Privacy Policy

1. Scope

This Privacy Policy applies to:

Visitors to our website www.rexe.ai
Users of the REXE digital conveyancing and escrow platform
Clients, partners, lawyers, notaries, banks, real estate agents, engineers, valuers, and service providers engaged in transactions through REXE

2. Information We Collect

We may collect and process the following categories of information:

Personal Information:

Name, email, phone number, ID documents, tax ID, passport, address.

Transaction Information:

Property details, contracts, settlement instructions, bank account details for escrow.

Professional Information:

Firm/company name, professional role, regulatory registrations

Technical Information:

IP address, browser type, cookies, usage data, device identifiers

Communication Records:

Correspondence with our team, support tickets, feedback

3. How We Use Your Information

We use your personal information for:

Enabling

property settlements and escrow transactions

Conducting

KYC (Know Your Customer)
and regulatory compliance checks

Managing and executing

legal and notarial documentation

Facilitating

communications between buyers, sellers, and professionals

Providing

customer support and training

Sending updates about

product improvements, compliance obligations,
or pilot programs

Meeting

legal, tax, and regulatory obligations
under Greek and EU law

We process your information on the following bases:

Performance of a Contract –

to complete property transactions and escrow services

Legal Obligation –

to comply with laws (e.g. AML/CTF, property, and tax regulations)

Legitimate Interests –

to improve our services, ensure platform security, and engage
engage with partners

Consent –

where you have expressly agreed (e.g. marketing communications)

5. Disclosure of Information

We may share your information with:

Notaries and Lawyers –

for contract drafting, execution, and settlement

Banks and Financial Institutions –

for escrow, mortgage, and payment processing

Engineers & Valuers –

for compliance certificates and valuations

Insurance & Utility Providers –

if you choose to use referral services

Regulators & Authorities –

where required by law

Technology Partners –

including KYC, e-signature, and cloud hosting providers
(e.g. Microsoft Azure, DocuSign, Sumsub)
We will never sell your data to third parties.

6. International Transfers

Where information is transferred outside the EU/EEA (e.g. to Australia for diaspora client
support), REXE ensures appropriate safeguards are in place, consistent
with GDPR
requirements.

7. Data Security

We implement industry-standard security measures, including:

Encrypted document storage (Azure Blob)
Secure escrow accounts with EU-regulated banks
Role-based access controls
Audit logging of all user activity
Regular cybersecurity audits (via independent experts)

8. Data Retention

We retain information only as long as necessary:

Transactional records –

retained for the statutory period under Greek law
retained for the statutory period under Greek law

KYC/AML documentation –

retained for minimum regulatory periods

Marketing communications –

until you opt out

You have the right to:

Access your personal data
Request correction or deletion
Restrict or object to processing
Request data portability
Withdraw consent at any time

Lodge a complaint with the

Hellenic Data Protection Authority (HDPA)

10. Cookies & Tracking

Our website uses cookies and similar technologies for:

Site functionality
Security and fraud prevention
Analytics to improve user experience

You can manage your cookie preferences through your browser settings.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Any significant changes will be notified via our website or by direct communication where appropriate.

12. Contact Us

If you have questions or concerns about this Privacy Policy, please contact us:

REXE Privacy Officer

Email:
compliance@rexe.ai
Phone number:
+61 3 9209 9000
⚖️ This Privacy Policy is designed to comply with the EU General Data  Protection Regulation (GDPR), the Greek Data Protection Act, and  relevant financial and property laws.