Privacy Policy

Realized Development Corporation, a Texas corporation, Realized Development Corporation, c/o Kennedy Campos and Associates (registered agent), 304 W Adoue St, Alvin, TX 77511, United States. Data-protection contact: privacy@realized.stream.

General contact: hello@realized.stream.

EU representative (GDPR Art. 27): being appointed; until then, contact privacy@realized.stream.

Newsletter: your email address and confirmation status (double opt-in).

Workshop booking and accelerator intake: the messages you type into the conversation, the contact details you provide, and a reference code.

Accounts: email address and sign-in records if you sign in via magic link or Google.

Usage events: anonymous, session-based page and button events stored on our own infrastructure. No third-party analytics scripts are loaded.

Technical data: IP address, used briefly for rate limiting and abuse prevention.

Lovable Cloud (hosting, database, authentication, file storage).

Cloudflare (Cloudflare, Inc., USA). Purpose: hosting and delivering this website (CDN), security and bot protection (including Turnstile, where shown), and relaying incoming email notifications through our webhook service at hooks.realized.stream. Data: IP address, browser and device information, request logs, and the content of email notifications passing through the relay. Location: Cloudflare's global network (data centre nearest to you) and the United States. Safeguards: Cloudflare's data processing addendum, its certification under the EU-US Data Privacy Framework, UK Extension and Swiss-US Data Privacy Framework, with EU Standard Contractual Clauses as a fallback.

Lovable managed email (transactional and newsletter emails, delivery and bounce events).

Resend (Plus Five Five, Inc., USA). Purpose: sending our transactional and outreach emails, and receiving mail to our inboxes (including privacy@ and ai@realized.stream). Data: email addresses, names, message content and attachments, and delivery metadata (timestamps, delivery status). We do not use open or click tracking. Location: sending from the EU (Ireland); account, logs and some processing in the United States. Safeguards: Resend's data processing addendum, EU Standard Contractual Clauses (with UK Addendum and Swiss amendments), and Resend's certification under the EU-US Data Privacy Framework and its UK Extension.

Lovable AI Gateway (generates replies in the booking and intake conversation; your messages are sent to the AI model to produce a response).

Google (only if you choose Google sign-in).

Responding to booking and intake requests (steps prior to a contract); sending the newsletter (consent, withdrawable any time via the unsubscribe link); security and abuse prevention (legitimate interest).

Business outreach and answering emails you send us (legitimate interest; you can object at any time and we will stop).

Booking chats and bookings: 24 months after last contact.

To delete your account, email privacy@realized.stream; we delete it within 30 days.

Analytics and funnel events: 13 months.

Rate-limit records (IP addresses, emails): 24 hours.

Email send logs: 12 months.

Newsletter: until you unsubscribe.

Unconfirmed newsletter sign-ups: 30 days.

Unused unsubscribe tokens: 12 months.

Mail to ai@ and privacy@: 24 months after last contact.

Privacy request log: 3 years after the request is closed.

Opt-out list: email address only, kept indefinitely so we can honour your opt-out.

We are based in the United States, and our providers process data in the US and elsewhere. Transfers from the EU, UK and Switzerland rely on the EU-US Data Privacy Framework, its UK Extension and the Swiss-US Data Privacy Framework, where the provider is certified, or on EU Standard Contractual Clauses with the UK Addendum and Swiss amendments, as described for each provider above.

You may request access, correction, deletion, restriction, portability, or object to processing, and withdraw consent at any time, and lodge a complaint with a supervisory authority. Contact privacy@realized.stream.

We use only strictly necessary browser storage (sign-in session, conversation state, language). No advertising cookies.