Privacy Policy

What we collect

• Account details — your name, email, and, for password sign-in, a bcrypt hash of your password. We never see the password itself. Signing in with Google shares only your basic profile.
• What you put in — documents, notes, images and messages. These are stored because they are what the product searches, answers from, and reminds you about.
• Your assistant's conversations — if you publish an assistant, what visitors ask it is stored against your account so you can read the transcript, follow up a lead and see what it failed to answer. You set how long that is kept; the default is 90 days, and it is deleted automatically after that.
• Operational logs — the minimum needed to keep the service running and to investigate abuse.

Where your documents are processed

To read a document, summarise it, and answer a question from it, the relevant text is sent to OpenAI. It is processed to produce your result and is not used to train their public models. We do not train any model, shared or otherwise, on your content — there is no fine-tuning path in the product.

We are telling you this rather than claiming your data never leaves, because the second sentence would be false and you would eventually find out.

How your data is kept apart

Every retrieval is filtered by your account id inside the database query itself, not by an instruction in a prompt that another prompt could argue with. Files sit in access-restricted object storage; text and embeddings sit in an access-controlled database. Everything is encrypted in transit and at rest.

The honest limit: we hold no security certifications, and we say so at length on the security page.

What we never do with it

We do not sell your data. We do not use your documents or your customers' conversations to train shared models. We do not read your content except where you ask us to investigate a problem with it.

Taking it back

• Export everything as JSON, in one click, whether or not you are still paying.
• Delete a single document, or the whole account. Deleting the account cascades — documents, conversations, assistants, leads, bookings.
• Ask us what personal data we hold about you.

Contact

Privacy questions go to privacy@regenticflow.com, which is read by a person.