Privacy at a glance
- The free catalog check runs in your browser. Its catalog contents are not uploaded.
- A preparation-review request sends the contact details you provide. Invited intake handles up to three optional source files, each up to 5 megabytes (MB), and your corrections in a protected case.
- Submitted cases expire after 30 days. A daily retention job is configured to remove expired submitted case data; it does not represent deletion at the exact 30-day moment.
- Optional assisted suggestions receive only the reviewed text described in the consent prompt, not the original file.
- The hosting platform currently runs its browser analytics script and may receive ordinary visit information. This is separate from Reg-Relay’s optional Google Analytics, which loads only after you accept it.
- The voluntary maintenance email waitlist is separate from preparation requests and can be removed through its protected confirmation link.
The free readiness scanner
The free scanner reads comma-separated values (CSV) and tab-separated values (TSV) files locally using your browser. Catalog contents and scan results are held in this tab’s memory; they are not uploaded by the scanner, saved in browser storage, or included in analytics events. Reloading or leaving the scanner clears its in-memory state. Reports you download are saved to your own device.
Preparation briefs
The local preparation tool creates a downloadable Portable Document Format (PDF) brief locally. It does not send your company information, notes, or brief to Reg-Relay. You choose how to share that file with your existing contact.
Analytics and hosting
The hosting platform currently runs its browser analytics script and may receive ordinary visit information. This is separate from Reg-Relay’s optional Google Analytics, which loads only after you accept it.
When a Google Analytics measurement identifier (ID) is configured, Reg-Relay’s own analytics loads only after you accept it. Events describe page visits and interactions such as running a scan or downloading a report. They do not include catalog contents, product identifiers, filenames, company names, preparation notes, or secure intake links. Page addresses are recorded without query strings or fragments. Advertising storage and personalization remain disabled.
You can decline analytics or change your choice using . Your choice is stored on this device. Declining after acceptance stops subsequent analytics events and attempts to remove accessible Google Analytics cookies. It does not delete data already received by Google.
Hosting and external resources
Your browser still requests the website, images, and fonts from hosting and asset providers. Those providers may process ordinary request metadata, such as an Internet Protocol (IP) address, to deliver the site. Local-only catalog processing does not mean the entire website works offline. Third-party guidance links open sites with their own privacy practices.
The private request and invited intake
The public request form stores your name, email address, business name or your name, approximate product count, short request note, and consent record in the private review database. Only the designated Reg-Relay administrator can review requests. Every request needs human review. A contact summary is emailed to the designated Reg-Relay business inbox so the team can respond. The email provider processes the sender, recipient, and message content to deliver that alert. Request notes, source files, and private invitation links are not included in inquiry alerts. Submission does not send an invitation, authorize work, or contact suppliers. Request details are retained for up to 30 days if no engagement proceeds.
Only after the Reg-Relay team explicitly sends an invitation may you use its one-time secure link. The invited intake accepts up to three optional source files, each no larger than 5 megabytes (MB). Common spreadsheets, text files, PDFs, Word documents, and images can be shared without a prescribed template. The preview processes source files temporarily in the protected backend without saving the originals to the case; if you submit, the originals, bounded extraction previews, and your corrections are stored in the protected case database, rather than a public download link, and are accessible only to the designated Reg-Relay administrator. English optical character recognition (OCR) may create tentative text previews from uploaded images and image-only content on the first two PDF pages in the protected backend; no source file is sent to an OCR provider. OCR text, labels, and confidence are unverified and require comparison to the original. Assisted field suggestions are optional: only if you expressly opt in and choose Suggest, up to 4,000 characters of the corrected text are sent to a configured model provider for proposed document categories and factual fields. The original file is not sent to that provider. Suggestions may be wrong; they require your review and a later source check by Reg-Relay. The provider may process that limited text under its own service terms. Other formats or additional scanned pages require manual review; automated field matching does not confirm regulatory accuracy. Files are not sent to analytics and share the case’s 30-day retention period. Contact the Reg-Relay representative for correction or deletion requests.
When the invitation is redeemed, its one-time link is replaced by a short-lived HttpOnly session. The invitation email provider receives only the address approved by the administrator, the agreed company name, and the invitation link. A request sends an internal review alert, not an automatic visitor invitation. Completed intakes send the team an alert containing the case reference and file count, not the files or their extracted text. Keep files limited to information you are authorized to share. Do not submit passwords, payment-card data, personal identifiers, or regulated personal information.
Voluntary maintenance email waitlist
The maintenance email waitlist is separate from a preparation-review request. Certificate maintenance is Under Development, not generally available. If you choose to opt in, Reg-Relay uses your required email address, optional name and business name, and consent to send maintenance-development updates only. Joining does not authorize supplier contact or promise a paid subscription, work, maintenance access, or access.
Waitlist contact details expire after one year and are removed by the daily cleanup. To protect the form, the service keeps hashed rate-limit event metadata for 24 hours; it does not retain a raw Internet Protocol (IP) address for that purpose. The waitlist is not public. A confirmation email includes a protected token in its link fragment. Opening that link does not remove your details: removal happens only if you click the private confirmation button. You can unsubscribe or request removal at any time through that protected confirmation flow, without exposing a public list. Each signup also sends the designated business inbox a contact alert. The email provider processes confirmation and alert content for delivery; the private removal link appears only in your confirmation, not in the owner alert. Replies to the confirmation go to the Reg-Relay business inbox.
Questions about a private review
Use the Reg-Relay contact who issued your invitation for questions about submitted records, access, correction, or deletion. A daily retention job is configured to remove submitted case data when its 30-day retention period expires. Contact Reg-Relay to request an earlier correction or deletion.
Website behavior notice · October 9, 2026