Privacy policy

Who we are

Regmindr helps companies keep track of their regulatory obligations. This policy explains what personal data Regmindr collects when you visit the website or use the app, why, and what rights you have over it. For any privacy question, write to contact@regmindr.com.

What we collect

• Account details: your email address, your name if you add one, and your password. Passwords are stored only as a secure hash, never in plain text.
• Workspace data: what you and your team enter into Regmindr, such as your organization's name, obligations, due dates, notes, completion records, files you attach as proof of completion, team members and invitations, and the audit log of changes.
• Feedback: messages you send through the in-app feedback form, together with the page you sent them from.
• Usage statistics: anonymous page view counts, referring site, country and device type, collected with Vercel Web Analytics. It uses no cookies and cannot identify you or follow you across other websites.
• Technical logs: our hosting providers keep short-lived server logs, including IP addresses, to run the service and protect it from abuse.

Why we use it

• To provide the service you signed up for: your account, your workspace and your team. The legal basis is the performance of our contract with you.
• To answer your feedback, keep the service secure and understand which parts of the site are used, so we can improve it. The legal basis is our legitimate interest in running a reliable product.

We do not sell your data, show advertising, or use your workspace data for any purpose other than running Regmindr for you.

Cookies

Regmindr only uses cookies that are strictly necessary. When you sign in, an authentication cookie keeps you signed in. Your light or dark theme choice is saved in your browser's local storage. There are no advertising or tracking cookies, which is why the site does not ask for cookie consent.

Where your data is stored

Your account and workspace data are stored in a database in Ireland, in the EU, and the app's servers run in Dublin. We rely on these service providers:

• Supabase: database, file storage and sign-in (EU, Ireland).
• Vercel: application hosting (EU, Dublin) and anonymous usage statistics.
• Resend: sending emails, such as deadline reminders and the confirmation when you send feedback.
• Namecheap and Google: forwarding and receiving email sent to contact@regmindr.com.

Some of these providers are based in the United States. Where your data leaves the EU, it is protected by the Standard Contractual Clauses approved by the European Commission, or by the EU–US Data Privacy Framework.

How long we keep it

We keep your account and workspace data for as long as your account is active. If you ask us to delete your account, we delete your personal data within 30 days, except where the law requires us to keep it longer. Feedback messages are kept only as long as needed to answer them and improve the product.

Your rights

Under the GDPR and UK GDPR you can ask us to access, correct, export or delete your personal data, and you can object to or restrict how we use it. Write to contact@regmindr.com and we will reply within one month. You also have the right to complain to your local data protection authority.

Security

How Regmindr protects your data is described on the security page.

Changes to this policy

If this policy changes, the date at the top of this page is updated. We will tell account holders by email about any significant change before it takes effect.