Privacy Policy

Last updated: February 18, 2026  |  Effective Date: February 18, 2026

Regulational ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our website at www.regulational.com and when you contact us through our contact form.

Please read this policy carefully. By using our website, you acknowledge you have read and understand this Privacy Policy. If you do not agree with its terms, please discontinue use of our site.

1. Who We Are

Regulational is a regulatory technology (RegTech) company that provides automated compliance assessment tools for banking institutions. We are the data controller responsible for your personal data collected through this website.

2. Information We Collect

Information You Provide Directly

When you submit our contact form, we collect the following personal information:

• Name — your full name
• Email address — your business or personal email
• Company / Institution name — the organization you represent
• Inquiry type — the nature of your request (e.g., Founders Program, Partnership)
• Message — the content of your inquiry (if provided)

Information Collected Automatically

When you visit our website, certain technical information may be collected automatically by your browser and our hosting infrastructure, including:

• IP address and general geographic location
• Browser type and version
• Operating system
• Pages visited and time spent on pages
• Referring website

We do not currently use third-party analytics services (such as Google Analytics) on this website. We do not set any tracking cookies.

3. How We Use Your Information

We use the information you submit through our contact form for the following purposes:

• To respond to your inquiry or request
• To evaluate your interest in our Founders Program or other services
• To schedule product demonstrations
• To communicate about partnership or investment opportunities
• To improve our website and services based on the nature of inquiries we receive

We will only contact you regarding the specific inquiry you submitted. We will not send you unsolicited marketing emails without your explicit consent.

4. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA) or United Kingdom, we process your personal data under the following legal bases:

• Consent (Article 6(1)(a) GDPR): When you check the consent box on our contact form, you provide explicit consent for us to process your personal data to respond to your inquiry.
• Legitimate Interests (Article 6(1)(f) GDPR): We have a legitimate interest in receiving and responding to business inquiries. This interest is not overridden by your privacy rights.

You may withdraw your consent at any time by contacting us at info@regulational.com. Withdrawal of consent does not affect the lawfulness of processing prior to withdrawal.

5. Data Sharing and Third Parties

Formspree — Contact Form Processor

Our contact form uses Formspree (formspree.io), a third-party form processing service. When you submit our contact form, your personal data (name, email, company, inquiry type, and message) is transmitted to and temporarily stored by Formspree's servers before being forwarded to us.

Formspree acts as a data processor on our behalf. We have reviewed Formspree's privacy practices. By submitting our contact form, your data will be processed in accordance with Formspree's Privacy Policy. Formspree is a US-based service.

No Sale of Personal Data

We do not sell, rent, or trade your personal information to any third parties for their marketing purposes.

Service Providers

We may share data with trusted service providers who assist in operating our website and business, subject to confidentiality agreements. These providers are not permitted to use your data for their own purposes.

Legal Requirements

We may disclose your information if required by law, court order, or government authority, or if we believe disclosure is necessary to protect our rights, property, or safety, or the rights, property, or safety of others.

6. International Data Transfers

Our website is operated from the United States. If you are accessing our website from outside the US (including from the EEA), please be aware that your information may be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your country.

For EEA users, data transfers to the US through Formspree occur under mechanisms designed to provide appropriate safeguards. Please review Formspree's transfer mechanisms for more information.

7. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes described in this policy:

• Contact form submissions: Retained for up to 2 years from the date of submission, or until you request deletion, whichever comes first.
• Ongoing business relationships: If a business relationship develops from your inquiry, data will be retained for the duration of that relationship plus a reasonable period thereafter, in accordance with applicable legal requirements.

8. Your Privacy Rights

Depending on your location, you may have the following rights regarding your personal data:

• Right of Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Request correction of inaccurate or incomplete data.
• Right to Erasure: Request deletion of your personal data ("right to be forgotten"), subject to applicable legal obligations.
• Right to Restrict Processing: Request that we limit how we use your data.
• Right to Data Portability: Request your data in a structured, machine-readable format.
• Right to Object: Object to processing based on legitimate interests.
• Right to Withdraw Consent: Where processing is based on consent, withdraw it at any time.

California Residents (CCPA/CPRA): You have the right to know what personal information we collect, request deletion of your data, opt out of the sale of personal information (we do not sell personal information), and not be discriminated against for exercising your rights.

To exercise any of these rights, contact us at info@regulational.com. We will respond within 30 days (GDPR) or 45 days (CCPA), and we will not charge a fee for reasonable requests.

9. Cookies and Tracking Technologies

Our website does not set any first-party cookies.

We do not use Google Analytics, Facebook Pixel, or any other third-party tracking or advertising scripts on this website. We do not use any cross-site tracking technologies.

Your browser may store session data (such as scroll position) locally, but this data does not leave your device and is not accessible to us.

10. Security

We implement reasonable technical and organizational measures to protect your personal information against unauthorized access, disclosure, alteration, or destruction. Contact form submissions are transmitted over TLS-encrypted HTTPS connections.

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your data, we cannot guarantee absolute security.

11. Children's Privacy

Our website and services are directed to business professionals and are not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have inadvertently collected such information, please contact us immediately at info@regulational.com.

12. Links to Third-Party Websites

Our website may contain links to third-party websites. We are not responsible for the privacy practices of those websites. We encourage you to review the privacy policy of any website you visit.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. We will post the updated policy on this page with a revised "Last updated" date. For material changes, we will take reasonable steps to notify users. Your continued use of our website after any changes constitutes acceptance of the updated policy.

14. How to Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

If you are an EEA resident and are not satisfied with our response, you have the right to lodge a complaint with your local data protection supervisory authority.