Privacy notice

Version 0.1-draft

DRAFT PLACEHOLDER. The final privacy notice is being written by Kian Pazhakh (Implementation Plan, item K3) and replaces this text before the first external user is approved.

Points the final notice will cover, from the agreed data handling (ADR-0015):

Who is responsible for your data, and how to contact us.
What we hold: account details, company details, usage and audit records, and the device information you enter.
Where it is held (RegulAI's own servers on AWS, with backups in a second location) and who processes it for us (AWS for hosting and email, and the AI provider).
That your device information is never used to train any AI model.
Who can see it: your colleagues in your company; the RegulAI operator sees account, usage and audit data, and device information only with time-limited support access you grant.
How long we keep it, and your rights: access, export, correction and deletion.