Privacy policy.

GREI is operated by Carbon Investment Partners Inc., which is the controller of the personal data described in this policy. Our privacy officer is reachable at hello@greintel.com and handles access, correction, and deletion requests, and any complaint about how we have handled your data.

You can browse and search without an account. A free account is what opens the news, deals and market research libraries (news, deals, market reports and thought leadership) and the GRE Intelligence Brief. We do not sell your data. We hold the account details you give us and the interests you choose to tailor your feed, and use them only to run and personalise the service.

Account & personalization: when you create an account we store your email and the profile details you provide (such as company type, function, and seniority). The sectors and regions you pick to tailor your feed are saved to your account so it follows you across devices. You can change or clear them any time from your account.

Messages you send us: if you use the contact form, we store the name, email, organization, and message you provide so we can respond. We keep these only as long as needed to handle your enquiry.

Payments: if you subscribe to a paid plan, your payment is handled by our payment processor, Stripe. Stripe collects and stores your card details directly; we never see or store your full card number. We retain only limited billing information (your plan, subscription status, and renewal dates) so we can manage your subscription.

Basic technical data: our hosting provider (Vercel) and database provider (Supabase) process standard request information, such as IP address and browser type, to serve and secure the site. We do not run third-party advertising or tracking pixels.

We use a small number of first-party cookies and no third-party advertising or tracking pixels. Every cookie below is set by GREI itself and used only to run and measure our own service. Because we set no advertising or cross-context tracking cookies, we do not show a cookie consent banner.

We set no third-party, advertising, or cross-context tracking cookies, and none of these cookies are sold or shared with advertisers or used to build a profile of you. You can clear or block them in your browser at any time; the site will still work.

To operate the site, manage your account and any subscription, respond to enquiries, keep the service secure, and improve coverage. We do not use your information for advertising and we do not sell or rent it.

We use what you tell us and what you do on the service to decide what to show you: the sectors and regions you choose, the items you open, and the searches you run. From this we may infer professional interests, for example that you follow European logistics or fund-level transactions, and we use those inferences to order your feed and to select the stories in the personalised edition of the GRE Intelligence Brief.

These inferences are used only inside GREI. They are never sold, never shared with advertisers, and never used to make a decision producing a legal or similarly significant effect on you. We do not use your personal data to train AI models. You can ask us what we have inferred, correct it, or turn personalisation off at any time.

Account details: while your account is open, and up to twelve months after you close it, so we can answer billing and support questions. Interests and personalisation signals: while your account is open, and immediately on request if you clear them. Messages you send us: up to twenty-four months. Billing records: seven years, as Canadian tax law requires. Analytics and technical logs: up to twenty-four months. After that we delete or anonymise.

We send the GRE Intelligence Brief to people who asked for it. Every edition carries a one-click unsubscribe link, our sender identity, and a postal address, as Canadian anti-spam law requires, and we keep a record of when and how each subscriber signed up.

GREI is built for real-estate professionals and is not directed at children. We do not knowingly collect personal data from anyone under sixteen, and if we learn that we have, we delete it.

We hold your data to an institutional security standard. GREI is built entirely on SOC 2 Type II–certified infrastructure: the application and edge network run on Vercel, data is stored in Supabase (on AWS), and payments are processed by Stripe, each an independently audited SOC 2 Type II provider, with Stripe additionally certified to PCI DSS Level 1, the highest tier in the payment-card industry.

All traffic is encrypted in transit with TLS, and data is encrypted at rest. Access to production systems is restricted, authenticated, and least-privilege by default, and we never store full payment-card numbers. We continuously monitor the service and follow industry best practices for data protection; if we ever detect a breach affecting your personal data, we will notify affected users and the relevant authorities as required by law.

The portal links to research on publishers’ own websites. When you follow a link, that publisher’s own privacy practices apply. We are not responsible for the content or privacy practices of external sites.

You can clear your saved interests at any time from within the app. To ask what we hold about a message you sent, or to have it deleted, use the contact form.

If you are in the United Kingdom or the European Economic Area, the UK and EU GDPR give you rights over your personal data: to access a copy of it, to correct it, to have it erased, to restrict or object to its processing, and to data portability. We process your data to perform our contract with you (running your account and any subscription) and for our legitimate interest in operating and securing the service; where we rely on consent (such as marketing emails), you can withdraw it at any time.

To exercise any of these rights, use the contact form or email hello@greintel.com; we aim to respond within 30 days. You also have the right to complain to your local supervisory authority (in the UK, the Information Commissioner’s Office).

If you are in Canada, PIPEDA gives you the right to access the personal information we hold about you and to ask us to correct it, and you may complain to the Office of the Privacy Commissioner of Canada. If you are in Quebec, Law 25 additionally gives you the right to ask how an automated decision about you was reached and to have it reviewed by a person; our privacy officer handles those requests, and you may complain to the Commission d’accès à l’information.

Your data is handled by our providers (Supabase, Vercel and Stripe) and may be transferred to and stored outside the UK and EEA, including in Canada and the United States. Canada holds UK and EU adequacy decisions for commercial organisations. For transfers to the United States we rely on our providers’ Standard Contractual Clauses.

As the product grows we will update this policy and note the date above.