Last updated: [DATE]
Effective: [DATE]
This Privacy Policy explains how [LEGAL ENTITY NAME] ("we", "us", "our")
collects, uses, and shares information in connection with Regulatory Update (the
"Service").
what you told us about your business, and your filter settings.
opened one.
cross-context behavioral advertising.
a third-party AI provider for automated analysis.
that URL can read your deadlines. See Section 6.
| What | Why | Required |
|---|---|---|
| Email address | To send digests, confirmations, and account notices | Yes |
| Business description (free text) | To suggest which business types apply to you | No |
| Business types / industries served | To filter which rules you receive | No |
| Jurisdictions, agencies, keywords, materiality | To filter which rules you receive | No |
| Time zone | To render dates correctly | No |
| Reminder buffers, calendar settings | To generate reminders | No |
| Coverage requests | To decide which jurisdictions to add | No |
About your business description: we store the original text you enter,
not just the categories we derive from it. **A human on our team may read
it.** We do this to find gaps in our industry list — a description that
matches none of our categories tells us we are missing one. Please do not
include confidential information, personal details about individuals, or
anything you would not want a person to read.
calendar feed URL.
send the same thing twice.
under which categories, so we can tell you what you may be missing.
never receive or store your full card number.**
links.
cross-site tracking.
digests, produce calendar invitations and reminders.
business descriptions and coverage requests.
We do not use your information to train AI models, and we do not permit
our AI provider to use it for their model training (see Section 4.1).
We do not sell personal information. We share only as described here.
We send the text of government documents and, at signup, **your business
description** to Anthropic's API for automated summarization and
classification.
inputs and outputs submitted through the API are **not used to train their
models**.
field**, as it is transmitted to this provider.
period here before publishing.]
Handles payment directly. We receive only a customer identifier and
subscription status. Governed by Stripe's privacy policy.
Receives your email address and message content in order to deliver it.
property.
this policy.
feed from a third-party calendar service, that service receives the data in
the feed.
If you subscribe to the live calendar feed, **your calendar provider (Google,
Apple, Microsoft, or another) will fetch it on a schedule and store its
contents.** Those deadlines then live in that provider's systems under their
privacy policy, not ours. Deleting your Regulatory Update account does not delete data
already fetched into a third-party calendar.
We use industry-standard measures including encryption in transit, restricted
administrative access, and secrets held outside version control.
Your calendar feed URL is a capability URL. It contains a random secret
token and is not otherwise authenticated. This is how calendar
subscriptions work — calendar clients cannot log in. It means:
public issue tracker or chat.
The old feed will stop working, and you will need to re-subscribe in your
calendar client.
No system is perfectly secure. We cannot guarantee that unauthorized
access will never occur.
cancellation.
so we do not resend items; deleted with your account.
ask us to delete it separately at any time.
have been notified, or [24] months, whichever is first.
public government records and contain no personal information.
Depending on where you live, you may have the right to access, correct,
delete, or export your personal information; to opt out of sale or sharing
(we do neither); and to be free from discrimination for exercising these
rights.
To exercise any right, email [PRIVACY CONTACT EMAIL]. We will verify your
identity via the email address on your account and respond within the period
required by law.
Unsubscribing is immediate via the link in any digest. Unsubscribing stops
emails; it does not delete your account. To delete your account and data,
email us.
California residents: we do not sell or share personal information as
those terms are defined by the CCPA/CPRA. Categories collected are listed in
Section 2; purposes in Section 3; recipients in Section 4.
EEA/UK residents: our lawful bases are performance of a contract (to
provide the Service), legitimate interests (to improve coverage and prevent
abuse), and consent where required. [If you serve EEA/UK users, confirm your
transfer mechanism and controller details with counsel before publishing.]
The Service is for business use and is not directed to anyone under 18. We do
not knowingly collect information from children. If we learn we have, we will
delete it.
We operate in the United States and process data there. If you use the Service
from elsewhere, you understand your information is transferred to and
processed in the United States.
We may update this policy. Material changes will be communicated by email or
in the Service before taking effect. The "Last updated" date always reflects
the current version.
[LEGAL ENTITY NAME]
[ADDRESS]
[PRIVACY CONTACT EMAIL]