Draft for review by a Massachusetts-licensed lawyer. This is not legal advice. It describes how RegMemo Intelligence is built today.

Privacy

RegMemo Intelligence is the search and question product at this site. The public news site at www.regmemo.com is separate. This notice covers the Intelligence product.

What we hold

• Account details: name, email, organisation name, password hash, and whether the email is verified.
• Session records: a hashed token, IP address, and browser string, kept while the session is active.
• Subscriber-terms acceptance: the time, the terms version, whether each box was ticked, the plan and total price shown, and the IP address. We keep that record for three years after the acceptance.
• Billing state: plan, seats, invoices, refunds, credits, and reminder-send status. Card numbers stay with Stripe. We do not store them.
• Use of the product: searches, questions, saved searches, alerts, and exported answers. A question that fails because of a fault on our side is not counted against the quota. A refusal, because the archive does not support the question, is counted.
• Support messages you send us.
• Sample documents shipped with a development install are labelled as samples and are not regulator publications.

Why

We use this information to run the account, take payment, send the notices the subscriber terms require, answer questions from the archive, and respond to support. We do not sell personal information. We do not use an advertising cookie. The only cookie set by this application is the session cookie, which is necessary to keep you signed in.

Export and deletion

You can export your account at any time while you have access, while access is suspended, and for 90 days after access ends. Settings includes the export. You can ask us to delete the account from the same page. We anonymise the profile. We keep the terms-acceptance record for three years, and we keep invoices, refunds, and the audit trail of the deletion as the accounting record requires.

Where it runs

The application and database are intended to run on infrastructure we control. Payments are processed by Stripe. Email is sent by the provider named in the environment configuration. If bot protection is switched on, Cloudflare Turnstile receives the check. The current subprocessors are listed on the subprocessors page.

Questions

Write to the support address shown in the footer, or use the contact form. Security reports go to the address on the security page.