Privacy policy.

Using the site requires a free account. We do not sell your data. We hold the account details you give us and the interests you choose to tailor your feed, and use them only to run and personalise the service.

Account & personalization: when you create an account we store your email and the profile details you provide (such as company type, function, and seniority). The sectors and regions you pick to tailor your feed are saved to your account so it follows you across devices. You can change or clear them any time from your account.

Messages you send us: if you use the contact form, we store the name, email, organization, and message you provide so we can respond. We keep these only as long as needed to handle your enquiry.

Payments: if you subscribe to a paid plan, your payment is handled by our payment processor, Stripe. Stripe collects and stores your card details directly — we never see or store your full card number. We retain only limited billing information (your plan, subscription status, and renewal dates) so we can manage your subscription.

Basic technical data: our hosting provider (Vercel) and database provider (Supabase) process standard request information, such as IP address and browser type, to serve and secure the site. We do not run third-party advertising or tracking pixels.

To operate the site, manage your account and any subscription, respond to enquiries, keep the service secure, and improve coverage. We do not use your information for advertising and we do not sell or rent it.

We hold your data to an institutional security standard. GREI is built entirely on SOC 2 Type II–certified infrastructure: the application and edge network run on Vercel, data is stored in Supabase (on AWS), and payments are processed by Stripe — each an independently audited SOC 2 Type II provider, with Stripe additionally certified to PCI DSS Level 1, the highest tier in the payment-card industry.

All traffic is encrypted in transit with TLS, and data is encrypted at rest. Access to production systems is restricted, authenticated, and least-privilege by default, and we never store full payment-card numbers. We continuously monitor the service and follow industry best practices for data protection; if we ever detect a breach affecting your personal data, we will notify affected users and the relevant authorities as required by law.

The portal links to research on publishers’ own websites. When you follow a link, that publisher’s own privacy practices apply. We are not responsible for the content or privacy practices of external sites.

You can clear your saved interests at any time from within the app. To ask what we hold about a message you sent, or to have it deleted, use the contact form.

If you are in the United Kingdom or the European Economic Area, the UK and EU GDPR give you rights over your personal data: to access a copy of it, to correct it, to have it erased, to restrict or object to its processing, and to data portability. We process your data to perform our contract with you (running your account and any subscription) and for our legitimate interest in operating and securing the service; where we rely on consent (such as marketing emails), you can withdraw it at any time.

To exercise any of these rights, use the contact form or email hello@gre-intelligence.com; we aim to respond within 30 days. You also have the right to complain to your local supervisory authority (in the UK, the Information Commissioner’s Office). Your data is handled by our providers (Supabase, Vercel and Stripe) and may be transferred to and stored in countries outside the UK/EEA, including Canada and the United States, under appropriate safeguards.

As the product grows we will update this policy and note the date above.