Privacy Policy

Last Updated: July 19, 2024

This Privacy Policy covers Regology, Inc. (“Regology” “we,” “us,” “our”) policies on the collection, use, and disclosure of personal information and data as defined by applicable law(referred to as “Personal Information”), including, but not limited to, the California Consumer Privacy Act of 2018 (as amended by the California Privacy Rights Act of 2020) (collectively, the “CCPA”) and the consumer privacy laws enacted in Colorado, Connecticut, Oregon (effective July 1, 2024), Texas, Utah and Virginia, and other consumer privacy laws enacted and effective after the date of this Privacy Policy (collective “U.S. State Privacy Laws”) when visitors and customers (collectively “Users”) access, use, or otherwise interact with www.regology.com  (the “Platform”) and the software and services made available through the Platform (collectively the “Services”).

REGOLOGY is a Delaware corporation with offices in the United States. REGOLOGY collects Personal Information and processes, transfers and stores data within the United States.  By optionally providing your Personal Information within the Platform, you consent to the collection, use and disclosure practices identified in this Privacy Policy. Users may withdraw their consent at any time through by email at privacy@regology.com

Section 8 is intended to provide the Notice of Collection required under the California Consumer Privacy Act.

  1. Information Collected by REGOLOGY

Access to Regology Services:  To schedule a demonstration of the Regology products, visitors will be asked to provide their name, email, phone, and company. Upon purchase and when creating an account, Users must register by providing their name, company name, email and establishing an account password. Your email may be utilized to (i) verify account status, (ii) provide support, services and marketing communications; or (iii) communicate material changes to our Terms of Service and Privacy Policy. Users may also register using their existing  Microsoft LinkedIn or Google + accounts. By providing your login credentials to create an account, you consent to Regology’s access to the personal information and images in those accounts in order to pre-populate your Regology account profile.

Customer Support.  Regology will collect a visitor or user’s email to facilitate the exchange of communications on the Platform or with respect to any customer support ticket initiated by a registered user.

Purchases.  When Users make a purchase through the Platform, Regology will request input of a User’s name, billing address, payment information (including credit card numbers), and email address to facilitate processing, fulfillment and confirmation of requested services. REGOLOGY does not itself store ACH, debit or credit card information on its servers, but utilizes third party payment processors to manage and process payments in order to guarantee the security of personal payment information.

Web Beacons/Log Files & Cookies:  Regology utilizes web beacon, log files, and cookie technology to gather information on internet use in order to serve you more effectively.  Cookies are data files that are placed on your device or computer and often include an anonymous unique identifier. “Log-Files” track actions occurring on the Platform and collect data including a user’s IP address, browser type, Internet service provider, referring/exit pages, and date/time stamps.  “Web beacons” “tags” or “pixels” are electronic files used to record information about how you browse the Platform.  

How You Can Control Advertising Cookies.  Cookies are also utilized to deliver advertising on our site. Among other uses, they allow us to show more relevant advertising to people who visit the site by showing you ads that are based on your browsing patterns and the way you have interacted with our sites. You can find information about how to opt out of the cookies provided by our advertising partners here:

Even if you opt out of cookies/ads personalization, you may still see ads based on factors such as your general location derived from your IP address, your browser type, and your search terms. You can also manage cookies for any online advertising service via the consumer choice tools created under self-regulation programs, such as the US-based aboutads.info choices page or the European Union (“EU”)-based Your Online Choices.  See also the Network Advertising Consumer Opt-Out and/or the Digital Advertising Alliance Opt-Out.

  1. Personal Information Received, Disclosed, or Shared by REGOLOGY 

Personal Information is collected to facilitate the Services offered, for marketing of our Services and products, or for internal analysis relating to product improvements and data security.  REGOLOGY shares Personal Information with only those contractors, service providers and other third parties who are bound by contractual obligations to keep Personal Information confidential and to limit such use only for the purpose for which it is disclosed.  Personal Information collected is processed by the following service providers to facilitate provision of the Services on the Platform or as otherwise disclosed at the time of collection to: 

Provide Services.  Personal Information is used to:

Share with Service Providers.  REGOLOGY has engaged with third party service providers to facilitate the REGOLOGY services and operate our business, including without limitation, database management hosting, information technology, email/SMS delivery, customer support, data security and compliance services necessary to provide the Services. REGOLOGY also engages with third-party service providers to better understand and enhance user experience through data analytics. These services, including Google Analytics (website traffic), HubSpot (marketing campaign and user engagement), and Pendo (in-application analytics), collect and analyze information on our behalf to offer insights and optimize our application's performance.  If you do not want your Personal Information to be used by Google Analytics, you may opt-out by installing Google Analytics Opt-out Browser Add-on. For each service provider, REGOLOGY will have in place written contracts that describes the purpose of the service and disclosure of Personal Information, and require the service provider to both keep the Personal Information confidential and not use it for any purpose except performing the services pursuant to such contract, and includes provisions for data protection and security in accordance with applicable laws and regulations.

Compliance and Protection. Personal Information may be disclosed to serve our legitimate business interests as follows: (1) as required by law, such as to comply with a subpoena, or similar legal process, (2) if REGOLOGY is involved in a merger, acquisition, or sale of all or a portion of its assets, (3) to investigate, prevent, or take action regarding suspected or actual illegal activities or to assist government enforcement agencies; (4) enforce our agreements with you, and/or (5) investigate and defend ourselves against any third-party claims or allegations. We will use commercially reasonable efforts to notify you about law enforcement or court ordered requests for data unless otherwise prohibited by law.

  1. Personal Information of Minors

 

REGOLOGY does not knowingly collect Personal Information from anyone under the age of 16. If we learn we have collected or received Personal Information from anyone under the age of 16 without verification of parental consent, we will delete that information. If a parent or guardian becomes aware that his or her child under the age of 16 has provided REGOLOGY with Personal Information without their consent, he or she should contact REGOLOGY at privacy@regology.com. REGOLOGY will delete such Personal Information from our files within a commercially reasonable time, but no later than required under the applicable law. 

  1. Retention and Deletion of Personal Information; De-Identified Data 

Unless erasure is otherwise requested under applicable law or as otherwise stated in this Privacy Policy, REGOLOGY will retain account data as long as it is necessary to provide services to our customers, but not beyond the maximum retention period prescribed by GDPR and other applicable laws and regulations.  Personal Information obtained from Platform visitors will be maintained as long as it is necessary to provide requested communications and information-based services or until a visitor exercises the right to opt-out of requested communications or information-based services.  Anonymized and pseudo-anonymized data will be retained as long as REGOLOGY determines such data is commercially necessary for its legitimate business interests.

To the extent REGOLOGY de-identifies any Personal Information, REGOLOGY shall maintain and use such de-identified data without attempting to re-identify the data.

  1. REGOLOGY’s Security Practices. 

We have implemented administrative, technical and physical security measures that comply with industry standards and applicable laws and regulations to protect Personal Information against unauthorized access, destruction or alteration. However, although we endeavor to provide reasonable security for Personal Information we process and maintain, no security system can ever be 100% secure.  

  1. Response To “Do Not Track” Signals

Do Not Track” is a feature enabled on some browsers that sends a signal to request that a website disable its tracking or cross-website user tracking. 

REGOLOGY shall treat any user-enabled global privacy controls, such as a browser plug-in or privacy setting, device setting, or other mechanism, that communicate or signal the consumer’s choice to opt-out of the sale of their Personal Information as a valid request submitted pursuant to the CCPA for that browser or device, or, if known, for the consumer.

 

  1. Changes to this Privacy Policy 

If we make material changes to our Privacy Policy, we will notify you by (1) changing the Effective Date at the top of the Privacy Policy, or (ii) sending an electronic notification to all active account holders, or (iii)  adding a banner/notification to the Site itself.  

8. Supplemental CCPA and U.S. State Privacy Laws Notices - Notice of Collection

This supplemental notice sets forth the disclosures and rights applicable to residents of California, Connecticut, Colorado, Virginia, Oregon, Texas and Utah.  Such consumer privacy notices and rights shall also apply to other state residents to the extent other state consumer privacy laws are implemented following the last effective update to this Privacy Policy.  REGOLOGY collects, uses and/or discloses Personal Information as follows:

REGOLOGY retains a consumer's Personal Information for the periods necessary to fulfill the purposes outlined in this Privacy Policy unless a longer retention period is required or permitted by law. Specific retention periods for different categories of personal information will be provided upon request.

Other Potential Third Party Disclosures:  Personal Information may also be disclosed to serve our legitimate business interests as follows: (a) as required by law, such as to comply with a subpoena, or similar legal process, (b) as part of a merger, acquisition, bankruptcy or other transaction in which a third party assumes control of all or part of the business, (c) to investigate, prevent, or take action regarding suspected or actual illegal activities or to assist government enforcement agencies as required by law; (d) enforce our agreements with you, and/or (e) investigate and defend ourselves against any third-party claims or allegations. 

A. Sale of Personal Information; Sharing of Personal Information; Right to Opt-Out

REGOLOGY does not and will not sell your Personal Information. However, REGOLOGY does share Personal Information with its advertising partners to provide you with personalized and/or retargeted ads.  

REGOLOGY does not share Personal Information with third parties for cross-context behavioral advertising purposes.  

You have the right to opt-out of “sale” or “sharing” of your personal information with third parties who are not our service providers (as those terms are defined by applicable laws) and/or to opt out of cross-context behavioral advertising and targeted advertising.  To exercise this right, click the Do Not Sell or Share My Personal Information link on the bottom of the Platform page where your information is being collected or go to your account settings. You can also submit a request to opt-out by emailing us at privacy@regology.com  with the subject line “Do Not Sell or Share.” Finally, if your browser supports it, you can turn on the Global Privacy Control to opt-out of the “sale” or “sharing” of your personal information.

B. Collection of Sensitive Information

REGOLOGY does not collect Sensitive Information as that term is defined by the CCPA or applicable U.S. State Privacy Laws.

C. Consumer Rights.   Consumers may contact REGOLOGY to exercise the following consumer rights: 

  1. Request REGOLOGY Disclose At No Charge (“Right to Know”): 

Right to Know Requests can be submitted to REGOLOGY by email at privacy@regology.com

  1. Request REGOLOGY to Delete At No Charge (“Right to Delete”):

Deletion Requests can be submitted to REGOLOGY be email at privacy@regology.com or by mail to REGOLOGY at:  REGOLOGY, Inc., Attention: Privacy Request to Delete, 437 California Ave, Palo Alto, CA 94306 or by email at:  privacy@regology.com

D. Request REGOLOGY Correct At No Charge (“Right to Correct”): 

Requests that REGOLOGY correct any inaccurate Personal Information collected by REGOLOGY can be submitted by email to privacy@regology.com

   

E. Verified Request Process

REGOLOGY will verify all consumer requests prior to taking any action in response to such request.  For consumers that maintain an account with REGOLOGY, it may verify the identity of the consumer making the request by either matching information with the account information on file or through existing account authentication credentials.  

Under  the CCPA and applicable U.S. State Privacy Laws, you may exercise these rights yourself or you may designate an authorized agent to make these requests on your behalf.  Authorized agents must demonstrate they have written authorization from you to make requests on your behalf. REGOLOGY may additionally require the consumer to confirm their identity and verify the authorized agent’s permission before complying with any request. 

F. Consumer Request Limitations  

Please note that these rights are not absolute and in certain cases are subject to conditions or limitations as specified in the applicable state laws, including, but not limited to: 

REGOLOGY will confirm and respond to all requests within the timeframe required under applicable state law.  In responding to any request to disclose/delete, REGOLOGY shall maintain a record of the requests as required under applicable state law. 

G. Non-Discrimination Policy

You have the right not to receive discriminatory treatment for exercising any rights conferred by the CCPA and applicable U.S. State Privacy Laws.    REGOLOGY shall not discriminate against a consumer for exercising any statutory consumer privacy rights, including, but not limited to, (a) denying goods or services, (b) charging different prices or rates (including discounts/penalties) that is not directly related to the value provided to REGOLOGY for the Personal Information, (c) suggesting Consumer will receive a different rate/price or different level of quality of goods/services, or (d) providing a different level of quality of goods/ services. 

REGOLOGY employees, applicants and independent contractors have the right not to be retaliated against for the exercise of their CCPA rights.

H. Right to Appeal

If you are in a jurisdiction that recognizes your ability to appeal a decision made in connection with your attempt to assert a right under applicable U.S. State Privacy Laws, you may file an appeal of our decision refusing your request to exercise your rights under this privacy notice. You may request an appeal of such decision by contacting us at privacy@regology.com.  Please provide the state that you are writing from, accompanied with documentation you may have regarding the matter you are appealing. REGOLOGY will respond to your appeal request within the timeframe required under the U.S. State Privacy Laws applicable to your state of residence.

If your jurisdiction allows you to file a complaint with the state’s Attorney General’s Office regarding any concerns with the result of your appeal request, you may do so by using the following links as may be applicable to you. You may submit a complaint to the Attorney General’s Office by selecting the appropriate link: Virginia (www.oag.state.va.us/consumer-protection/index.php/file-a-complaint), Colorado (coag.gov/file-complaint), and Connecticut (portal.ct.gov/AG/Common/Complaint-Form-Landing-page).  

I. Your California Privacy Rights under California Civil Code Section 1798.83 & Business and Professions Code Section 22581 

California law permits Consumers to request and obtain from REGOLOGY once a year, free of charge, certain information about their Personally Identifiable Information (“PII”) (as defined by California law) disclosed to third parties for direct marketing purposes in the preceding calendar year (if any). If applicable, this information would include a list of the categories of PII that was shared and the names and addresses of all third parties with which we shared information in the immediately preceding calendar year. 

In addition, a business subject to California Business and Professions Code Section 22581 must allow California residents under age 18 who are registered users of online sites, services or applications to request and obtain removal of content or information they have publicly posted. Your request should include a detailed description of the specific content or information to be removed. Please be aware that your request does not guarantee complete or comprehensive removal of content or information posted online and that the law may not permit or require removal in certain circumstances.

J. Accessibility of this Policy. 

K. Contact Us

If you have any questions regarding your Personal Information or about our privacy practices, please contact us at: REGOLOGY, Inc., Attention: Privacy Department, 437 California Ave, Palo Alto, CA 94306or by email at:  privacy@regology.com

 

9. Applicable EU GDPR Notices

Data Processor.   REGOLOGY is the processor of all Customer Data (as defined in the applicable Terms of Service), including Personal Information input by a Customer, and its Authorized Users, in connection with a Customer’s use of the REGOLOGY Services. You may contact REGOLOGY at  Attention: Privacy Department, 437 California Ave, Palo Alto, CA 94306 or at privacy@regology.com.

Data Controller.  The Personal Information input by (a) visitors  in general, and  (b) Customer for purposes of establishing a commercial account with REGOLOGY, is controlled by REGOLOGY, 437 California Ave, Palo Alto, CA 94306 or at privacy@regology.com. You may contact us at any time by emailing us at privacy@regology.com

For applicable EU Users, we will only collect and process Personal Information about you where we have lawful bases. Lawful bases include consent (where you have given consent), contract (where processing is necessary for the performance of a contract with you, and “legitimate interests.” Where we rely on your consent to process Personal Information, you have the right to withdraw or decline your consent at any time and where we rely on legitimate interests, you have the right to object.  If you have any questions about the lawful bases upon which we collect and use your Personal Information, please submit a request through email REGOLOGY at privacy@regology.com.

 

When we transfer Personal Information of individuals from the European Economic Area ("EEA"), Switzerland or the United Kingdom ("UK"), we will enter into a Data Processing Agreement with customers incorporating current Standard Contractual Clauses and the UK Addendum.  We also implement additional safeguards where appropriate, such as commercial industry standard secure encryption methods to protect customer data at rest and in transit and other appropriate contractual and organizational measures to ensure the confidentiality, integrity and security of a customer’s Personal Information.

You may also have the right to make a GDPR complaint to the relevant Supervisory Authority. A list of Supervisory Authorities is available here:  http://ec.europa.eu/justice/data-protection/bodies/authorities/index_en.htm.  If you need further assistance regarding your rights, please contact us using the contact information provided below and we will consider your request in accordance with applicable law. In some cases our ability to uphold these rights for you may depend upon our obligations to process personal information for security, safety, fraud prevention reasons, compliance with regulatory or legal requirements, or because processing is necessary to deliver the services you have requested. Where this is the case, we will inform you of specific details in response to your request. 

How to Review, Transfer, Restrict the Use of or Request Erasure of Personal Information 

IF YOU WOULD LIKE TO: 

Requests under this Section can be made through email at privacy@regology.comREGOLOGY  We will respond in the timeframes required under applicable law. For all requests made pursuant to this section, REGOLOGY will (a) respond as required under applicable law, (b) provide a copy of any requested Personal Information in a structured, commonly used and machine-readable format, and/or (c) transmit such Personal Information to another service provider without restriction in accordance with applicable law.

10. Contact Us

If you have any questions regarding your Personal Information or about our privacy practices, please contact us at: REGOLOGY, Inc., Attention: Privacy Department, 437 California Ave, Palo Alto, CA 94306 or by email at:  privacy@regology.com

This Privacy Policy was last updated on July 19, 2024