Privacy Policy

This Privacy Policy explains how Regie.ai, Inc. ("Regie," "we," "us") collects, uses, discloses, and protects personal information in connection with RegieGo and related products (the "Service"), our website at regie.ai (the "Site"), and related communications.

Two roles. We act in two capacities:

• On behalf of our customers. When our business customers and their authorized users use the Service to manage, enrich, contact, call, message, or record their own contacts and prospects, we process that information as a service provider/processor, on the customer's behalf. The customer, not Regie, is responsible for its own privacy practices and for the lawfulness of its outreach. If you are such a contact or prospect, please direct requests to the customer that used the Service to contact you; we will assist that customer as its service provider, and Section 8 explains the choices we make available directly.
• For our own purposes. When we operate our Site, market our products, manage accounts and billing, and improve and secure the Service, we act as a business/controller for that information. This Policy describes those practices.

1. Information we collect

1.1 Information you provide (customers and users)

• Account and profile: name, business email, company, role, and credentials. You may sign in with Google or Microsoft.
• Billing: for paid plans, billing contact and payment information (processed by our payment processor, Stripe; we do not store full card numbers).
• Content you submit or connect ("Customer Data"): contacts, lists, prompts, messages, and other materials, including data from mailboxes (Gmail/Outlook) and CRM or other tools you connect, and the recordings and transcripts of calls you place through the Service.
• Support and communications: information you provide when you contact us.

1.2 Information about the people you contact (prospects)

When you use the Service, we process personal information about the third parties you contact ("Prospect Data"), which may include name, business contact details (email, phone, title, employer), and, for calls, call recordings and transcripts. Depending on the feature you use, this information comes from you, from a data provider whose credentials you connect, or, where you direct it and pay with credits, from third-party data providers we make available, which we query on your behalf.

1.3 Voice data

If you use AI or cloned voice, we (through our voice provider) process the voice recording of the enrolled speaker to create and use a synthetic voice. See Section 12 (Biometric Privacy Notice).

1.4 Information we collect automatically

When you use the Site or Service, we and our providers collect device and usage information (IP address, browser and device identifiers, pages viewed, referring URLs, and similar log data) using cookies and similar technologies. See Section 11 (Cookies and similar technologies).

1.5 Sources

We obtain personal information: directly from you and your authorized users; automatically from your devices; from your connected tools (mailboxes, CRMs) at your direction; from third-party enrichment and data providers, at your direction and on your behalf; and from advertising, analytics, and infrastructure providers.

1.6 Notice at Collection (California)

The categories of personal information we collect are identified above and in Section 5; the purposes are in Section 2; whether we "sell" or "share" categories and how to opt out are in Sections 3 and 8; and our retention approach is in Section 6. We use and disclose sensitive personal information only for the purposes permitted under the CCPA regulations (section 7027(m)); accordingly, we do not offer a separate right to limit its use.

2. How we use personal information

We use personal information to: provide, operate, secure, and support the Service and Site; authenticate users and manage accounts and billing; provide the features you request (including messaging, calling, recording/transcription, and enrichment, on your behalf); communicate with you, including service and, where permitted, marketing messages (you can opt out); detect, prevent, and address fraud, abuse, and security incidents; comply with law and enforce our terms; and analyze and improve our products.

Connected mailbox data (Google/Microsoft). Where you connect a Google account, our use of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements; we use that data only to provide and improve the user-facing features you request. Similar limits apply to a Microsoft account.

3. How we disclose personal information; "sale" and "share"

We disclose personal information to: service providers/subprocessors that help us run the Service - including cloud hosting and infrastructure, authentication, telephony and messaging, speech-to-text transcription, AI and synthetic-voice providers, payment processing, integration connectivity, error monitoring and performance, and analytics and support tools; our customers (for data processed on their behalf); advertising and analytics partners as described below; professional advisors and authorities where required by law or to protect rights and safety; and an acquirer in a merger, financing, or sale of assets.

Advertising and analytics on our Site. Our Site uses analytics and advertising technologies, including Google Analytics and Google Ads. Under the California Consumer Privacy Act (CCPA) and similar state laws, using these technologies for cross-context behavioral advertising is a "sale" or "sharing" of personal information as those terms are defined under the CCPA. You can opt out as described in Section 8, and we honor opt-out preference signals (see "Global Privacy Control" in Section 8). The third party to whom personal information (such as identifiers and internet/device activity) is "sold" or "shared" for this purpose is Google (Google Analytics and Google Ads). In the preceding 12 months, we have "sold"/"shared" the categories of identifiers and internet/network activity for cross-context behavioral advertising, and we have disclosed each of the categories of personal information identified in Section 5 to the categories of recipients identified in this Section 3 (service providers/subprocessors and, for data we process on their behalf, our customers) for the business purposes described in Section 2. This is not limited to Google Analytics and Google Ads but also applies to other, comparable vendors.

We describe the enrichment and outreach features functionally in Section 1; we process that information on our customers' behalf as their service provider.

4. Call recording, transcription, and voice

Calls placed through the Service may be recorded and transcribed, and call audio and transcripts may be processed by automated and AI systems (for example, speech-to-text, call analysis, and synthetic or AI voice). Recording, monitoring, and transcription are subject to laws that may require the consent of some or all parties; obtaining any required consent is the responsibility of the customer that places the call (see the Acceptable Use Policy in Schedule A to the Terms of Service). We retain recordings and transcripts as described in Section 6 and process them on the customer's behalf. If you received a call placed through the Service, contact the caller to exercise choices; see also Section 8.

5. Categories of personal information (CCPA)

Depending on your interaction, we process these CCPA categories: identifiers (name, email, phone, IP, user/device IDs); customer records and commercial information (billing, plan, transactions); professional/employment information (title, employer); internet/network activity (usage, log data); geolocation (approximate, from IP); audio (call recordings) and voiceprints (for cloned voice); and inferences. Sensitive personal information may include account credentials, precise geolocation (if collected), and the contents of email, SMS, and calls you process through the Service, and voiceprints. We use sensitive personal information only to provide the Service and for other purposes permitted without a right to limit.

6. Retention

We retain personal information for as long as needed for the purposes in this Policy, then delete or de-identify it, unless a longer period is required by law or to resolve disputes and enforce agreements.

7. Security

We use administrative, technical, and organizational measures designed to protect personal information, including encryption in transit and at rest, access controls, and monitoring. No method of transmission or storage is completely secure. If we become aware of a personal-information breach, we will notify affected parties and authorities as required by applicable law; where we act as a service provider, we will notify the affected customer without undue delay so the customer can meet its own obligations.

8. Your privacy choices and rights

Everyone:

• Marketing opt-out: unsubscribe via the link in our marketing emails or by contacting us.
• Cookies and Do Not Sell or Share: manage cookies and opt out of the "sale"/"sharing" of your personal information for cross-context behavioral advertising through our "Do Not Sell or Share My Personal Information" link and cookie settings (see Section 11).

US state privacy rights. Subject to and to the extent provided by applicable state law, residents of California and other states with comprehensive privacy laws may have rights to: know/access, delete, and correct their personal information; opt out of the sale or sharing of personal information and of targeted advertising and certain profiling; limit the use of sensitive personal information where that right applies; and not be discriminated against for exercising these rights. California residents additionally have the rights described in the CCPA. Because most state privacy laws exclude information about individuals acting in a business or employment capacity, rights in business-contact and prospect information apply primarily to California residents; we honor the rights the law provides.

How to exercise your rights. Submit a request by emailing hello@regie.ai. We will verify your request as required (and may need information to do so), respond within the timeframes required by law, and permit an authorized agent to act on your behalf with proof of authorization. If we decline, you may appeal by replying to our decision or emailing hello@regie.ai. We will not discriminate against you for exercising your rights.

9. Minors

The Service is for business use and not directed to children. We do not knowingly collect personal information from anyone under 16, and we do not knowingly sell or share the personal information of anyone under 16. If you believe we have such information, contact us and we will delete it.

10. International users

Regie is based in the United States and the Service is intended for US-based business use; we process personal information in the United States. If you access the Service from outside the United States, you understand your information will be processed in the United States.

11. Cookies and similar technologies

This Section explains how we use cookies and similar technologies (pixels, tags, SDKs, and local storage - collectively "cookies") on our Site and the Service, and how you can control them.

11.1 What cookies are. Cookies are small files or identifiers stored on your device that let a site or service recognize your browser, remember settings, measure usage, and (for advertising cookies) build a profile of your interests across sites.

11.2 Categories we use.

11.3 Managing cookies in your browser. Most browsers let you block or delete cookies through their settings; doing so may affect functionality. You can also opt out of interest-based advertising from participating companies through the Digital Advertising Alliance and the Network Advertising Initiative, and manage Google's use of your data at Google Ad Settings and via the Google Analytics Opt-out.

11.4 Third parties. Some cookies are set by third parties (e.g., Google) that process the data under their own terms. We configure available privacy controls (for example, IP anonymization, restricted/consent-mode data processing, and executed data-processing terms) where offered.

12. Biometric Privacy Notice

This Section is our publicly available written policy regarding biometric identifiers and biometric information, and explains how we collect, use, store, and destroy biometric data in connection with the AI/synthetic voice feature of the Service. We provide this notice and obtain consent in order to comply with biometric-privacy laws, including the Illinois Biometric Information Privacy Act (BIPA), the Texas Capture or Use of Biometric Identifier Act (CUBI), and the biometric-privacy laws of Washington, Colorado, and other states.

12.1 What biometric data we process, and when. If a user chooses to create an AI or cloned voice, the Service (through our third-party voice technology provider) processes a voice recording of the enrolling speaker to generate and use a voiceprint - a mathematical representation of voice characteristics that can generate a synthetic replica of the individual's voice. We process this biometric data only for individuals who affirmatively enroll a voice, and only after we obtain the consent described in Section 12.3.

We do not create voiceprints of the people you call. The Service's call recording, transcription, and analysis features are not used to generate biometric identifiers or voiceprints of call recipients. Voice enrollment is optional; the Service never requires an individual to enroll a voice.

12.2 Purpose. We process voiceprints solely to: create the synthetic voice the enrolling user requests; operate that voice within the Service (for example, to place calls the user configures); and secure and support the feature. We do not use voiceprints for any other purpose.

12.3 Consent (written release before collection). Before we collect or generate a voiceprint, we obtain the enrolling individual's informed written consent (electronic signature) through an in-product consent step that identifies Regie (and its voice provider) as the party collecting the biometric data, states that a voiceprint (a biometric identifier) will be collected and stored, the specific purpose, and that authorizes the creation and use of a synthetic replica of the individual's voice for the Service (consent to simulate the individual's voice and likeness under applicable right-of-publicity and voice-replica laws, such as the Tennessee ELVIS Act). We do not collect a voiceprint or enroll a voice without this consent. If you are an employer enabling this feature for your personnel, you must ensure each enrolling individual completes this consent; regardless, Regie obtains the consent directly from the enrolling individual.

12.4 Disclosure. We do not sell, lease, trade, or otherwise profit from biometric data. We disclose voiceprints only to our voice technology subprocessor to provide the feature, as directed by the enrolling user, or as required by law, and only under contracts that require protection of the data.

12.5 Retention and destruction. We retain a voiceprint only as long as needed for the purpose above and will permanently destroy it on the individual's or the customer's request. Destruction means permanent deletion of the enrollment recording, the voiceprint, and any cloned-voice model from our systems and our voice subprocessor's systems; residual copies in backups are deleted on our rolling backup cycle. We respond to any security incident that may compromise biometric data under our incident-response procedures, including the notifications described in Section 7 (Security) and any notice required by law.

12.6 Your rights and contact. You may withdraw consent and request deletion of your voiceprint at any time by contacting hello@regie.ai or through your account settings; withdrawing consent will disable the cloned-voice feature for that voice. Depending on your state, you may have additional rights. We will obtain any further consent the law requires before materially changing how we process biometric data.

13. Changes and contact

We may update this Policy; we will post the updated version with a new date and, for material changes, provide additional notice. Contact us at hello@regie.ai.