Book a demo

Privacy Policy

Effective date: August 17, 2026 · Last updated: August 17, 2026

This Privacy Policy describes how RegentForge (“RegentForge,” “we,” “us”) collects, uses, discloses, and protects information in connection with the regentforge.ai website, the RegentForge application, the free public-document diagnostic, and related services (together, the “Service”). We build software for banks and other regulated financial institutions, and we hold ourselves to the standard of care that market expects of its vendors.

Where your institution has signed an order form or services agreement with us, that agreement governs our handling of your institution’s documents and data to the extent it conflicts with this Policy.

1. Information We Collect

Information you provide. When you request the diagnostic, book a demo, create an account, or contact us, we collect the information you submit: name, work email address, institution name, role, and the contents of your message.

Customer Content. Licensed customers may upload policy documents and related materials for analysis (“Customer Content”). Customer Content is processed solely to provide the Service to that customer, as described in Section 4. The free diagnostic does not involve any upload of internal documents; it analyzes only documents an institution has already made publicly available, such as a published privacy notice or deposit account agreement.

Information collected automatically. We collect limited technical information when you use the Service: IP address, browser and device type, pages visited, referring page, and timestamps. We use this for security, rate-limiting, debugging, and service improvement.

Cookies. The Service currently uses only cookies that are strictly necessary for it to function, such as session cookies for authenticated users of the application. We do not currently use advertising cookies. If we introduce analytics or other non-essential cookies, we will update this Policy and, where required by law, request your consent first.

2. How We Use Information

We do not sell personal information, and we do not share personal information with third parties for their own marketing.

3. Consent

Where the law of your jurisdiction requires consent for the collection or use of personal information or for commercial electronic messages — including Canada’s Anti-Spam Legislation (CASL) and Canadian and provincial privacy law — we rely on the consent you provide when you submit a form on this site, which is recorded together with the time and source of the submission. You may withdraw consent at any time using the unsubscribe link in any message or by emailing hello@regentforge.ai; withdrawal does not affect processing that occurred before withdrawal or processing we perform to fulfil a contract with your institution.

4. Customer Content and Confidential Treatment

Customer Content is treated as confidential. We use it solely to provide the Service to the customer that submitted it — to perform the analysis requested, generate findings and drafts, and support that customer — and for no other purpose. We do not use one customer’s content to provide services to another customer, and we do not disclose Customer Content except to the subprocessors described in Section 5, as directed by the customer, or as required by law.

Service provider to financial institutions. When we process information on behalf of a financial institution, we act as that institution’s service provider. To the extent Customer Content includes nonpublic personal information subject to the Gramm-Leach-Bliley Act or similar laws, we handle it in accordance with our agreement with the institution and applicable law, including maintaining safeguards designed to protect its security and confidentiality and using it only to perform the services.

5. Subprocessors and Disclosure

We use a small number of service providers to operate the Service, each bound by confidentiality obligations and engaged only for the purposes described here:

A current list of subprocessors is available to customers and prospective customers on request — a standard part of vendor due diligence that we are glad to support. We may also disclose information where required by law, regulation, legal process, or a governmental request, or to protect the rights, safety, or property of RegentForge, our customers, or others; where legally permitted, we will notify the affected customer before disclosing Customer Content in response to legal process.

6. Data Retention and Deletion

We retain personal information for as long as needed for the purposes described in this Policy: lead and contact information until you ask us to delete it or it is no longer needed; account information for the life of the account plus a reasonable period; and technical logs for a limited operational period. Customer Content is retained for the duration of the customer relationship and as specified in the customer’s agreement. Upon a customer’s written request, or upon termination of a customer agreement, we will delete that customer’s Customer Content from active systems within sixty (60) days, with residual copies in routine backups deleted in the ordinary course of backup rotation.

7. Security

We maintain administrative, technical, and physical safeguards designed to protect information against unauthorized access, use, or disclosure, appropriate to the sensitivity of the information — including encryption of data in transit, access controls limiting access to those who need it to provide the Service, and logging of production access. No method of transmission or storage is completely secure; if we become aware of a breach of security affecting your information, we will notify affected customers and individuals as required by applicable law and our agreements.

8. International Transfers

RegentForge operates from Canada and processes data on infrastructure located in the United States. Where information is transferred across borders, we take steps designed to ensure it receives protection consistent with this Policy and applicable law.

9. Your Rights and Choices

Subject to applicable law, you may request access to, correction of, or deletion of your personal information, and you may object to or ask us to restrict certain processing. You may opt out of marketing communications at any time via the unsubscribe link in any message. To exercise any right, email hello@regentforge.ai; we will verify the request and respond within the time required by applicable law. If you are located in a jurisdiction with a privacy regulator, you also have the right to lodge a complaint with that authority.

10. Children

The Service is intended for use by financial-institution professionals and is not directed to anyone under 18. We do not knowingly collect personal information from children.

11. Changes to This Policy

We may update this Policy from time to time. Material changes will be indicated by updating the effective date above and, for licensed customers, notified as required by their agreement. Continued use of the Service after a change takes effect constitutes acceptance of the updated Policy, except where the law requires fresh consent.

12. Contact

Questions, requests, and vendor due-diligence inquiries: hello@regentforge.ai. RegentForge, Vancouver, British Columbia, Canada.