IREAL
Back to homeIREAL

Privacy Policy

Version 2.0 · Effective 2026-08-28

This Policy describes how IREAL collects, uses, stores, and protects your personal data. By using the Platform, you accept the practices described here. If you have questions, contact us at privacidad@ireal.app.

1. Data Controller

IREAL is the controller responsible for processing your personal data. This Privacy Policy applies to all data collected through the Platform. The processing of your data is governed by Colombia's Law 1581 of 2012 and, where applicable, the EU's GDPR and other relevant data protection laws based on your jurisdiction.

2. Information We Collect

2.1 Account information

When you register via social sign-in (Google), we collect your name, email address, and profile picture as provided by the authentication provider. We do not store passwords.

2.2 Creator profile information

We collect information you voluntarily provide during profile setup: creator name, passion, niche, topics, content style, target audience, personal backstory, and time availability.

2.3 Generated content and inputs

We store the inputs (instructions, prompts, and context) you enter into the Platform, as well as the content plans, calendars, ideas, and strategies generated by the AI from your information, and your interactions with that content.

2.4 Usage and analytics data

We collect data about how you use the Platform: pages visited, features used, frequency of use, device type, browser, IP address, and interaction events.

2.5 What we do NOT collect

We do not collect or store: credit card information or other payment instruments (handled by third parties such as Stripe), identity documents, biometric data, health information, or data about minors under 18.

3. Legal Basis for Processing

We process your data under the following legal bases:

  • Contract performance: to provide you the service (plans, calendars, strategies).
  • Consent: for analysis of your public social media profiles via Apify (which we request explicitly before each analysis).
  • Legitimate interest: for product improvements using aggregated and anonymized data.
  • Legal obligation: when required by law.

4. Use of Artificial Intelligence and Data Processing

4.1 How the AI data flow works

To generate content, your profile data and instructions are sent to the Google Gemini API. This means your data leaves our servers for Google Cloud's. Google processes this data under its API terms, which prohibit using your data to train its models. See ai.google.dev/terms for more details.

4.2 What data we send to the AI

We only send the information necessary to generate the content you request: your creator profile (niche, topics, audience, style) and the specific instructions for each request. We do not send payment data or sensitive information.

4.3 No automated decision-making with legal effects

IREAL does not make automated decisions that have legal or similarly significant effects on you. The AI's recommendations are advisory suggestions that require your review and decision.

5. How We Store Your Data

Your data is stored securely on servers managed by Supabase, running on Google Cloud infrastructure. Supabase implements:

  • Encryption in transit (TLS 1.2+) and at rest (AES-256).
  • Role-based access control (Row Level Security).
  • Automated backups with 7-day retention.
  • Continuous monitoring and security alerts.

6. International Data Transfers

Your data may be transferred to and processed on servers located outside Colombia, primarily in the United States and the European Union, where our providers operate:

  • Supabase (infrastructure): Google Cloud, USA and EU.
  • Google Gemini (generative AI): Google Cloud, USA.
  • Apify (profile analysis): EU and USA.

We implement appropriate contractual safeguards for these transfers, including standard contractual clauses where European regulation applies. By using the Platform, you consent to these transfers.

7. Sharing Data with Third Parties

We do not sell or share your personal data with third parties for marketing or advertising purposes. We only share data in the following cases:

  • Supabase and Google Cloud: infrastructure and data storage.
  • Google Gemini: content generation using your profile data.
  • Apify: analysis of public social media profiles, only when you explicitly request it.
  • Payment providers (e.g. Stripe): exclusively the data necessary to process transactions.
  • Legal authorities: when required by law, court order, or valid legal process.
  • In the event of a merger or acquisition: with prior notice to affected users.

8. Cookies and Tracking Technologies

We use the following types of cookies:

  • Essential cookies: necessary for authentication and session functionality. They cannot be disabled.
  • Analytics cookies: measuring Platform usage for service improvements.

The first time you log in to the Platform, you will see a cookie notice that lets you manage your preferences. You can also configure them through your browser.

9. Your Rights

You have the right to:

  • Access: request all personal information we hold about you.
  • Rectify: correct any incorrect information in your profile.
  • Delete: request deletion of your personal data.
  • Portability: export your data in a standard format.
  • Revoke consent: for data processing based on your consent.
  • Object: to processing of your data for legitimate-interest purposes.
  • Restrict: request temporary restriction of processing of your data.

To exercise any of these rights, contact us at privacidad@ireal.app. We respond within a maximum of 30 business days of receiving your request.

10. Account Deletion

You can delete your account at any time from the Platform settings. When you delete your account:

  • We will permanently delete all your data within a maximum of 30 days.
  • Deleted data includes: profile, content plans, calendars, ideas, profile analyses, and any other associated data.
  • Some data may be retained for an additional period when required by law (tax obligations, legal records) or to prevent fraud.
  • This action is irreversible.

11. Data Retention

We keep your data while your account is active or as necessary to provide the service. If you cancel your subscription, your data remains accessible for an additional 30 days. After this period, or upon deleting your account, the data is permanently deleted, except where legally required to be retained.

12. Security

We implement technical and organizational measures to protect your data, including encryption, access control, monitoring, and periodic audits. In the event of a security breach affecting your data, we will notify you within a maximum of 72 hours of becoming aware of it, in accordance with applicable legal obligations.

No electronic transmission or storage system is 100% secure. If you discover a vulnerability, report it at privacidad@ireal.app.

13. Minors

The Platform is not directed at minors under 18. We do not knowingly collect personal data from minors. If we discover we have collected data from a minor without verified parental consent, we will delete that data immediately. If you are a parent/guardian and believe your child has provided data to IREAL, contact us at privacidad@ireal.app.

14. Changes to this Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes through the Platform or by email at least 15 days in advance. The effective date in the header indicates when the current version took effect.

15. Contact and Complaints

For questions, requests, or complaints about this Privacy Policy or how we handle your data, contact us at:

If you do not receive a satisfactory response, you have the right to file a complaint with the competent data protection authority in your country (in Colombia: Superintendencia de Industria y Comercio — SIC).