Privacy Policy

This Privacy Policy explains how Regunow, LLC handles personal data when you visit the website or use its regulatory research workspace, API, account features, and support services.

Regunow, LLC is the controller responsible for account administration, service security, billing, and its own product operations.

When a business customer determines why personal data in its documents or instructions is processed, that customer may be the controller and Regunow may act as its processor. Those responsibilities depend on the actual processing and the applicable data-processing agreement. In that situation, requests about customer-controlled personal data should normally be directed to that customer, and we assist as required by our agreement and law.

Account information includes your email address, profile information, authentication records, and preferences. If you sign in with Google, Google provides the identifiers and profile details needed to authenticate you, such as your name, email address, profile image, and Google account identifier. Google manages your Google sign-in credential.

Workspace content includes your prompts, answers, saved conversations, source references, folders, uploaded files and images, generated reports and images, personalization settings, and any feedback or support material you submit.

Workspace content may contain sensitive personal data or information about other people, including health, biometric, employment, financial, political, religious, trade-union, criminal, or government-identifier information. Submit this information only when it is necessary for your work and you have a lawful basis and authority to process and disclose it through the service.

Technical and usage information includes request identifiers, timestamps, service activity, model and feature usage, credit transactions, errors, device and browser information, and network information such as IP addresses. We use operational records for security, service delivery, reliability, and usage accounting.

Stripe and Link receive the billing, contact, payment and tax information needed to process purchases, prevent fraud, issue invoices and handle transaction support. For Managed Payments purchases, Link acts as merchant of record. These providers process information under their own privacy notices. Regunow receives the order and billing records needed to provide the service; we do not store complete card numbers.

Policy-acceptance records include the policy versions, acceptance time, account identifier, account-email hash, language, and acceptance method needed to document your agreement. We do not store your complete email address in the retained acceptance record.

We use information to create and secure accounts, answer research questions, analyze attachments you select, save your work, provide source references, generate requested outputs, respond to support requests, and maintain the service.

We also measure resource usage, administer credits and subscriptions, prevent fraud and abuse, investigate failures, and meet applicable legal obligations. Operational accounting and security records are distinct from optional browser analytics.

Account identifiers, authentication information, and the billing details required at checkout are necessary to create and secure an account, provide a paid subscription, and administer payment. Optional profile fields, personalization, learned memory, dictation, and product analytics are not required to create the account, although declining or disabling a feature means that feature cannot provide its requested function.

Where data-protection law requires a lawful basis, we rely on performance of a contract for the service you request, legitimate interests for proportionate security, reliability, support, fraud prevention, agreement enforcement, and legal-claim activities, consent for optional analytics, and legal obligations for records and disclosures required by law. We assess these purposes and the effects on individuals when determining the appropriate lawful basis.

Regunow does not use personal data to make solely automated decisions that produce legal or similarly significant effects about an individual. Generated research and suggestions support human work and must not be treated as an automated approval, eligibility decision, or professional judgment.

Regunow uses service providers for cloud infrastructure and storage, account and database operations, AI-assisted content processing, regulatory information retrieval, web search, speech transcription, and image generation. Depending on the feature you use, these providers may receive the question, relevant conversation context, retrieved materials, selected attachment content, and technical information reasonably necessary to perform that function. Files stored in Library are not automatically included in every request.

Regunow does not use your prompts, answers, documents, images, or dictation recordings to train AI models. Where available, we configure providers to restrict the use of customer content for provider training or product improvement. Providers may process or retain limited information as necessary to deliver and secure their services, prevent abuse, and comply with law.

Business customers may request our current subprocessor list, advance notice of material subprocessor changes where agreed, and applicable data-processing terms. Individuals may request information about recipients of their personal data and the safeguards that apply by using the contact route below.

We may disclose limited information to professional advisers, authorities, or other parties where required by law, necessary to protect rights or security, or part of a business reorganization. A change of ownership does not remove the applicable duties to protect your information.

Personalization lets you choose response preferences and instructions. When learned memory is enabled, the memory service can derive facts, preferences, and summaries from your conversations. You can review and delete these records. Turning memory off stops learned-memory retrieval and new learning, but it does not delete existing memories or disable the explicit instructions you saved.

Conversation continuity uses relevant saved context. Regulatory evidence and citation metadata are saved with answers so you can return to the references. Requested source translations are cached for your account and message to avoid repeating the same processing.

Web Search may run automatically in Freestyle mode or when you select it. Relevant search queries go to the search service, and result summaries can be provided to the answer model. Links to external websites have their own privacy practices.

Dictation starts only after you choose it and allow microphone access. The recording is transcribed, and the resulting text is placed in the composer for you to review. It is not sent as a chat message automatically. Regunow deletes temporary audio and the transcription job after processing, with a one-day storage cleanup safeguard for interrupted requests.

Necessary browser storage supports sign-in, security, your requested preferences, and workspace navigation. The Cookie Policy identifies those technologies and their lifetimes.

Optional product analytics starts only after you allow it and only when it is configured for the site. It measures visits and selected jurisdictions, models, settings, and features, and may receive browser, device, and network information required to provide those measurements. We do not send research content, filenames, email addresses, conversation identifiers, or account identifiers as analytics event properties.

We do not use optional analytics for advertising or behavioral profiles, and we do not use session replay or automatic interaction capture. You can refuse or withdraw optional analytics through Manage cookies without losing access to the application. Global Privacy Control keeps optional analytics off.

Workspace content remains available while you keep it in your account. You can delete conversations and Library files using the product controls. Deleting a Library file removes its active stored object and derived analysis cache, but material already included in a conversation may remain with that conversation until it is deleted.

Short-term memory events are configured for up to 365 days. Automatically learned facts and preferences are reviewed after 180 days without use and expire after 365 days without use. Explicit personalization and information you expressly ask Regunow to remember remain until changed or deleted. Deleting a conversation removes its session events and summaries, while account-wide facts and preferences have separate controls.

Operational and security records are retained for the period reasonably needed to deliver the service, reconcile usage, investigate failures, prevent fraud or abuse, and protect accounts. Support and complaint records are retained while the matter is open and for the applicable follow-up or legal-claim period. Billing, invoice, tax, refund, and chargeback records are retained for the periods required or permitted by financial, tax, accounting, and consumer-protection law.

After you complete the account-deletion process and confirm your request, access is disabled immediately and cannot be restored. Thirty days after that, we delete the account and active workspace data, including profile information, saved conversations and other content, files, folders, memories, generated materials, and remaining credit balances.

We may retain limited records when necessary and permitted to comply with law, establish, exercise, or defend legal claims, resolve payments, refunds, chargebacks, or tax matters, prevent fraud or abuse, protect security, enforce our agreements, or honor a legal hold. Policy-acceptance evidence is retained for the applicable agreement and legal-claim period. Records of a privacy or deletion request may be retained to document compliance. Access is restricted to the relevant purpose, and the information is deleted or de-identified when that purpose and the applicable retention period end.

Residual copies may remain temporarily in backups until normal deletion cycles. Backup and retained information is not available for account restoration or ordinary service use and remains subject to access restrictions until deletion.

You can manage your profile, conversations, folders, files, personalization, and learned memories through the workspace. You can refuse optional analytics and deny or revoke microphone permission. You may also request access to or a copy of your personal data through the contact route below.

Depending on applicable law, you may have rights to access, correct, delete, or receive a portable copy of personal data; restrict or object to processing; withdraw consent; and complain to a data-protection authority. Withdrawing consent does not affect processing lawfully carried out before withdrawal. These rights can have exceptions, including obligations to retain certain records.

You may use an authorized agent where applicable law permits. We may request reasonable information to verify your identity, the agent’s authority, or both, and we use verification information only for the request. We respond within the time required by applicable law. If we decline a request, we explain the reason and any applicable appeal process. We do not discriminate against you for exercising privacy rights.

Regunow is intended for international business use. Your information may be processed outside the country where you live, including where our hosting, model, support, and payment providers operate. The countries covered by our regulatory corpus do not describe the locations where customer data is stored or processed.

International processing is subject to applicable data-protection requirements. Where required, transfers must be supported by an adequacy decision, appropriate contractual safeguards, or another lawful transfer mechanism. You may request information about the safeguards relevant to your data by emailing legal@regunow.com or using our contact page.

We use access controls, private storage, encryption in transit, and other measures designed to protect information. No service is completely secure. Protect your credentials and only upload personal, confidential, or client material you are authorized to process.

Where applicable U.S. privacy laws apply, the categories described above include identifiers, commercial and billing records, internet or network activity, user-provided content, and professional information you supply. Sources include you, your use of the service, identity providers, and payment providers. We use and disclose these categories for the purposes described in this policy.

We do not sell personal data or share it for cross-context behavioral advertising. We do not use optional analytics to build advertising profiles. Applicable access, correction, deletion, portability, opt-out, and appeal rights can be exercised through the contact route below.

Regunow is intended for adults using it for professional and business purposes. It is not directed to children. If you believe a child has provided personal data, contact us so we can investigate and take appropriate action.

We will update this policy when our practices change. Material changes will be explained through the website, the product, or account communications as appropriate. Where new consent is needed, an updated notice alone does not replace that consent.

Send privacy and legal requests to legal@regunow.com. You may also use our contact page or contact the competent data-protection authority where applicable.