Last Updated: September 18, 2026
At Regulus, we take your privacy and the security of your client data seriously. This Privacy Policy explains what information we collect, why we collect it, how we use it, when we share it, and the choices you have when you use Regulus at regulushq.com and related API, WhatsApp, payment, mailbox, automation, and AI integration services.
We collect account information such as your name, email address, password authentication status, workspace membership, role, preferences, and support messages. When you use Regulus to manage work, we collect the business records you create or upload, including clients, projects, proposals, invoices, payment status, portal messages, files, comments, timelines, reminder settings, and workflow activity.
If you invite clients or team members, we process the contact details and workspace access settings needed to deliver that invitation and operate the client portal. If you use forms, public intake pages, or shared payment links, we collect the submitted information so your workspace can receive and manage the request.
Regulus may process invoice amounts, currencies, customer email addresses, transaction references, payment status, subscription plan details, and billing events. Card, bank, and checkout details are handled by payment providers such as Flutterwave, Paystack, or Stripe. We do not intentionally store full card numbers or sensitive bank authentication credentials on Regulus servers.
If you use WhatsApp features, we process WhatsApp sender identifiers, message content, message status events, media metadata, templates, invoice instructions, reminders, and webhook delivery data. We use this information to identify your workspace, respond to your instructions, create or retrieve invoice records, send reminders, and maintain abuse prevention and reliability logs.
When you connect third-party services such as Google, Microsoft, GitHub, Vercel, payment providers, or automation webhooks, Regulus processes the authorization tokens, account identifiers, scopes, callback data, and activity required to provide the connected feature. We use connected account data only to perform the actions you request or configure inside your workspace.
Regulus's use and transfer to any other app of information received from Google APIs will adhere to Google API Services User Data Policy, including the Limited Use requirements.
Google user data is used only to provide user-facing connected mailbox or workspace features that you enable, such as sending authorized messages, reading relevant mailbox connection state, or completing an OAuth callback. We do not use Google user data for advertising, sell it to third parties, or use it to train generalized AI models.
When you connect Regulus to ChatGPT, Codex, or another compatible MCP client, Regulus shares only the workspace data required to complete the actions you request. OAuth permissions are tied to your selected workspace. Read actions can return client, project, proposal, and invoice information. Write actions can create draft invoices, update records, or prepare client communications only after you request or approve those actions.
AI features may process prompts, workspace context, invoice text, uploaded files, and generated responses through service providers used to power the feature. We use this data to provide the requested automation or assistant response and to maintain security, debugging, and abuse-prevention controls.
We use information to create and secure accounts, operate workspaces, generate invoices and proposals, deliver client portals, send reminders and transactional messages, process payments, provide support, debug service issues, prevent fraud and abuse, improve product reliability, and comply with legal obligations. We may also send service updates, onboarding messages, and account notices related to your use of Regulus.
We share information with service providers that help us run Regulus, including hosting, database, email, payments, analytics, messaging, AI infrastructure, and error-monitoring providers. We share only what is needed for those providers to perform services for Regulus. We may also share information if required by law, to protect rights and safety, to investigate fraud or abuse, or as part of a business transfer such as a merger, acquisition, or asset sale.
We do not sell your personal information or your client records.
We use technical and organizational safeguards designed to protect account, client, invoice, payment, integration, and workspace data. These safeguards include HTTPS, access controls, role-based workspace permissions, secret handling, provider webhook verification where available, monitoring, and encrypted credential storage for supported vault features. No internet service can guarantee absolute security, so you should use strong passwords and promptly remove access for users or integrations you no longer trust.
We retain account and workspace information for as long as needed to provide Regulus, comply with legal obligations, resolve disputes, prevent abuse, and maintain business records. You may request deletion of your account or workspace data. Some information may remain in backups, audit logs, payment records, or legal compliance records for a limited period where deletion is not technically or legally immediate.
You can update account information, disconnect integrations, rotate shared links, remove team members, and delete or export many workspace records from within the product. You may contact us to request access, correction, export, deletion, or restriction of your personal information. We may need to verify your identity before completing certain requests.
Regulus and its service providers may process information in countries other than where you live. When we transfer or process information internationally, we rely on appropriate safeguards and provider commitments designed to protect your information.
We may update this Privacy Policy as Regulus changes. When we make material changes, we will update the date above and may provide additional notice inside the product or by email.
If you have any questions about this Privacy Policy or want to make a privacy request, contact us at security@regulushq.com or support@regulushq.com.