Privacy Policy

1. Introduction

2. Information We Collect

2.1 Information You Provide Directly

Account Information: Email address (required for signup), full name (optional), company name (optional), job title (optional)

Questionnaire Responses: Jurisdiction you select, entity type you select, business details you enter, any notes or descriptions

Communication: Emails you send to us (support inquiries, feedback), messages through contact forms

2.2 Information Collected Automatically

Device Information: IP address, browser type and version, device type (desktop, mobile, tablet), operating system

Usage Information: Pages visited, time spent on each page, clicks and interactions, frameworks generated, PDF downloads, login/logout times

Cookies & Tracking: Session cookies (to keep you logged in), analytics cookies (to understand usage patterns)

3. How We Use Your Information

Providing Services: Create and manage your account, generate compliance frameworks, send you generated PDFs, respond to support requests, improve the Platform based on usage

Communications: Send email verification, send promotional news (if opted in), respond to inquiries, send service announcements

Analytics & Improvement: Analyze usage patterns, track feature usage, understand user behavior (anonymized), improve Platform performance

4. How We Share Your Information

We do NOT sell your data. We do NOT share data with advertisers. We do NOT rent or lease your information.

We share information ONLY with services necessary to operate our Platform:

• Email Service (Resend): Your email address and emails we send you
• Hosting & Database (Vercel + Railway): Account data and questionnaire responses
• API Services (Anthropic): Questionnaire responses (anonymized) for framework generation

We may disclose information if required by law (subpoena, court order).

5. Data Retention

Questionnaire Without an Account: If you complete the questionnaire but do not create an account, your answers are deleted after 30 days

Active Accounts: Email, name, company kept while account is active; questionnaire responses kept while account is active

Deleted Accounts: Account data deleted 30 days after account deletion; backups may retain for an additional 30 days

Email Communications: Emails you send us retained for 2 years (for support history)

Analytics: Raw logs retained for 90 days; aggregated analytics retained indefinitely (anonymized)

6. Your Privacy Rights

6.1 GDPR Rights (EU Users)

Right to Access: Request a copy of data we hold about you

Right to Correction: Correct inaccurate data (edit profile or contact us)

Right to Deletion: Request deletion of account and data

Right to Data Portability: Request your data in machine-readable format

Right to Object: Object to promotional emails (click "unsubscribe")

To exercise rights: Email support@regardly.ai

7. Security

Technical Measures: SSL/TLS encryption (HTTPS) for all data in transit, database encryption at rest, regular security updates, secure password hashing

Your Responsibility: Keep your password confidential, don't share account credentials, log out on public computers, notify us of unauthorized access

8. Contact Us

For Privacy Questions: Email support@regardly.ai

Response Time: Most requests 7–10 business days; GDPR requests 30 days

9. International Data Transfers

Your information may be transferred to, stored, and processed in countries other than the one in which you reside, including countries whose data protection laws may differ from those in your country.

Where we transfer personal data out of the EU/EEA or UK to a country not recognized as providing an adequate level of protection, we rely on appropriate safeguards, such as the European Commission's Standard Contractual Clauses, or another lawful transfer mechanism recognized under applicable data protection law.

10. Children's Privacy

Regardly is intended for use by compliance, legal, and business professionals, and is not directed to children. We do not knowingly collect personal information from anyone under the age of 16.

If we become aware that we have collected personal information from a child without appropriate consent, we will take steps to delete that information. If you believe a child has provided us with personal information, please contact us at support@regardly.ai.