Privacy Policy

Last updated: March 19, 2026

1. Introduction

Real Horizons ("we", "our", or "us"), a product of GastroSpectra Private Limited, is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our services.

2. Information We Collect

We collect information that you provide directly to us, such as when you create an account, subscribe to our newsletter, or contact us for support. This may include:

  • Identity Data: Name, email address, and profile information (company, job title).
  • User Content: 3D models, images, and tours you upload.
  • Usage Data: Information about how you use our Service, including credit consumption and feature usage.
  • Billing & Transaction Data: Information needed to create and manage subscriptions, credit purchases, invoices, and customer portal activity, such as organization identifiers, selected plans or credit packages, provider customer or subscription identifiers, transaction metadata, and limited purchaser contact details.
  • Technical Data: IP address, browser type and version, device information, operating system, and other technology identifiers on the devices you use to access the Service.

3. Legal Basis for Processing

We process your personal data on the following legal grounds:

  • Contract Performance: Processing is necessary to fulfill our contractual obligations to you, including providing the Service, managing your account, and processing transactions.
  • Consent: Where you have given us explicit consent, such as for marketing communications or optional analytics.
  • Legitimate Interest: Processing is necessary for our legitimate interests, such as improving the Service, preventing fraud, and ensuring platform security, provided these interests are not overridden by your rights.
  • Legal Obligation: Processing is necessary to comply with applicable laws and regulations.

4. How We Use Your Information

We use the information we collect to provide, maintain, secure, and improve our services; authenticate users and organizations; process subscriptions, credit purchases, and related billing actions; enforce hosting and feature entitlements; send technical notices, billing messages, and support communications; prevent fraud and abuse; and communicate with you about products, services, offers, and events.

User Content Usage: Your uploaded 3D models and content are used solely for the purpose of providing the Service to you. We do not use your User Content for marketing, advertising, or training AI models without your explicit consent.

5. Cookies & Tracking Technologies

We use cookies and similar tracking technologies to collect and track information about your activity on our Service. These include:

  • Essential Cookies: Required for authentication, session management, and security. These cannot be disabled as they are necessary for the Service to function.
  • Analytics Technologies: We use analytics technologies, including Google Analytics and, where enabled, Microsoft Clarity, to understand traffic and usage patterns. These technologies may use cookies, scripts, or similar identifiers.
  • Security Tokens: We use Cloudflare Turnstile for bot protection during sign-up. This service may collect device and browser data to distinguish human users from automated traffic.

You can control certain cookie and tracking preferences through your browser or device settings. Note that blocking essential technologies may prevent you from using certain features of the Service, and blocking analytics technologies may reduce our ability to understand and improve usage of the Service.

6. Data Sharing & Third Parties

We may share your information with third-party vendors, service providers, contractors, or agents who perform services for us or on our behalf and require access to such information to do that work. These include:

  • Cloud Infrastructure: Supabase (AWS) for hosting, database, and storage.
  • Authentication: Google OAuth for sign-in services.
  • Payments & Billing: Dodo Payments for checkout, subscriptions, customer portal access, and payment processing. Payment card details are processed by Dodo Payments or its partners rather than stored directly by us.
  • Mapping & AI: Google Maps, Mapbox, and AI providers for spatial features.
  • Analytics: Google Analytics and, where enabled, Microsoft Clarity.
  • Security: Cloudflare Turnstile for bot protection and abuse prevention.

We require all third-party service providers to respect the security of your personal data and to treat it in accordance with applicable law. We do not sell your personal data to any third party.

7. Data Security & Retention

We implement appropriate technical and organizational measures to protect the security of your personal information. However, please be aware that no method of transmission over the Internet or method of electronic storage is 100% secure.

We retain your personal data only for as long as is necessary for the purposes set out in this Privacy Policy, including to maintain your account, provide the Service, and comply with legal, tax, accounting, fraud-prevention, and audit obligations. Upon account termination, we may retain certain account, billing, and transaction records as required or permitted by law, but will generally delete user content within 30 days.

8. Data Breach Notification

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours of becoming aware of the breach (where required by law). If the breach is likely to result in a high risk to your rights and freedoms, we will also notify you directly without undue delay, providing details of the breach and the steps we are taking to address it.

9. Your Rights

Depending on your location and applicable law, you may have the following rights regarding your personal data:

  • Right to Access: You can request a copy of the personal data we hold about you.
  • Right to Rectification: You can request that we correct any inaccurate or incomplete personal data.
  • Right to Erasure: You can request that we delete your personal data, subject to certain legal exceptions.
  • Right to Data Portability: You can request a machine-readable copy of your personal data to transfer to another service.
  • Right to Restrict Processing: You can request that we limit the processing of your personal data in certain circumstances.
  • Right to Object: You can object to processing based on legitimate interests or for direct marketing purposes.
  • Right to Withdraw Consent: Where processing is based on consent, you may withdraw consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us at contact@realhorizons.ai. We will respond to your request within 30 days. We may ask you to verify your identity before processing your request.

California Residents (CCPA): You have the right to know what personal information we collect, request deletion, and opt out of the sale of personal information. We do not sell personal information. To exercise your rights, contact us at contact@realhorizons.ai.

10. Children's Privacy

Our Service is not directed to individuals under the age of 16. We do not knowingly collect personal data from children under 16. If we become aware that we have collected personal data from a child under 16 without verification of parental consent, we will take steps to delete that information promptly. If you believe we have collected data from a child under 16, please contact us at contact@realhorizons.ai.

11. International Transfers

Your information, including Personal Data, may be transferred to — and maintained on — computers located outside of your state, province, country, or other governmental jurisdiction where the data protection laws may differ from those in your jurisdiction. By using the Service, you consent to such transfers. We take steps to ensure that your data is treated securely and in accordance with this Privacy Policy regardless of where it is processed.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date. For significant changes, we will provide additional notice (such as an email notification). Your continued use of the Service after any changes constitutes your acceptance of the updated Privacy Policy.

13. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your data rights, please contact us at contact@realhorizons.ai.