Privacy Policy

Effective date: 3 June 2026

REALM Group USA (operated by REALM Group Global, "REALM", "we", "us") respects your privacy. This Policy describes what personal information we collect, how we use it, with whom we share it, and what rights you have. It applies to the Platform and any related services.

1. Information we collect

• Account information: name, email, phone, business name, EIN/Tax ID, role (buyer, seller, carrier).
• Identity & compliance: data required to onboard you to Stripe Connect (legal name, date of birth where required, address, last 4 of SSN where Stripe requires it). This data is collected by Stripe directly; we receive only confirmation status.
• Transaction data: listings, offers, orders, freight bookings, weighbridge events, quality grades, photographs and documents you upload.
• Communications: in-platform messages, support tickets, and notes related to disputes.
• Usage data: IP address, device and browser information, pages visited, cookies and similar technologies.
• Location data: the pickup/delivery addresses on listings, and (with your permission) device coordinates on proof-of-delivery uploads.

2. How we use it

• To operate the marketplace and complete the transactions you direct (legal basis: contract).
• To verify identity, prevent fraud, and comply with US sanctions and anti-money-laundering laws (legal basis: legal obligation, legitimate interests).
• To send transactional emails, dispute notices and security alerts (legal basis: contract).
• To improve the Platform — analytics, debugging, A/B testing (legal basis: legitimate interests).
• To send marketing only where you have opted in; you can unsubscribe at any time.

3. Who we share with

• Payment processor: Stripe, Inc. (transaction, identity verification).
• Hosting & infrastructure: Vercel Inc. (web hosting), Supabase Inc. (database and authentication).
• Communications: Resend / Postmark (transactional email), Twilio (SMS) where used.
• Counterparties: when you transact with another user, we share the information necessary to complete the transaction (name, business name, contact, delivery address).
• Legal: when required by law, court order, or to protect rights, safety or property.
• We do not sell or share your personal information for cross-context behavioural advertising.

4. Retention

We retain account and transaction records for as long as your account is active and for up to 7 years afterwards to meet US tax and audit requirements. Identity verification records are retained per Stripe's policy. You can request deletion (see §6) — we will honour the request except where law requires retention.

5. Security

We use industry-standard safeguards: TLS in transit, encryption at rest (Supabase managed), row-level security on tenant data, scoped API keys, and access logging. No system is perfectly secure; you are responsible for keeping your password confidential.

6. Your rights — California (CCPA/CPRA) and other US states

Residents of California and other US states with comprehensive privacy laws (Colorado, Connecticut, Virginia, Utah, Texas, Oregon, Montana and others) have the right to:

• Know what personal information we hold about you and how we use it.
• Access a copy of your personal information.
• Request correction or deletion (subject to legal exceptions).
• Opt out of any "sale" or "sharing" (we do neither, but we will honour the signal).
• Be free from retaliation for exercising any of these rights.

To exercise a right, email privacy@realmgroup.global with the subject line "Privacy Request". We will respond within 45 days. You may also authorise an agent to act on your behalf.

7. International users

The Platform is operated from Australia and the United States. By using it you consent to your information being processed in those jurisdictions.

8. Children

The Platform is not directed to children under 18 and we do not knowingly collect their personal information.

9. Changes

We may update this Policy. Material changes will be notified by email or in-platform notice at least 14 days before they take effect.

10. Contact

Privacy questions? /contact or privacy@realmgroup.global.