Privacy Policy

Last updated: 15 October 2026
Applies to: RegulaTrust website, platform, communications, demos, and related services

1. Introduction

RegulaTrust is committed to protecting personal data and handling it responsibly, lawfully, and transparently. This Privacy Policy explains how RegulaTrust collects, uses, stores, shares, and protects personal data when you:

• visit our website
• request a demo, join a waitlist, or contact us
• sign up for or use the RegulaTrust platform
• communicate with us as a prospect, customer, partner, supplier, or website visitor
• otherwise interact with RegulaTrust in the course of our business

This policy is intended for business users, customer representatives, website visitors, and other individuals whose personal data we process in connection with RegulaTrust.

2. Who We Are

RegulaTrust is operated by:

Protego Sol Limited
Company Number: 15743777
Registered Office: Cleveland Square, London, United Kingdom, W2 6DD
Contact: hi@regulatrust.com

Protego Sol Limited operates the RegulaTrust platform and related services. Depending on context, Protego Sol Limited may act as:

Data Controller
When we determine how and why personal data is processed for business purposes such as:

• operating our website
• managing accounts
• responding to inquiries
• conducting sales and marketing
• managing contracts

Data Processor
When we process personal data on behalf of customers using the RegulaTrust platform.

3. Scope of This Policy

This Privacy Policy applies to personal data processed by RegulaTrust as a data controller. When RegulaTrust processes personal data on behalf of customers as a data processor, that processing is governed by the customer agreement and Data Processing Addendum. Customers remain responsible for providing privacy notices to their own users where required.

4. Personal Data We Collect

The types of personal data we collect depend on how you interact with our services.

4.1 Information You Provide

We may collect personal data including:

• name
• work email address
• phone number
• job title
• company name
• country or region
• account credentials
• billing information
• information submitted through forms or demos
• onboarding and support communications
• any other information you choose to provide

4.2 Automatically Collected Data

When you access our website or platform we may collect:

• IP address
• browser type
• operating system
• device information
• usage activity
• timestamps
• approximate geographic location
• system logs and diagnostics
• cookie data

4.3 Information From Third Parties

We may receive data from:

• analytics providers
• CRM and sales platforms
• payment processors
• authentication providers
• publicly available business sources
• our customers

5. How We Use Personal Data

5.1 Service Delivery

We process data to:

• create and manage accounts
• authenticate users
• deliver platform features
• provide customer support
• manage subscriptions and billing
• maintain platform performance

5.2 Business Operations

We use data to:

• respond to inquiries
• schedule demos
• manage commercial relationships
• send operational communications
• administer contracts

5.3 Platform Security and Improvement

We use data to:

• monitor performance
• troubleshoot issues
• prevent fraud or misuse
• investigate incidents
• improve product features

5.4 Sales and Marketing

We may process business contact information to:

• provide product updates
• share information about RegulaTrust
• manage waitlists and onboarding
• conduct B2B outreach including cold email where permitted by law

Where required by law, we rely on consent. Otherwise we rely on legitimate interest for proportionate B2B communication.

6. Lawful Bases for Processing

Where applicable under data protection law we rely on:

Contractual necessity
To provide services requested by customers.

Legitimate interests
Including:

• operating the RegulaTrust platform
• securing infrastructure
• business development and B2B marketing
• preventing fraud
• improving services

Legal obligations
Where required by law.

Consent
Where required, including for certain cookies.

7. Special Categories of Data

RegulaTrust does not intentionally collect special category personal data for its own business purposes. Customers should not upload sensitive personal data unless necessary and permitted under applicable law.

8. AI and Automated Processing

RegulaTrust may use AI-assisted features for tasks such as:

• document analysis
• regulatory intelligence
• workflow automation
• compliance support

These tools assist users but do not replace human decision making. Customer data is not used to train public foundation models without authorization. AI-generated outputs may contain errors and should be reviewed before reliance.

9. Cookies

RegulaTrust uses cookies and similar technologies to operate the website and improve user experience. Cookies may support:

• authentication
• analytics
• system security
• performance monitoring

Analytics cookies (Google Analytics and PostHog) are only set with your consent. You can change or withdraw consent at any time using the Cookie settings link in the website footer, or through your browser settings. Further details are provided in our Cookie Policy.

10. Data Sharing

We may share personal data with the following service providers:

Infrastructure and Hosting

• Supabase
• Vercel
• Render

Analytics

• Google Analytics (Google LLC / Google Ireland Limited)
• PostHog

Email Providers

• Brevo
• GoDaddy

Payments

• Stripe

Authentication

• Supabase

Monitoring / Logging

• Render

We may also share data with:

• professional advisers
• regulators and authorities where legally required
• investors or acquirers during corporate transactions

RegulaTrust does not sell personal data.

11. International Transfers

Primary hosting infrastructure is located in the European Union. Certain backups may be stored in the United States, and analytics data collected by Google Analytics may be processed in the United States. Where international transfers occur, we implement safeguards including: Standard Contractual Clauses (SCCs).

12. Data Retention

We retain personal data only as long as necessary.

13. Security Measures

RegulaTrust implements security safeguards including:

• encryption in transit
• role-based access controls
• secure authentication
• infrastructure monitoring
• environment isolation
• system logging
• backup and recovery systems
• secure development practices

While no system can guarantee absolute security, RegulaTrust works to maintain appropriate technical and organisational safeguards.

14. Your Rights

Subject to applicable law, individuals may have the right to:

• access personal data
• correct inaccurate data
• request deletion
• restrict processing
• object to processing
• request data portability
• withdraw consent

Requests may be submitted to: hi@regulatrust.com

15. Marketing Preferences

You may unsubscribe from marketing communications at any time. Service-related communications may still be sent where necessary for account administration.

16. Third-Party Services

Our website or services may link to third-party platforms. RegulaTrust is not responsible for the privacy practices of external services.

17. Children

RegulaTrust services are intended for professional and business use. We do not knowingly collect personal data from children.

18. Changes to This Policy

We may update this Privacy Policy periodically. When we do, the last updated date will be revised.

19. Contact

Privacy inquiries: hi@regulatrust.com

Privacy inquiries: hi@regulatrust.com

Protego Sol Limited
Company Number: 15743777
Registered Office: Cleveland Square, London, United Kingdom, W2 6DD

If you have concerns about how we handle personal data, please contact us first. You may also lodge a complaint with the UK supervisory authority:

• Information Commissioner's Office (ICO)