Privacy Policy

How we collect, use, and protect your personal information

Last Updated: January 1, 2026

Grey View Realty ("we," "us," or "our") is committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your data when you use our website, mobile applications, and investment platform services (collectively, the "Platform"). By accessing or using the Platform, you agree to the practices described in this policy.

1. Information We Collect

a) Personal Information You Provide

When you create an account, make investments, or interact with our Platform, we may collect:

  • Identity Data: Full name, date of birth, nationality, and government-issued identification documents (passport, national ID, or driver's license)
  • Contact Data: Email address, phone number, and residential address
  • Financial Data: Bank account details, cryptocurrency wallet addresses, transaction history, and investment records
  • Verification Data: KYC (Know Your Customer) documents, proof of address, selfie verification photos, and source of funds declarations
  • Profile Data: Username, password (stored in encrypted form), investment preferences, and communication preferences
  • Referral Data: Referral codes used or shared, and information about users you refer to the Platform
b) Information Collected Automatically

When you access our Platform, we automatically collect:

  • Device Data: IP address, browser type and version, operating system, device identifiers, and screen resolution
  • Usage Data: Pages visited, time spent on pages, click patterns, features used, and navigation paths
  • Location Data: Approximate geographic location derived from your IP address
  • Log Data: Access times, login/logout timestamps, error logs, and session identifiers
c) Information from Third Parties

We may receive information from identity verification providers, credit reference agencies, fraud prevention services, and public databases to verify your identity and comply with regulatory obligations.

2. How We Use Your Information

We use the information we collect for the following purposes:

Account Management

Create and manage your account, process registration, verify your identity through KYC procedures, and maintain account security.

Investment Services

Process property investments, calculate and distribute returns, track portfolio performance, and manage your wallet balance.

Payment Processing

Process deposits and withdrawals, verify payment receipts, detect fraudulent transactions, and maintain financial records.

Security & Compliance

Prevent fraud, enforce our terms of service, comply with anti-money laundering (AML) regulations, and protect against unauthorised access.

Communications

Send transaction confirmations, investment updates, security alerts, service announcements, and respond to your inquiries.

Platform Improvement

Analyse usage patterns to improve our services, develop new features, conduct research, and enhance user experience.

4. Information Sharing & Disclosure

We do not sell your personal information. We may share your data with:

  • Service Providers: Third-party vendors who assist with payment processing, identity verification, cloud hosting, email delivery, and analytics. These providers are contractually obligated to protect your data and use it only for the specified purposes.
  • Financial Institutions: Banks and payment processors involved in processing your deposits, withdrawals, and investment transactions.
  • Regulatory Authorities: Government agencies, law enforcement, tax authorities, and regulators when required by law or legal process, including responses to court orders and subpoenas.
  • Professional Advisors: Lawyers, auditors, and accountants who require the information to provide professional services to us.
  • Business Transfers: In connection with a merger, acquisition, reorganisation, or sale of assets, your information may be transferred to the successor entity, subject to the same privacy protections.

Note: We will never share your investment details, wallet balance, or financial data with other users of the Platform unless explicitly authorised by you.

5. Data Security

We implement industry-standard security measures to protect your personal information, including:

  • Encryption: All data transmitted between your device and our servers is encrypted using TLS/SSL protocols. Sensitive data such as passwords are stored using bcrypt hashing with high computational cost factors.
  • Access Controls: Strict role-based access controls limit employee access to personal data on a need-to-know basis. All administrative actions are logged in our audit trail.
  • Session Security: Sessions are protected with fingerprinting, automatic expiry, periodic regeneration, and secure cookie attributes.
  • Monitoring: Continuous monitoring for suspicious activity, rate-limited login attempts, and automated lockout mechanisms to prevent brute-force attacks.
  • Upload Security: Uploaded files (receipts, KYC documents) undergo MIME type validation, file extension checks, and are stored in access-restricted directories with script execution disabled.

While we take reasonable measures to protect your data, no method of electronic transmission or storage is 100% secure. We encourage you to use strong, unique passwords and enable all available security features on your account.

6. Data Retention

We retain your personal information for as long as necessary to:

  • Provide our services and maintain your account
  • Comply with legal and regulatory obligations (including KYC/AML record-keeping requirements, which typically mandate retention for 5-7 years after the business relationship ends)
  • Resolve disputes and enforce our agreements
  • Maintain financial records as required by applicable tax laws

Transaction records and investment data are retained as part of our immutable financial ledger for the duration required by law. Upon account deletion, we will anonymise or securely delete personal data that is no longer required for legal or regulatory purposes.

7. Your Rights & Choices

Depending on your jurisdiction, you may have the following rights regarding your personal data:

Access

Request a copy of the personal data we hold about you.

Rectification

Correct inaccurate or incomplete personal data via your profile settings.

Erasure

Request deletion of your data, subject to legal retention obligations.

Portability

Receive your data in a structured, commonly used, machine-readable format.

Object

Object to processing based on legitimate interests or for direct marketing.

Restriction

Request limitation of processing while we verify accuracy or legal grounds.

To exercise any of these rights, please contact us using the details in Section 10. We will respond to your request within 30 days. Note that certain rights may be limited where we have a legal obligation to retain data or an overriding legitimate interest.

8. Cookies & Tracking Technologies

We use cookies and similar technologies to enhance your experience:

Type Purpose Duration
Essential Session management, CSRF protection, authentication state, and security features. Required for the Platform to function. Session / 24 hours
Functional Remember your preferences, language settings, and display options. Up to 1 year
Analytics Understand how visitors use the Platform, identify popular features, and improve performance. Up to 2 years

You can manage cookie preferences through your browser settings. Disabling essential cookies may affect Platform functionality. For more details, see our Cookie Policy.

9. International Data Transfers

Our Platform operates globally and your data may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. When we transfer data internationally, we implement appropriate safeguards including:

  • Standard Contractual Clauses approved by relevant data protection authorities
  • Transfers to countries recognised as providing an adequate level of data protection
  • Binding corporate rules for internal group transfers
  • Your explicit consent where no other safeguard is available

10. Contact Us

If you have questions about this Privacy Policy, wish to exercise your data rights, or have concerns about how your information is handled, please contact us:

Email: privacy@Grey View Realty

Address: ----

Response Time: We aim to respond to all privacy-related inquiries within 30 days.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. We will notify you of any material changes by posting the updated policy on the Platform and updating the "Last Updated" date. For significant changes, we may also send you a notification via email or through an in-platform alert. Your continued use of the Platform after any changes constitutes acceptance of the updated policy.