Legal

Privacy Policy

Last updated: 29 May 2026

1. Who We Are

Reg Alerts Pro is operated by Mabe Media Studios Ltd ("we", "our", "us"), a company registered in England and Wales. You can reach our data team at info@regalertspro.com.

2. What Data We Collect

  • Account data: name, work email, job title, and organisation name provided at signup.
  • Usage data: pages visited, features used, search queries, and session timestamps.
  • Communication data: messages sent to support and content submitted through RegBot.
  • Payment data: billing name, address, and payment method (processed by Stripe — we do not store card numbers).
  • Technical data: IP address, browser type, device type, and cookies as described in our Cookie Policy.

3. How We Use Your Data

  • To provide, maintain, and improve the Reg Alerts Pro platform.
  • To send regulatory alert notifications you have opted into.
  • To process payments and manage your subscription.
  • To respond to support requests and queries.
  • To comply with legal and regulatory obligations.
  • To send product updates (you can unsubscribe at any time).

4. Legal Basis for Processing

  • Contract: processing necessary to deliver the service you have subscribed to.
  • Legitimate interests: fraud prevention, security, analytics, and product improvement.
  • Legal obligation: retaining records required by financial and tax regulations.
  • Consent: marketing communications (you may withdraw consent at any time).

5. Data Sharing

We do not sell your personal data. We share it only with trusted processors under strict data processing agreements:

  • Supabase — database and authentication infrastructure.
  • Stripe — payment processing.
  • Resend — transactional email delivery.
  • Vercel — application hosting.
  • Anthropic — AI query processing (where BYOK or platform-hosted AI features are used).
  • one.com — hosting for our self-hosted AI model (where self-hosted AI features are used).

Connecting your own AI assistant (MCP). If you choose to connect Reg Alerts Pro to your own AI tool (for example, Claude) via the Model Context Protocol (MCP), your data is retrieved by that tool at your own instruction and processed under your own agreement with its provider — this is a connection you set up and control, not a sub-processor relationship we enter into on your behalf.

Tailoring to your products. If you choose to tell us which products or areas you work on, your own description is stored privately in your account and is visible only to you. It is analysed on our self-hosted AI model, and only short generic tags derived from it (for example, "leveraged loans") are used with an AI provider to tailor regulatory impact to your area. Your own wording is never sent to an AI provider. You can edit or remove it at any time.

6. International Transfers

Some service providers process data outside the UK and EEA. We rely on UK adequacy decisions, Standard Contractual Clauses (SCCs), or equivalent safeguards.

7. Retention

We retain account data for the duration of your subscription plus 12 months. Audit logs are retained for 7 years. You may request deletion at any time — see Section 9.

8. Security

All data is encrypted in transit (TLS) and at rest. We enforce row-level security (RLS) at the database layer to isolate each organisation's data, role-based access control, and need-to-know access to production systems. Full details of our security practices are available on our Security & Trust page.

9. Your Rights

Under UK GDPR and EU GDPR you have the right to:

  • Access — request a copy of your personal data.
  • Rectification — request correction of inaccurate data.
  • Erasure — request deletion ("right to be forgotten").
  • Restriction — request we limit processing in certain circumstances.
  • Portability — receive your data in a structured, machine-readable format.
  • Objection — object to processing based on legitimate interests or direct marketing.
  • Withdraw consent — at any time where processing is consent-based.

Email info@regalertspro.com to exercise any right. We respond within 30 days. You may also lodge a complaint with the UK ICO at ico.org.uk.

10. Cookies

We use cookies as described in our Cookie Policy.

11. Changes to This Policy

We may update this policy from time to time. Material changes will be notified by email or in-app banner at least 14 days before they take effect.

12. Contact

Email info@regalertspro.com or write to: Data Privacy, Reg Alerts Pro, Mabe Media Studios Ltd, United Kingdom.