Privacy policy

1. Data controller

The controller of your personal data is New Marketer Company Limited, 471/8 Phạm Văn Bạch, Phường 15, Quận Tân Bình, Thành phố Hồ Chí Minh. Privacy contact: [email protected].

2. Data we collect and why

• Account data (email, name, password hash): to create and secure your account, sign you in and contact you about the service.
• Google sign-in profile (name, email, avatar) if you sign in with Google: to authenticate your account.
• Subscription and payment status (plan, transaction ids, renewal date): to provide PRO, process renewals, cancellations and refunds. Card data is handled by PayPal; RegHub never receives or stores card numbers.
• Email update preferences (topics, frequency, language): to send the compliance updates you chose.
• Questions and answers in the AI Q&A tool: to answer you, let you review your history and improve answer quality.
• Usage analytics through Google Analytics (pages viewed, device, browser, approximate location): to measure and improve the product.
• IP addresses: for security, abuse prevention and rate limiting.

3. Consent and withdrawing it

We process data on the basis of your consent when you create an account, sign up for email updates or use the Q&A tool, and to perform our contract when you buy PRO.

You can withdraw consent at any time: unsubscribe with the link in any email, change preferences in your dashboard, or write to [email protected]. Withdrawal does not affect processing carried out before it.

4. Processors and transfers outside Vietnam

We use the following providers to run the service. Your personal data is therefore transferred to and processed outside Vietnam:

• Vercel - application hosting (Singapore, United States).
• DigitalOcean - database (Singapore).
• Upstash - caching and rate limiting (Singapore).
• Resend - email delivery (United States).
• OpenAI - search embeddings and answers (United States).
• Anthropic - drafting explanations and answers (United States).
• PayPal - payment processing.
• Reoon - email address validation.
• Google Analytics - traffic measurement (United States).

5. Retention

Account data is kept while your account is active and deleted within 30 days of a deletion request, except transaction records we must keep under accounting and tax rules. Security logs containing IP addresses are kept only as long as needed for security.

6. Your rights

• Know about and access your personal data.
• Have inaccurate data corrected.
• Have your data deleted.
• Withdraw consent.
• Object to or restrict processing.
• Complain to the competent personal data protection authority.

To exercise these rights, write to [email protected]. We respond within the period required by law.

7. Security

We use encryption in transit (HTTPS), password hashing, access control and rate limiting. No system is perfectly secure; if an incident affects your data we will notify you as required by law.

8. Children

RegHub is meant for businesses and professionals. We do not knowingly collect data from children under 16.

9. Changes to this policy

When this policy changes we update the date at the top and notify you of material changes.

10. Contact

Privacy questions: [email protected].