Privacy Policy

Last updated 29 July 2026

This explains what RealAly collects, why we collect it, and who else sees it. We have tried to write it in plain language rather than to be unreadable on purpose.

We do not sell your personal information.

1. What we collect

When you create an account

Signing up with Google:your email address, name and profile picture. We request only Google's basic email and profile scopes — we cannot see your Gmail, Drive, Calendar or contacts, and we never ask for them.
Signing up with email: your email address and name. Your password is handled and hashed by our authentication provider; it never reaches us in readable form.
Your time zone, so session times are shown correctly, and a phone number if you add one.

When you use RealAly

Bookings — who, when, which session type, what you paid, and any note you send ahead.
Messages you exchange with an expert about a booking.
Reviews you write.
Experts you save.

If you apply to be an expert

Professional details — licence number and state, brokerage, years licensed, markets served, specialties and biography. Most of this appears on your public profile; your licence number is used for verification.
Any supporting document you upload, which is stored privately and is not public.

Payment information

Handled by Stripe. Card numbers never reach RealAly's servers. We store only the identifiers Stripe gives us — a payment reference and an account reference — plus the amount and status, so we can show your booking history and issue refunds.

Experts complete Stripe's own identity verification in order to be paid. Whatever that involves is collected by Stripe under Stripe's privacy policy, not by us.

2. Why we collect it

To run your account and let you book and attend sessions.
To take payment and pay experts.
To show experts publicly so people can find and evaluate them.
To keep the marketplace trustworthy — verifying licences, tracking cancellations and no-shows, investigating abuse.
To email you about your bookings.
To meet legal, tax and accounting obligations.

3. What is public

An approved expert's profile is public and indexed by search engines — name, photo, headline, biography, specialties, city and state, session types and prices, rating and reviews.

Client accounts are not public. Your name is visible to an expert you have booked; it is not shown to anyone else. Reviews are published with your first name.

4. Who else processes your information

Only these, and only to run the service:

Supabase — database, authentication and file storage.
Stripe — payments, payouts and identity verification for experts.
Vercel — hosting and request logs.
Google — only if you choose to sign in with Google.

We may also disclose information if the law requires it, or to protect someone's safety or our legal rights. If RealAly is ever acquired, account information would transfer with the business, and we would tell you first.

5. Cookies

We use cookies to keep you signed in. That is it — no advertising cookies, no third-party trackers, no cross-site profiling. Blocking them will stop sign-in working.

6. How long we keep it

Account and profile information: while your account exists.
Bookings, payments and refunds: at least seven years after the transaction, because tax and accounting rules require it. This is the one category we cannot delete on request.
Messages and reviews: while your account exists, unless you delete them sooner.

7. Your choices

You can ask us to:

send you a copy of what we hold about you;
correct anything wrong;
delete your account — we will remove your profile and personal details, and keep only the transaction records described above;
stop emailing you anything other than messages about your own bookings.

Email support@realaly.com and we will respond within 30 days. Depending on where you live you may have additional rights under laws such as the GDPR or the CCPA; we will honour those requests on the same basis.

8. Security

Traffic is encrypted in transit. Access to your data is enforced at the database level, so a row is only readable by the people it belongs to, rather than relying on the application to remember to check. Card details are held by Stripe, not by us.

No system is perfectly secure. If a breach affects your information, we will tell you and any regulator we are required to notify.

9. Children

RealAly is for adults. We do not knowingly collect information about anyone under 18; if we learn we have, we delete it.

10. International transfers

Our providers process data in the United States. If you use RealAly from elsewhere, your information will be transferred and processed there.

11. Changes

We will update this policy as the product changes, and announce material changes by email or in the product before they take effect.

12. Contact

support@realaly.com