Privacy
Privacy at RegLayer.
Effective 21 August 2026
Information we store
RegLayer stores account details, company profile information, priority markets, questions, saved work, and the regulatory analysis generated for an account. Public-site activity records contain the requested page, a random first-party browser identifier, a salted IP fingerprint, and coarse location supplied by Cloudflare. RegLayer does not retain the raw IP address in these activity records. After a free brief is claimed, RegLayer retains a salted one-way fingerprint of the verified email address to enforce the one-trial limit. Authentication, research-run, cost, and error records are retained as needed to secure and operate the service.
How we use it
The information is used to authenticate users, produce and improve regulatory research, answer questions, monitor reliability, and respond to corrections. RegLayer does not sell personal information.
Service providers
Cloudflare provides application hosting and storage. Google Analytics measures visits and use of the public website. OpenAI processes profile information, documents, and questions when RegLayer performs requested analysis. Resend delivers sign-in codes and operational email. Stripe processes Decision Brief payments. RegLayer does not store full card details.
Retention and deletion
Account, profile, research, and workspace data is retained while an account is active. Sign-in codes expire after ten minutes and sessions after thirty days. Customer documents are stored securely for the duration of the relevant workspace and may be deleted by the account owner. One-off Decision Brief workspaces are retained for 12 months after delivery. Deleted customer content is removed from active systems promptly and from residual backups within 30 days. Customer data is not used to train shared or public models. Signed-in users can delete account-scoped data from account settings. Shared regulatory material that no longer identifies the account may remain. Correction and deletion requests can also be sent to hello@reglayer.ai.
Research boundary
RegLayer is a regulatory research and monitoring product. It is not a law firm and does not provide legal advice.