Privacy Policy

Realize is a digital platform designed to provide technology-driven services, assessments, insights, recommendations, dashboards, reports, and related capabilities to users and organizations.

Realize is operated by: Legal Entity: Skysecure Technologies Private Limited Registered Address: Sakti Statesman, Unit # G/M-06 & 07, Marathahalli - Sarjapur Outer Ring Rd, 7th Cross, Green Glen Layout, Ibbaluru, Bengaluru, Karnataka 560103 Email: [email protected]

For the purposes of applicable data protection laws, the entity identified above is responsible for determining how personal data covered by this Privacy Policy is processed, except where Realize processes information solely on behalf of a customer organization.

Depending on how you interact with Realize, we may collect the following categories of information.

Account Information

When an account is created, we may collect information such as:

• Name
• Business email address
• Phone number, where applicable
• Organization or company name
• Job title or role
• Department
• Account identifiers
• Login and authentication information

Information Provided by You

We may collect information that you voluntarily provide when you:

• Complete assessments
• Fill in forms
• Configure your profile
• Upload documents or files
• Submit queries or instructions
• Contact support
• Provide feedback
• Communicate with us

Organization and Assessment Data

When Realize is used by an organization, the platform may process information relating to its technology environment, security posture, configurations, policies, applications, systems, or business processes. The specific information collected depends on the Realize service or assessment being used.

Technical and Usage Information

We may automatically collect information such as:

• IP address
• Browser type
• Device and operating system information
• Login timestamps
• Pages or features accessed
• User activity within the platform
• System events
• Error and diagnostic information
• Security and audit logs

Cookies and Similar Technologies

Realize may use cookies and similar technologies to:

• Maintain user sessions
• Enable authentication
• Remember user preferences
• Improve platform performance
• Understand platform usage
• Maintain security

Additional information about cookies is provided in the Cookie Policy.

We may process personal information for purposes including:

• Creating and managing user accounts
• Authenticating users and controlling access
• Providing Realize features and services
• Conducting assessments requested by users or organizations
• Generating dashboards, reports, recommendations, and insights
• Personalizing the user experience
• Responding to user requests and support queries
• Maintaining platform security
• Detecting unauthorized or fraudulent activity
• Troubleshooting technical issues
• Monitoring service performance
• Maintaining audit and compliance records
• Improving our products and services
• Communicating important service, security, or policy updates
• Meeting applicable legal and regulatory requirements

We seek to collect and process only information reasonably required for these purposes.

Certain Realize services may use artificial intelligence, machine learning, automation, or rule-based technologies to analyse information and generate assessments, recommendations, classifications, summaries, reports, or other outputs.

Where these capabilities are used:

• Information is processed for the purpose of providing the requested Realize functionality.
• Appropriate access and security controls are applied.
• AI-generated outputs may require human review depending on the nature of the service.
• Users should independently review important recommendations before making significant business, security, legal, financial, or operational decisions.

Realize does not intend AI-generated recommendations to replace professional judgment where specialist review is required.

Where required by applicable law, Realize processes personal information based on an appropriate legal basis, including user consent, performance of a requested service, compliance with legal obligations, or other grounds permitted by law.

Where processing relies on consent, users may withdraw that consent using the available platform controls or by contacting us. Withdrawal of consent will not affect processing that was lawfully carried out before the withdrawal.

Some information may need to continue to be retained where required by law, security requirements, contractual obligations, dispute resolution requirements, or other legally permitted purposes.

Realize does not sell personal information. We may share information only where reasonably necessary with:

Service Providers

Trusted technology and service providers may process information to support services such as cloud hosting, authentication, security, monitoring, analytics, communication, and technical support. These service providers are expected to process information only for authorized purposes and subject to appropriate contractual and security requirements.

Customer Organizations

Where Realize is provided through an employer, customer, or other organization, authorized administrators or representatives of that organization may have access to information associated with their users, assessments, reports, and organizational environment.

Legal and Regulatory Authorities

Information may be disclosed where required to comply with applicable laws, respond to valid legal requests, protect our rights or property, prevent fraud or misuse, investigate security incidents, or protect users or the public.

Business Transactions

If the business undergoes a merger, acquisition, restructuring, financing, or transfer of assets, relevant information may be transferred as part of that transaction subject to appropriate protections.

Realize uses reasonable technical and organizational safeguards designed to protect information against unauthorized access, accidental disclosure, loss, misuse, modification, and destruction.

These safeguards may include, where appropriate:

• Access controls
• Role-based permissions
• Authentication mechanisms
• Encryption
• Security monitoring
• Logging and auditing
• Network and application security controls
• Backup and recovery procedures

No digital platform or transmission method can guarantee absolute security. Users are also responsible for protecting their account credentials and reporting suspected unauthorized activity.

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including to provide Realize services, maintain customer accounts, meet contractual requirements, maintain security and audit records, resolve disputes, and meet applicable legal and regulatory requirements.

When information is no longer required, we may securely delete, anonymize, or otherwise dispose of it in accordance with applicable requirements and internal retention policies. Different categories of information may have different retention periods.

Subject to applicable law, you may have rights concerning your personal information, including the ability to:

• Request information about how your personal data is processed
• Access information associated with you
• Request correction of inaccurate or incomplete information
• Request deletion or erasure where applicable
• Withdraw consent where processing is based on consent
• Raise a grievance regarding the handling of personal information
• Exercise other rights available under applicable data protection laws

Requests may be submitted to [email protected]. We may need to verify your identity before processing certain privacy requests. Where your Realize account is provided by an organization, some requests may need to be directed to that organization's administrator or privacy contact.

Realize is primarily intended for professional, enterprise, and business users and is not designed for use by children.

We do not knowingly collect children's personal information except where such processing is permitted under applicable law and appropriate authorization or consent requirements have been satisfied. If we become aware that children's information has been collected inappropriately, we will take reasonable steps to address the matter.

Realize or its authorized service providers may process or store information in countries other than the country in which the user is located.

Where international transfers occur, we take appropriate measures intended to ensure that information is handled in accordance with applicable data protection requirements. Where required by law, additional safeguards or contractual mechanisms may be implemented.

Realize may contain integrations or links to third-party websites, platforms, applications, or services. Those third parties operate under their own privacy practices, and Realize is not responsible for the privacy policies, security practices, or content of third-party services. Users should review the relevant third party's privacy policy before providing personal information.

Where an organization uses Realize and provides data to the platform, the organization may determine why and how certain information is processed. In these situations, Realize may process information on behalf of that organization according to applicable agreements and instructions. Questions about organization-controlled personal information may therefore need to be directed to the relevant organization.

Realize may use essential, functional, analytics, and other permitted cookies or similar technologies. Where consent is required for non-essential cookies, users will be provided with appropriate choices. Users may manage cookies through their browser settings. Realize does not currently provide a separate cookie-preferences control. For more details, please refer to our Cookie Policy.

We may update this Privacy Policy periodically to reflect changes to Realize features or services, our information-processing practices, legal or regulatory developments, or security or operational requirements.

When material changes are made, we may notify users through the Realize platform, website, email, or another appropriate method. The Last Updated date at the top of this page will indicate when this Privacy Policy was most recently revised.

If you have questions, concerns, requests, or complaints regarding this Privacy Policy or the processing of personal information through Realize, please contact:

Grievance Contact: [email protected] Address: Sakti Statesman, Unit # G/M-06 & 07, Marathahalli - Sarjapur Outer Ring Rd, 7th Cross, Green Glen Layout, Ibbaluru, Bengaluru, Karnataka 560103

We will review privacy-related requests and grievances and respond in accordance with applicable requirements.

Realize seeks to handle personal information in accordance with applicable data protection and privacy requirements, including, where applicable, India's Digital Personal Data Protection Act, 2023, the Digital Personal Data Protection Rules, 2025, and other applicable laws and regulations. Where Realize services are provided in other jurisdictions, additional privacy requirements may apply.

For questions about this Privacy Policy or Realize's privacy practices, contact:

Realize Skysecure Technologies Private Limited Email: [email protected] Website: Skysecure.ai