Privacy Policy

1. Who we are

Really is operated by inCode Systems, LLC («Really,» «we,» «us,» or «our»), a limited liability company organized under the laws of the State of Texas, USA. This Privacy Policy explains what information we collect through our website and application (the «Service»), how we use it, and the choices you have.

By using the Service, you agree to the collection and use of information as described in this policy. If you don’t agree, please don’t use the Service.

2. Information we collect

Account information

When you sign up, we collect your name, work email address, and password (stored using a one-way hash, never in plain text). If you’re part of a team, we may also collect your company name and role.

Connected source content

When you connect a source, we access and index the content you authorize, which may include:

• Files and folder metadata from Google Drive and Microsoft OneDrive
• Files you upload directly
• Audio, video, and transcripts from calls you connect via your calendar
• Messages and content you send through Really’s chat interface

You control which sources are connected and can disconnect any of them at any time from your account settings.

Usage and device data

We automatically collect log data such as IP address, browser type, device information, pages viewed, and timestamps, to help us operate and secure the Service.

3. How we use information

We use the information we collect to:

• Provide, maintain, and improve the Service, including indexing your connected content so it’s searchable
• Power the chat and question-answering features, including generating responses from your connected content
• Authenticate you and secure your account
• Communicate with you about the Service, including updates and support
• Monitor usage, detect abuse, and enforce our Terms & Conditions
• Comply with legal obligations

We do not sell your personal information or your connected content to third parties.

4. AI models and processing

Really lets you connect an AI model from a provider of your choice. When you do, relevant content from your connected sources is sent to that provider to generate answers to your questions. That provider processes the content under its own terms and privacy practices, which we encourage you to review before connecting it.

We do not use your connected content to train our own foundation models, and we don’t share your content with AI providers you haven’t explicitly connected.

5. Third parties and sub-processors

We work with a limited number of service providers who process data on our behalf, including cloud hosting and storage providers, and the source integrations you choose to connect (such as Google, Microsoft, and your calendar or call provider). These providers are bound by contractual obligations to protect your data and use it only to provide services to us.

We may also disclose information if required by law, or to protect the rights, property, or safety of Really, our users, or others.

6. Security

Files and call transcripts are encrypted at rest and in transit. Access to your workspace is scoped to your account and any team members you explicitly invite. No method of transmission or storage is 100% secure, but we work to protect your information using industry-standard practices.

7. Data retention

We retain your account information and connected content for as long as your account is active. If you disconnect a source, we stop syncing new content from it and delete previously indexed content from that source within a reasonable period. If you delete your account, we delete your data within 30 days, except where we’re required to retain it for legal or security reasons.

8. Your rights

Depending on where you live, you may have the right to access, correct, export, or delete your personal information, and to object to or restrict certain processing. This applies in particular to individuals in the European Economic Area, the UK, and other jurisdictions with similar protections, and we extend these choices to all our users regardless of location. To exercise any of these rights, contact us at [email protected].

9. International transfers

We and our service providers may process information in countries other than your own, including the United States. Where required, we rely on appropriate safeguards, such as standard contractual clauses, to protect information transferred internationally.

10. Cookies

We use a small number of cookies necessary for the Service to function, such as keeping you signed in, along with limited analytics to understand how the Service is used. You can control cookies through your browser settings, though some features may not work correctly if you disable them.

11. Children's privacy

The Service is intended for business use by adults. We don’t knowingly collect personal information from anyone under 16. If you believe a child has provided us with personal information, please contact us and we’ll delete it.

12. Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we’ll notify you by email or through the Service before the changes take effect. The «Last updated» date at the top of this page reflects the most recent revision.

13. Contact us

If you have questions about this Privacy Policy or how we handle your information, contact us at [email protected] or write to inCode Systems, LLC, Texas, USA.