Privacy Policy

Introduction

Reglifi ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Regulation Best Interest (Reg BI) compliance platform and related services (collectively, the "Service").

By accessing or using the Service, you agree to this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not access the Service.

Information We Collect

Information You Provide to Us

We collect information you voluntarily provide when using our Service, including:

• Account information (name, email address, username, password)
• Firm and business information
• Client data you enter for compliance purposes
• Recommendation and disclosure documentation
• Communications with our support team

Information Collected Through Third-Party Authentication

When you choose to sign in using Google OAuth or other third-party authentication providers, we may receive:

• Your name and email address
• Profile picture (if available)
• Unique identifier from the authentication provider

We only request the minimum information necessary to create and manage your account. We do not access your contacts, calendar, or other data from these services.

Information Collected Automatically

When you access our Service, we automatically collect:

• Log data (IP address, browser type, pages visited, time and date of visits)
• Device information (device type, operating system)
• Usage data (features used, actions taken within the Service)

How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the Service
• Create and manage your account
• Process and complete transactions
• Send administrative information (updates, security alerts, support messages)
• Respond to your comments, questions, and requests
• Monitor and analyze usage and trends to improve the Service
• Detect, prevent, and address technical issues and security threats
• Comply with legal obligations and regulatory requirements

Data Sharing and Disclosure

We do not sell your personal information. We may share your information in the following circumstances:

• Service Providers: With third-party vendors who perform services on our behalf (hosting, analytics, customer support)
• Legal Requirements: When required by law, regulation, or legal process, or to protect our rights and safety
• Business Transfers: In connection with a merger, acquisition, or sale of assets
• With Your Consent: When you have given us explicit permission

Data Security

We implement industry-standard security measures to protect your information, including:

• Encryption of data in transit (TLS/SSL) and at rest
• Secure authentication mechanisms
• Regular security assessments and audits
• Access controls and role-based permissions
• SOC 2 Type II compliant infrastructure

While we strive to protect your personal information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

Data Retention

We retain your personal information for as long as your account is active or as needed to provide you the Service. We also retain and use your information as necessary to comply with legal obligations (including SEC and FINRA recordkeeping requirements), resolve disputes, and enforce our agreements. Compliance-related data may be retained for the periods required by applicable securities regulations.

Your Rights and Choices

Depending on your location, you may have the following rights:

• Access: Request a copy of the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information (subject to legal retention requirements)
• Portability: Request a copy of your data in a portable format
• Withdraw Consent: Withdraw consent where processing is based on consent

To exercise these rights, please contact us at privacy@reglifi.com.

Third-Party Services

Our Service may contain links to third-party websites or integrate with third-party services (such as Google for authentication). We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies.

When you use Google Sign-In, Google's Privacy Policy (https://policies.google.com/privacy) governs how Google handles your information.

Children's Privacy

Our Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child, we will take steps to delete that information.

International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that are different from the laws of your country. We take appropriate safeguards to ensure that your personal information remains protected in accordance with this Privacy Policy.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. We encourage you to review this Privacy Policy periodically for any changes.

Contact Us

If you have any questions about this Privacy Policy or our privacy practices, please contact us at: