Privacy policy

This policy explains what personal data CRE7 Invest processes when you use this website, on what legal basis, and what your rights are under the GDPR.

Data controller

CRE7 Invest is the controller of the personal data described in this policy. Contact: privacy@cre7invest.com.

Data we process

On this marketing site we process only the data needed to deliver the page (server logs, IP address, browser metadata) and the preferences you set (language and theme), stored in the cookies listed in our cookie policy. If you register for an account on app.cre7invest.com, additional data is processed there — including the information needed for KYC verification and to operate your account.

Lawful basis

We rely on legitimate interest (Article 6(1)(f) GDPR) to operate the website and remember your preferences, and on contract performance (Article 6(1)(b)) and legal obligation (Article 6(1)(c)) for the account, KYC, and investment flows on the app.

Recipients and processors

We share data only with processors needed to run the service: our hosting providers, the KYC provider used during account verification, and payment providers used to process investments. All processors operate under data processing agreements.

Retention

Server logs are retained for a limited period for security and troubleshooting. Account data is retained for as long as your account is active, and longer where required by financial regulation.

Your rights

Under the GDPR you have the right to access, rectify, erase, restrict, or object to processing of your personal data, and the right to data portability. To exercise any of these rights, contact privacy@cre7invest.com.

Supervisory authority

You have the right to lodge a complaint with a data protection authority in the EU member state where you live or work.

Last updated: 26 June 2026