Privacy policy
This policy explains what personal data CRE7 Invest processes when you use this website, on what legal basis, and what your rights are under the GDPR.
Data controller
CRE7 Invest is the controller of the personal data described in this policy. Contact: privacy@cre7invest.com.
Data we process
On this marketing site we process only the data needed to deliver the page (server logs, IP address, browser metadata) and the preferences you set (language and theme), stored in the cookies listed in our cookie policy. If you register for an account on app.cre7invest.com, additional data is processed there — including the information needed for KYC verification and to operate your account.
Interest forms
If you leave your details through one of the interest forms on this site, we process what you submit — such as your name, email address, company name, and message — to follow up on your request and keep you informed about CRE7 Invest. The legal basis is your consent (Article 6(1)(a) GDPR), which you can withdraw at any time. Submissions are stored securely with our infrastructure provider, Cloudflare, and are kept for up to 24 months, or shorter if you ask us to delete them via privacy@cre7invest.com. To protect the forms against automated abuse we use Cloudflare Turnstile, which checks technical characteristics of your browser without tracking you across websites.
Lawful basis
We rely on legitimate interest (Article 6(1)(f) GDPR) to operate the website and remember your preferences, and on contract performance (Article 6(1)(b)) and legal obligation (Article 6(1)(c)) for the account, KYC, and investment flows on the app.
Recipients and processors
We share data only with processors needed to run the service: our hosting providers, the KYC provider used during account verification, and payment providers used to process investments. All processors operate under data processing agreements.
Retention
Server logs are retained for a limited period for security and troubleshooting. Account data is retained for as long as your account is active, and longer where required by financial regulation.
Your rights
Under the GDPR you have the right to access, rectify, erase, restrict, or object to processing of your personal data, and the right to data portability. To exercise any of these rights, contact privacy@cre7invest.com.
Supervisory authority
You have the right to lodge a complaint with a data protection authority in the EU member state where you live or work.
Last updated: 14 September 2026