, liveness detection, and fraud-screening services requested by a Customer;
• Operate, maintain, secure, and improve the Service, including detecting and preventing fraud, abuse, and attempts to defeat our verification models;
• Develop, test, and improve our verification and fraud-detection technology, including through the use of aggregated or de-identified data that does not identify a specific individual;
• Communicate with Customers and End Users about the Service, including support, billing, and service updates;
• Comply with legal obligations, respond to lawful requests from public authorities, and enforce our Terms of Service; and
• Protect the rights, property, and safety of RealCompany.Ai, our Customers, End Users, and the public.

We do not sell personal information to third parties for their own marketing purposes.

5How We Share Information

We may share information with:

• The Customer who requested your verification, including the verification result and, depending on the Customer's configuration, underlying document or selfie data;
• Service providers and subprocessors who help us operate the Service, such as cloud hosting, infrastructure, and payment processing providers, bound by confidentiality and data-protection obligations;
• Legal and safety authorities, where we believe in good faith that disclosure is required by law, subpoena, or other legal process, or necessary to protect the rights, property, or safety of RealCompany.Ai, our users, or the public;
• A successor entity, in connection with a merger, acquisition, financing, or sale of some or all of our assets, in which case information may be transferred as part of that transaction; and
• Our affiliates, for purposes consistent with this Policy.

We may also share aggregated or de-identified information, which cannot reasonably be used to identify an individual, for any business purpose, without restriction.

6Data Retention

We retain verification data for as long as reasonably necessary to provide the Service, satisfy the purpose for which it was collected, and meet legal, accounting, or fraud-prevention requirements, after which it is deleted or de-identified. Where a Customer or End User submits a valid deletion request, we act on it as described in our Data Deletion page. Some minimal records, such as the fact that a verification occurred and its outcome, may be retained longer where we have a legitimate fraud-prevention, legal, or regulatory basis to do so.

7Your Deletion Rights

End Users can request deletion of their own verification data at any time, and Customers can trigger deletion programmatically through our API. Full detail on how to request deletion, and what happens next, is on our dedicated Data Deletion page, which is incorporated into this Policy by reference.

8Your Privacy Rights

Depending on where you live, you may have the right to request access to, correction of, or deletion of your personal information, to object to or restrict certain processing, or to receive a copy of your data in a portable format. To exercise any of these rights, contact us using the details in Section 14.

We will verify your identity before fulfilling a request involving personal information, which may itself require a form of verification. We may decline a request to the extent permitted by law, including where fulfilling it would compromise fraud prevention, the rights of others, or a legal obligation.

9Cookies & Tracking

We use cookies and similar technologies to operate our website, remember preferences, and understand how the Service is used. You can control cookies through your browser settings; disabling them may affect how parts of the Service function.

10Security

We maintain administrative, technical, and physical safeguards designed to protect information in our possession, described further on our Security page. No system is completely secure, and we cannot guarantee the absolute security of any information transmitted to or stored by the Service.

11Children's Privacy

The Service is not directed to, and is not intended for use by, anyone under 18. We do not knowingly collect personal information from children. If we learn we have collected information from a child, we will delete it.

12International Users

The Service is operated from the United States. If you access the Service from outside the United States, your information will be transferred to, stored, and processed in the United States, where privacy laws may differ from those of your jurisdiction. By using the Service, you consent to this transfer.

13Changes to This Policy

We may update this Policy from time to time by posting a revised version with a new Effective Date. Continued use of the Service after an update takes effect constitutes acceptance of the revised Policy. Material changes affecting how we handle previously collected verification data will be communicated through the Service or by email where feasible.

14Contact

Questions about this Policy, or requests regarding your personal information, can be sent to Reece@RealCompany.Ai, or reach us directly through our Contact page.