RED Invest Group - Privacy Policy for Instagram Chat Assistance (GDPR & CCPA Compliant)

This Privacy Policy explains how RED Invest Group ("we", "our", "us") collects, processes, stores, and protects personal information.

We are committed to protecting your privacy and handling your data in accordance with the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and other applicable privacy laws.

By interacting with our Instagram page or AI assistant, you acknowledge and consent to the practices described in this policy.

1. Information We Collect

We may collect the following categories of personal information:

1.1 Information You Provide

• Your full name or Instagram username
• Phone number (only when you voluntarily share it)
• Message content or inquiries you send
• Interests related to real estate, projects, or our services
• Any information you provide in conversation

1.2 Automatically Collected Information (via Instagram/Meta)

• Public Instagram profile name and profile ID
• Message timestamps and metadata
• Communication and event logs

We do not intentionally collect sensitive personal data (e.g., ID numbers, financial data, racial or ethnic information).

2. How We Use Your Information

We use personal information exclusively for the following purposes:

• Providing assistance via Instagram chat
• Answering your questions about real estate and our services
• Contacting you by phone when you provide your number
• Creating and managing customer inquiries in our CRM system
• Improving customer support and service quality
• Complying with applicable laws and preventing misuse

We do not sell personal information.

3. Legal Basis for Processing (GDPR)

We process personal data based on:

3.1 Consent (Article 6(1)(a))

When you voluntarily share your phone number or provide information in chat.

3.2 Legitimate Interest (Article 6(1)(f))

To respond to your inquiries, offer support, and operate our business efficiently.

3.3 Legal Obligation (Article 6(1)(c))

To comply with regulatory or legal requirements where necessary.

You may withdraw your consent at any time by contacting us.

4. Consumer Rights Under the CCPA

If you are a California resident, you have the following rights:

• Right to Know: Request details about the personal information we collect and how we use it.
• Right to Delete: Request deletion of your personal information.
• Right to Opt Out of Sale: We do not sell personal data.
• Right to Non-Discrimination: We will not discriminate against you for exercising any CCPA rights.

Requests can be submitted via the contact information below.

5. Data Sharing and Disclosure

We do not sell or share your personal information with unrelated third parties.

Your data may only be shared with:

• Internal RED Invest Group teams responsible for customer support
• Service providers who help us operate our CRM system, communication tools, and IT infrastructure
• Meta/Instagram systems as part of their messaging and platform functions

All partners are bound by confidentiality and data protection obligations.

6. Data Storage and Retention

Your information is securely stored in:

• Instagram/Meta communication systems
• Our internal CRM system

We retain your information only as long as necessary to:

• Provide services
• Fulfill legal obligations
• Resolve disputes
• Maintain accurate business records

After this period, data is deleted or anonymized.

We use appropriate technical and organizational measures to protect your data, including:

• Access control limitations
• Secure storage systems
• Encrypted communication channels (where applicable)
• Staff confidentiality agreements
• Regular security monitoring

Access is restricted to authorized personnel only.

8. International Data Transfers

Your data may be stored or processed in jurisdictions outside your country of residence.

Whenever such transfers occur, we implement safeguards in line with GDPR requirements, including Standard Contractual Clauses (SCCs) or equivalent protections.

9. Your Rights (GDPR)

Under GDPR, you have the following rights:

• Right of Access
• Right to Rectification
• Right to Erasure ("Right to be Forgotten")
• Right to Restrict Processing
• Right to Data Portability
• Right to Object
• Right to Withdraw Consent at any time
• Right to lodge a complaint with your local Data Protection Authority

To exercise any of these rights, contact us using the information below.

10. Children's Privacy

Our services are not intended for individuals under 18 years of age.

We do not knowingly collect personal data from children.

11. Changes to This Privacy Policy

We may update this Privacy Policy periodically.

Revisions will be posted with an updated "Last Updated" date.