Privacy Policy

Reggzs Inc. ("Reggzs", "we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our compliance management platform, including our website at reggzs.com and our web application (collectively, the "Service").

By accessing or using our Service, you agree to the collection and use of information in accordance with this policy. If you do not agree with the terms of this policy, please do not access the Service.

We collect information that you provide directly to us, including:

• Account information: Name, email address, and password when you create an account.
• Business profile data: Company name, industry, business description, technology stack, and data handling practices that you provide during onboarding.
• Compliance data: Requirement progress, notes, assigned team members, due dates, and evidence files you upload.
• Payment information: Billing details processed securely via Stripe. We do not store your full card number.
• Communications: Messages you send to our support team.

We also collect certain information automatically when you use the Service, including log data, device information, IP addresses, and usage patterns through analytics tools.

We use the information we collect to:

• Provide, maintain, and improve the Service
• Generate your personalized regulatory compliance roadmap using AI analysis
• Process transactions and send related billing information
• Send you technical notices, updates, and administrative messages
• Respond to your comments and questions
• Send weekly compliance digests (you may opt out at any time)
• Monitor and analyze usage patterns to improve user experience

We never use your business data to train AI models. Your compliance data is used exclusively to generate your own compliance roadmap and is not shared with other customers.

We implement industry-standard security measures to protect your information, including:

• Encryption at rest (AES-256) and in transit (TLS 1.3)
• Row-level security policies ensuring data isolation between customers
• Regular security audits and penetration testing
• SOC 2 compliant infrastructure via Supabase
• Access controls and audit logging for all administrative actions

While we implement these safeguards, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security.

We retain your account and compliance data for as long as your account is active or as needed to provide the Service. If you cancel your account, we will delete your data within 30 days of your written request, unless we are required to retain it for legal or regulatory purposes.

You may request a full export of your data at any time by contacting us at privacy@reggzs.com.

If you have questions about this Privacy Policy or our data practices, please contact us at:

Reggzs Inc.
Email: privacy@reggzs.com
Support: support@reggzs.com