232 APPS TRACKED · 227 CLAUSES ON FILE · 38 WITH NO CLAUSE TO QUOTE

Regie.ai's privacy changed

Notable
CHANGED BETWEEN 14 AUG 2026 AND 23 SEPT 2026FIRST SEEN 23 SEPT 2026 · 15:39 UTC
SCORE
72
PARAGRAPHS CHANGED
71 (1 added, 1 removed)
SNAPSHOTS COMPARED
969 hours apart
FAMILIES TOUCHED
jurisdiction ×7 · optout ×38 · retention ×34 · scope ×17 · subprocessor ×33 · tier ×2 · training ×4

Hedging language on file: as described, may include, such as, where permitted. See what these phrases permit.

What actually changed

REMOVEDPRIVACY NOTICE Last updated March 6, 2025 Google API Disclosure Regie.ai's use of information received from Google APIs will adhere to Google API Services User Data Policy , including the Limited Use requirements. Thank you for choosing to be part of our community at Regie.ai, doing business as Regie (" Regie ", " we ", " us ", " our "). We are committed to protecting your personal information and your right to privacy. If you have any questions or concerns about this privacy notice, or our practices with regards to your personal information, please contact us at info@regie.ai . When you visit our website https://www.regie.ai (the " Website "), and more generally, use any of our services (the " Services ", which include the Website), we appreciate that you are trusting us with your personal information. We take your privacy very seriously. In this privacy notice, we seek to explain to you in the clearest way possible what information we collect, how we use it and what rights you have in relation to it. We hope you take some time to read through it carefully, as it is important. If there are any terms in this privacy notice that you do not agree with, please discontinue use of our Services immediately. This privacy notice applies to all information collected through our Services (which, as described above, includes our Website), as well as, any related services, sales, marketing or events. Please read this privacy notice carefully as it will help you understand what we do with the information that we collect. TABLE OF CONTENTS 1. WHAT INFORMATION DO WE COLLECT? 2. HOW DO WE USE YOUR INFORMATION? 3. WILL YOUR INFORMATION BE SHARED WITH ANYONE? 4. WHO WILL YOUR INFORMATION BE SHARED WITH? 5. DO WE USE COOKIES AND OTHER TRACKING TECHNOLOGIES? 6. HOW LONG DO WE KEEP YOUR INFORMATION? 7. HOW DO WE KEEP YOUR INFORMATION SAFE? 8. DO WE COLLECT INFORMATION FROM MINORS? 9. WHAT ARE YOUR PRIVACY RIGHTS? 10. CONTROLS FOR DO-NOT-TRACK FEATURES 11. DO CALIFORNIA RESIDENTS HAVE SPECIFIC PRIVACY RIGHTS? 12. DO WE MAKE UPDATES TO THIS NOTICE? 13. HOW CAN YOU CONTACT US ABOUT THIS NOTICE? 14. HOW CAN YOU REVIEW, UPDATE OR DELETE THE DATA WE COLLECT FROM YOU? 15. USE OF WORKSPACE API DATA Personal information you disclose to us In Short: We collect personal information that you provide to us. ‍ We collect personal information that you voluntarily provide to us when you register on the Website, express an interest in obtaining information about us or our products and Services, when you participate in activities on the Website or otherwise when you contact us. The personal information that we collect depends on the context of your interactions with us and the Website, the choices you make and the products and features you use. The personal information we collect may include the following: Personal information provided by you We collect names; and email addresses. All personal information that you provide to us must be true, complete and accurate, and you must notify us of any changes to such personal information. Information automatically collected In Short: Some information - such as your Internet Protocol (IP) address and/or browser and device characteristics - is collected automatically when you visit our Website. ‍ Our 3rd party web analytics platforms (mentioned below) collect certain information when you visit, use or navigate the Website. This information does not reveal your specific identity (like your name or contact information) but may include device and usage information, such as your IP address, browser and device characteristics, operating system, language preferences, referring URLs, device name, country, location, information about how and when you use our Website and other technical information. This information is primarily needed to maintain the security and operation of our Website, and for our internal analytics and reporting purposes. ‍ Like many businesses, we also collect information through cookies and similar technologies. ‍ The information we collect includes: Log and Usage Data. Log and usage data is service-related, diagnostic, usage and performance information our servers automatically collect when you access or use our Website and which we record in log files. Depending on how you interact with us, this log data may include your IP address, device information, browser type and settings and information about your activity in the Website (such as the date/time stamps associated with your usage, pages and files viewed, searches and other actions you take such as which features you use), device event information (such as system activity, error reports (sometimes called 'crash dumps') and hardware settings). Information collected from other sources In Short: We may collect limited data from public databases, marketing partners, and other outside sources. ‍ ‍ In Short: We process your information for purposes based on legitimate business interests, the fulfillment of our contract with you, compliance with our legal obligations, and/or your consent. We use personal information collected via our Website for a variety of business purposes described below. We process your personal information for these purposes in reliance on our legitimate business interests, in order to enter into or perform a contract with you, with your consent, and/or for compliance with our legal obligations. We indicate the specific processing grounds we rely on next to each purpose listed below. We use the information we collect or receive: To facilitate account creation and logon process. If you choose to link your account with us to a third-party account (such as your Google or Facebook account), we use the information you allowed us to collect from those third parties to facilitate account creation and logon process for the performance of the contract. ‍ Request feedback. We may use your information to request feedback and to contact you about your use of our Website. ‍ To manage user accounts. We may use your information for the purposes of managing our account and keeping it in working order. ‍ To send administrative information to you. We may use your personal information to send you product, service and new feature information and/or information about changes to our terms, conditions, and policies. ‍ To protect our Services. We may use your information as part of our efforts to keep our Website safe and secure (for example, for fraud monitoring and prevention). ‍ To enforce our terms, conditions and policies for business purposes, to comply with legal and regulatory requirements or in connection with our contract. ‍ To respond to legal requests and prevent harm. If we receive a subpoena or other legal request, we may need to inspect the data we hold to determine how to respond. ‍ Fulfill and manage your orders. We may use your information to fulfill and manage your orders, payments, returns, and exchanges made through the Website. ‍ To deliver and facilitate delivery of services to the user. We may use your information to provide you with the requested service. ‍ To respond to user inquiries/offer support to users. We may use your information to respond to your inquiries and solve any potential issues you might have with the use of our Services. ‍ To send you marketing and promotional communications. We and/or our third-party marketing partners may use the personal information you send to us for our marketing purposes, if this is in accordance with your marketing preferences. For example, when expressing an interest in obtaining information about us or our Website, subscribing to marketing or otherwise contacting us, we will collect personal information from you. You can opt-out of our marketing emails at any time (see the " WHAT ARE YOUR PRIVACY RIGHTS " below). ‍ For other business purposes. We may use your information for other business purposes, such as data analysis, identifying usage trends, determining the effectiveness of our promotional campaigns and to evaluate and improve our Website, products, marketing and your experience. We may use and store this information in aggregated and anonymized form so that it is not associated with individual end users and does not include personal information. We will not use identifiable personal information without your consent. ‍ ‍ In Short: We only share information with your consent, to comply with laws, to provide you with services, to protect your rights, or to fulfill business obligations. We may process or share your data that we hold based on the following legal basis: Consent. We may process your data if you have given us specific consent to use your personal information for a specific purpose. ‍ Legitimate Interests. We may process your data when it is reasonably necessary to achieve our legitimate business interests. ‍ Performance of a Contract. Where we have entered into a contract with you, we may process your personal information to fulfill the terms of our contract. ‍ Legal Obligations. We may disclose your information where we are legally required to do so in order to comply with applicable law, governmental requests, a judicial proceeding, court order, or legal process, such as in response to a court order or a subpoena (including in response to public authorities to meet national security or law enforcement requirements). ‍ Vital Interests. We may disclose your information where we believe it is necessary to investigate, prevent, or take action regarding potential violations of our policies, suspected fraud, situations involving potential threats to the safety of any person and illegal activities, or as evidence in litigation in which we are involved. More specifically, we may need to process your data or share your personal information in the following situations: Business Transfers. We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company. ‍ Vendors, Consultants and Other Third-Party Service Providers. We may share your data with third-party vendors, service providers, contractors or agents who perform services for us or on our behalf and require access to such information to do that work. Examples include: payment processing, data analysis, email delivery, hosting services, customer service and marketing efforts. We may allow selected third parties to use tracking technology on the Website, which will enable them to collect data on our behalf about how you interact with our Website over time. This information may be used to, among other things, analyze and track data, determine the popularity of certain content, pages or features, and better understand online activity. Unless described in this notice, we do not share, sell, rent or trade any of your information with third parties for their promotional purposes. ‍ Affiliates. We may share your information with our affiliates, in which case we will require those affiliates to honor this privacy notice. Affiliates include our parent company and any subsidiaries, joint venture partners or other companies that we control or that are under common control with us. ‍ Business Partners. We may share your information with our business partners to offer you certain products, services or promotions. In Short: We keep your information for as long as necessary to fulfill the purposes outlined in this privacy notice unless otherwise required by law. We will only keep your personal information for as long as it is necessary for the purposes set out in this privacy notice, unless a longer retention period is required or permitted by law (such as tax, accounting or other legal requirements). No purpose in this notice will require us keeping your personal information for longer than the period of time in which users have an account with us. When we have no ongoing legitimate business need to process your personal information, we will either delete or anonymize such information, or, if this is not possible (for example, because your personal information has been stored in backup archives), then we will securely store your personal information and isolate it from any further processing until deletion is possible. In Short: We aim to protect your personal information through a system of organizational and technical security measures. We have implemented appropriate technical and organizational security measures designed to protect the security of any personal information we process. However, despite our safeguards and efforts to secure your information, no electronic transmission over the Internet or information storage technology can be guaranteed to be 100% secure, so we cannot promise or guarantee that hackers, cybercriminals, or other unauthorized third parties will not be able to defeat our security, and improperly collect, access, steal, or modify your information. Although we will do our best to protect your personal information, transmission of personal information to and from our Website is at your own risk. You should only access the Website within a secure environment. Key security measures include: Encryption: Your data is encrypted both in transit and at rest using industry-standard encryption protocols. ‍ Access Controls: Only authorized personnel with a legitimate business need have access to your data, protected by role-based permissions. ‍ Multi-Factor Authentication (MFA): Required for internal administrative accounts to ensure strong authentication practices. ‍ Continuous Monitoring: Our systems are monitored 24/7 for threats, and we have an incident response plan in place. ‍ Data Breach Notification: In the event of a data breach impacting your personal information, Regie.ai will notify affected users within the legally required timeframe, following applicable data protection laws. ‍ ‍ In Short: We do not knowingly collect data from or market to children under 18 years of age. We do not knowingly solicit data from or market to children under 18 years of age. By using the Website, you represent that you are at least 18 or that you are the parent or guardian of such a minor and consent to such minor dependent's use of the Website. If we learn that personal information from users less than 18 years of age has been collected, we will deactivate the account and take reasonable measures to promptly delete such data from our records. If you become aware of any data we may have collected from children under age 18, please contact us at info@regie.ai . In Short: You may review, change, or terminate your account at any time. Depending on your location, you may have the right to: Access & update your data: View and correct your personal information. ‍ Request deletion: Request removal of your data where applicable. ‍ Object to processing: Restrict or opt out of certain uses. ‍ Withdraw consent: Where processing is based on your consent. ‍ Export your data: Receive a copy of your data in a portable format. If you are a resident of the European Economic Area and you believe we are unlawfully processing your personal information, you also have the right to complain to your local data protection supervisory authority. You can find their contact details here: https://www.edps.europa.eu/data-protection_en . If you are a resident of Switzerland, the contact details for the data protection authorities are available here: https://www.edoeb.admin.ch/edoeb/en/home.html . If you have questions or comments about your privacy rights, you may email us at info@regie.ai . Account Information If you would at any time like to review or change the information in your account or terminate your account, you can: Log in to your account settings and update your user account. Upon your request to terminate your account, we will deactivate or delete your account and information from our active databases. However, we may retain some information in our files to prevent fraud, troubleshoot problems, assist with any investigations, enforce our Terms of Use and/or comply with applicable legal requirements. Cookies and similar technologies ‍ Most Web browsers are set to accept cookies by default. If you prefer, you can usually choose to set your browser to remove cookies and to reject cookies. If you choose to remove cookies or reject cookies, this could affect certain features or services of our Website. To opt-out of interest-based advertising by advertisers on our Website visit http://www.aboutads.info/choices/ . Opting out of email marketing ‍ You can unsubscribe from our marketing email list at any time by clicking on the unsubscribe link in the emails that we send or by contacting us info@regie.ai . You will then be removed from the marketing email list - however, we may still communicate with you, for example to send you service-related emails that are necessary for the administration and use of your account, to respond to service requests, or for other non-marketing purposes. ‍ How to Exercise Your Rights To exercise your rights, email us at info@regie.ai . We will respond within 30 days of receiving your request. In some cases, additional verification may be required to confirm your identity before processing your request. ‍ Most web browsers and some mobile operating systems and mobile applications include a Do-Not-Track ("DNT") feature or setting you can activate to signal your privacy preference not to have data about your online browsing activities monitored and collected. At this stage no uniform technology standard for recognizing and implementing DNT signals has been finalized. As such, we do not currently respond to DNT browser signals or any other mechanism that automatically communicates your choice not to be tracked online. If a standard for online tracking is adopted that we must follow in the future, we will inform you about that practice in a revised version of this privacy notice. In Short: Yes, if you are a resident of California, you are granted specific rights regarding access to your personal information. Under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA) , California residents may: Request access to their data: Learn what personal data we have collected. ‍ Request deletion of personal data: Ask us to erase certain personal data. ‍ Opt-out of data sales or sharing: Regie.ai does not sell personal data but offers users the right to opt-out of targeted advertising. ‍ Non-discrimination: Users who exercise these rights will not be treated unfairly. ‍ California Civil Code Section 1798.83, also known as the "Shine The Light" law, permits our users who are California residents to request and obtain from us, once a year and free of charge, information about categories of personal information (if any) we disclosed to third parties for direct marketing purposes and the names and addresses of all third parties with which we shared personal information in the immediately preceding calendar year. If you are a California resident and would like to make such a request, please submit your request in writing to us using the contact information provided below. ‍ If you are under 18 years of age, reside in California, and have a registered account with the Website, you have the right to request removal of unwanted data that you publicly post on the Website. To request removal of such data, please contact us using the contact information provided below, and include the email address associated with your account and a statement that you reside in California. We will make sure the data is not publicly displayed on the Website, but please be aware that the data may not be completely or comprehensively removed from all our systems (e.g. backups, etc.). In Short: Yes, we will update this notice as necessary to stay compliant with relevant laws. ‍ We may update this privacy notice from time to time. The updated version will be indicated by an updated "Revised" date and the updated version will be effective as soon as it is accessible. If we make material changes to this privacy notice, we may notify you either by prominently posting a notice of such changes or by directly sending you a notification. We encourage you to review this privacy notice frequently to be informed of how we are protecting your information. If you have questions or comments about this notice, you may email us at info@regie.ai or by post to: Regie.ai 722 Clipper Street San Francisco, CA 94114 United States For EU, please contact: Instant EU GDPR Representative Ltd Name Adam Brogden Email contact@gdprlocal.com Tel + 353 15 549 700 Your Reporting Link https://regiaai.gdprlocal.com/eu EU Dublin Address INSTANT EU GDPR REPRESENTATIVE LIMITED Office 2 12A Lower Main Street, Lucan Co. Dublin K78 X5P8 Ireland For UK, please contact: UK Representative Company Name GDPR Local Ltd Name Adam Brogden Email contact@gdprlocal.com Tel + 441 772 217 800 Your Reporting Link https://regiaai.gdprlocal.com/uk UK Address GDPR Local Ltd 1st Floor Front Suite 27-29 North Street, Brighton England BN1 1EB 14. HOW CAN YOU REVIEW, UPDATE, OR DELETE THE DATA WE COLLECT FROM YOU? Based on the applicable laws of your country, you may have the right to request access to the personal information we collect from you, change that information, or delete it in some circumstances. To request to review, update, or delete your personal information, please submit a request form by clicking here . We will respond to your request within 30 days. Regie.ai does not use any data, including data obtained through Google Workspace APIs, to train generalized AI or machine learning models. Regie.ai does not retain user data obtained through Workspace APIs for developing, improving, or training generalized AI or ML models. All data accessed via Workspace APIs is used solely to provide and enhance the specific services offered to users, in strict compliance with applicable policies and user agreements. Furthermore, any data accessed is deleted after its intended use, ensuring that no residual data is stored or reused for any other purpose.

ADDEDPrivacy Policy Last updated: August 4, 2026 | Effective: August 4, 2026 This Privacy Policy explains how Regie.ai, Inc. (" Regie ," " we ," " us ") collects, uses, discloses, and protects personal information in connection with RegieGo and related products (the " Service "), our website at regie.ai (the " Site "), and related communications. Two roles. We act in two capacities: On behalf of our customers. When our business customers and their authorized users use the Service to manage, enrich, contact, call, message, or record their own contacts and prospects, we process that information as a service provider/processor , on the customer's behalf. The customer, not Regie, is responsible for its own privacy practices and for the lawfulness of its outreach. If you are such a contact or prospect, please direct requests to the customer that used the Service to contact you; we will assist that customer as its service provider, and Section 8 explains the choices we make available directly. For our own purposes. When we operate our Site, market our products, manage accounts and billing, and improve and secure the Service, we act as a business/controller for that information. This Policy describes those practices. 1. Information we collect 1.1 Information you provide (customers and users) Account and profile: name, business email, company, role, and credentials. You may sign in with Google or Microsoft. Billing: for paid plans, billing contact and payment information (processed by our payment processor, Stripe; we do not store full card numbers). Content you submit or connect ("Customer Data"): contacts, lists, prompts, messages, and other materials, including data from mailboxes (Gmail/Outlook) and CRM or other tools you connect, and the recordings and transcripts of calls you place through the Service. Support and communications: information you provide when you contact us. 1.2 Information about the people you contact (prospects) When you use the Service, we process personal information about the third parties you contact (" Prospect Data "), which may include name, business contact details (email, phone, title, employer), and, for calls, call recordings and transcripts. Depending on the feature you use, this information comes from you , from a data provider whose credentials you connect , or, where you direct it and pay with credits, from third-party data providers we make available , which we query on your behalf. 1.3 Voice data If you use AI or cloned voice, we (through our voice provider) process the voice recording of the enrolled speaker to create and use a synthetic voice. See Section 12 (Biometric Privacy Notice). 1.4 Information we collect automatically When you use the Site or Service, we and our providers collect device and usage information (IP address, browser and device identifiers, pages viewed, referring URLs, and similar log data) using cookies and similar technologies. See Section 11 (Cookies and similar technologies). 1.5 Sources We obtain personal information: directly from you and your authorized users; automatically from your devices; from your connected tools (mailboxes, CRMs) at your direction; from third-party enrichment and data providers, at your direction and on your behalf; and from advertising, analytics, and infrastructure providers. 1.6 Notice at Collection (California) The categories of personal information we collect are identified above and in Section 5; the purposes are in Section 2; whether we "sell" or "share" categories and how to opt out are in Sections 3 and 8; and our retention approach is in Section 6. We use and disclose sensitive personal information only for the purposes permitted under the CCPA regulations (section 7027(m)); accordingly, we do not offer a separate right to limit its use. 2. How we use personal information We use personal information to: provide, operate, secure, and support the Service and Site; authenticate users and manage accounts and billing; provide the features you request (including messaging, calling, recording/transcription, and enrichment, on your behalf); communicate with you, including service and, where permitted, marketing messages (you can opt out); detect, prevent, and address fraud, abuse, and security incidents; comply with law and enforce our terms; and analyze and improve our products. Connected mailbox data (Google/Microsoft). Where you connect a Google account, our use of information received from Google APIs adheres to the Google API Services User Data Policy , including its Limited Use requirements; we use that data only to provide and improve the user-facing features you request. Similar limits apply to a Microsoft account. We disclose personal information to: service providers/subprocessors that help us run the Service - including cloud hosting and infrastructure, authentication, telephony and messaging, speech-to-text transcription, AI and synthetic-voice providers, payment processing, integration connectivity, error monitoring and performance, and analytics and support tools; our customers (for data processed on their behalf); advertising and analytics partners as described below; professional advisors and authorities where required by law or to protect rights and safety; and an acquirer in a merger, financing, or sale of assets. Advertising and analytics on our Site. Our Site uses analytics and advertising technologies, including Google Analytics and Google Ads . Under the California Consumer Privacy Act (CCPA) and similar state laws, using these technologies for cross-context behavioral advertising is a " sale " or " sharing " of personal information as those terms are defined under the CCPA. You can opt out as described in Section 8, and we honor opt-out preference signals (see "Global Privacy Control" in Section 8). The third party to whom personal information (such as identifiers and internet/device activity) is "sold" or "shared" for this purpose is Google (Google Analytics and Google Ads). In the preceding 12 months, we have "sold"/"shared" the categories of identifiers and internet/network activity for cross-context behavioral advertising, and we have disclosed each of the categories of personal information identified in Section 5 to the categories of recipients identified in this Section 3 (service providers/subprocessors and, for data we process on their behalf, our customers) for the business purposes described in Section 2. This is not limited to Google Analytics and Google Ads but also applies to other, comparable vendors. We describe the enrichment and outreach features functionally in Section 1; we process that information on our customers' behalf as their service provider. 4. Call recording, transcription, and voice Calls placed through the Service may be recorded and transcribed , and call audio and transcripts may be processed by automated and AI systems (for example, speech-to-text, call analysis, and synthetic or AI voice). Recording, monitoring, and transcription are subject to laws that may require the consent of some or all parties; obtaining any required consent is the responsibility of the customer that places the call (see the Acceptable Use Policy in Schedule A to the Terms of Service ). We retain recordings and transcripts as described in Section 6 and process them on the customer's behalf. If you received a call placed through the Service, contact the caller to exercise choices; see also Section 8. 5. Categories of personal information (CCPA) Depending on your interaction, we process these CCPA categories: identifiers (name, email, phone, IP, user/device IDs); customer records and commercial information (billing, plan, transactions); professional/employment information (title, employer); internet/network activity (usage, log data); geolocation (approximate, from IP); audio (call recordings) and voiceprints (for cloned voice); and inferences. Sensitive personal information may include account credentials, precise geolocation (if collected), and the contents of email, SMS, and calls you process through the Service, and voiceprints. We use sensitive personal information only to provide the Service and for other purposes permitted without a right to limit. 6. Retention We retain personal information for as long as needed for the purposes in this Policy, then delete or de-identify it, unless a longer period is required by law or to resolve disputes and enforce agreements. 7. Security We use administrative, technical, and organizational measures designed to protect personal information, including encryption in transit and at rest, access controls, and monitoring. No method of transmission or storage is completely secure. If we become aware of a personal-information breach, we will notify affected parties and authorities as required by applicable law; where we act as a service provider, we will notify the affected customer without undue delay so the customer can meet its own obligations. 8. Your privacy choices and rights Everyone: Marketing opt-out: unsubscribe via the link in our marketing emails or by contacting us. Cookies and Do Not Sell or Share: manage cookies and opt out of the "sale"/"sharing" of your personal information for cross-context behavioral advertising through our "Do Not Sell or Share My Personal Information" link and cookie settings (see Section 11). US state privacy rights. Subject to and to the extent provided by applicable state law, residents of California and other states with comprehensive privacy laws may have rights to: know/access, delete, and correct their personal information; opt out of the sale or sharing of personal information and of targeted advertising and certain profiling; limit the use of sensitive personal information where that right applies; and not be discriminated against for exercising these rights. California residents additionally have the rights described in the CCPA. Because most state privacy laws exclude information about individuals acting in a business or employment capacity, rights in business-contact and prospect information apply primarily to California residents; we honor the rights the law provides. How to exercise your rights. Submit a request by emailing hello@regie.ai. We will verify your request as required (and may need information to do so), respond within the timeframes required by law, and permit an authorized agent to act on your behalf with proof of authorization. If we decline, you may appeal by replying to our decision or emailing hello@regie.ai. We will not discriminate against you for exercising your rights. 9. Minors The Service is for business use and not directed to children. We do not knowingly collect personal information from anyone under 16, and we do not knowingly sell or share the personal information of anyone under 16. If you believe we have such information, contact us and we will delete it. 10. International users Regie is based in the United States and the Service is intended for US-based business use; we process personal information in the United States. If you access the Service from outside the United States, you understand your information will be processed in the United States. This Section explains how we use cookies and similar technologies (pixels, tags, SDKs, and local storage - collectively " cookies ") on our Site and the Service, and how you can control them. 11.1 What cookies are. Cookies are small files or identifiers stored on your device that let a site or service recognize your browser, remember settings, measure usage, and (for advertising cookies) build a profile of your interests across sites. 11.2 Categories we use. Category Purpose Consent Examples Strictly necessary Security, authentication, load balancing, and core functionality. The site cannot work without these. Always on (no consent required) Session/auth cookies, CSRF tokens Functional Remember preferences and settings to improve your experience. Site: on with consent. Authenticated Service: set as part of the product and managed in your account settings. Language/UI preferences Analytics Understand how the Site is used so we can improve it. Site only; on with consent Google Analytics Advertising Measure and deliver advertising, including cross-context behavioral advertising. Setting these can be a "sale"/"share" under state privacy laws. Google Ads and related tags 11.3 Managing cookies in your browser. Most browsers let you block or delete cookies through their settings; doing so may affect functionality. You can also opt out of interest-based advertising from participating companies through the Digital Advertising Alliance and the Network Advertising Initiative , and manage Google's use of your data at Google Ad Settings and via the Google Analytics Opt-out . 11.4 Third parties. Some cookies are set by third parties (e.g., Google) that process the data under their own terms. We configure available privacy controls (for example, IP anonymization, restricted/consent-mode data processing, and executed data-processing terms) where offered. 12. Biometric Privacy Notice This Section is our publicly available written policy regarding biometric identifiers and biometric information, and explains how we collect, use, store, and destroy biometric data in connection with the AI/synthetic voice feature of the Service. We provide this notice and obtain consent in order to comply with biometric-privacy laws, including the Illinois Biometric Information Privacy Act (BIPA), the Texas Capture or Use of Biometric Identifier Act (CUBI), and the biometric-privacy laws of Washington, Colorado, and other states. 12.1 What biometric data we process, and when. If a user chooses to create an AI or cloned voice, the Service (through our third-party voice technology provider) processes a voice recording of the enrolling speaker to generate and use a voiceprint - a mathematical representation of voice characteristics that can generate a synthetic replica of the individual's voice. We process this biometric data only for individuals who affirmatively enroll a voice , and only after we obtain the consent described in Section 12.3. We do not create voiceprints of the people you call. The Service's call recording, transcription, and analysis features are not used to generate biometric identifiers or voiceprints of call recipients. Voice enrollment is optional; the Service never requires an individual to enroll a voice. 12.2 Purpose. We process voiceprints solely to: create the synthetic voice the enrolling user requests; operate that voice within the Service (for example, to place calls the user configures); and secure and support the feature. We do not use voiceprints for any other purpose. 12.3 Consent (written release before collection). Before we collect or generate a voiceprint, we obtain the enrolling individual's informed written consent (electronic signature) through an in-product consent step that identifies Regie (and its voice provider) as the party collecting the biometric data, states that a voiceprint (a biometric identifier) will be collected and stored, the specific purpose, and that authorizes the creation and use of a synthetic replica of the individual's voice for the Service (consent to simulate the individual's voice and likeness under applicable right-of-publicity and voice-replica laws, such as the Tennessee ELVIS Act). We do not collect a voiceprint or enroll a voice without this consent. If you are an employer enabling this feature for your personnel, you must ensure each enrolling individual completes this consent; regardless, Regie obtains the consent directly from the enrolling individual. 12.4 Disclosure. We do not sell, lease, trade, or otherwise profit from biometric data. We disclose voiceprints only to our voice technology subprocessor to provide the feature, as directed by the enrolling user, or as required by law, and only under contracts that require protection of the data. 12.5 Retention and destruction. We retain a voiceprint only as long as needed for the purpose above and will permanently destroy it on the individual's or the customer's request. Destruction means permanent deletion of the enrollment recording, the voiceprint, and any cloned-voice model from our systems and our voice subprocessor's systems; residual copies in backups are deleted on our rolling backup cycle. We respond to any security incident that may compromise biometric data under our incident-response procedures, including the notifications described in Section 7 (Security) and any notice required by law. 12.6 Your rights and contact. You may withdraw consent and request deletion of your voiceprint at any time by contacting hello@regie.ai or through your account settings; withdrawing consent will disable the cloned-voice feature for that voice. Depending on your state, you may have additional rights. We will obtain any further consent the law requires before materially changing how we process biometric data. 13. Changes and contact We may update this Policy; we will post the updated version with a new date and, for material changes, provide additional notice. Contact us at hello@regie.ai.