Privacy Policy
Last updated: 11 October 2026
The short version: we collect the answers you give in the assessment and your email address, use them to generate and deliver your report, and keep them as a delivery and quality record until you ask us to delete them. We never sell or share your data, and we never use it to train AI models.
1. Who we are
Reglynn ("we", "us") provides EU AI Act self-assessment reports at reglynn.eu. The service is operated by Veronika Samotii, trading as Reglynn, an individual established in Poland. Veronika Samotii is the data controller for the personal data described in this policy.
Postal address: ul. Adama Naruszewicza 4, 02-627 Warsaw, Poland
Email: hello@reglynn.eu - a human reads everything.
Reglynn is not currently registered as a company. If that changes, this section is updated and existing customers are told by email.
2. What we collect and why
| Data | Why | Legal basis | Retention |
|---|---|---|---|
| Assessment answers | To generate your personalised report | Contract / your request | Your answers and the finished report are both kept as a delivery and quality record, in Airtable and in our email archive, until you ask us to delete it. Never used to build a profile or for marketing. |
| Bundle extras (3-system bundles only) | To make the portfolio summary and put your logo on your report covers | Contract | Your logo file and request are kept until the covers and summary are sent, then deleted, unless you ask us to keep the logo for a 12-month re-issue |
| Email address (+ optional company name) | To deliver your report and answer follow-up questions | Contract / legitimate interest | Kept as a delivery record until you ask us to delete it |
| Analytics (page views, referrer, button clicks) | To understand which pages help founders | Consent - off unless you accept | 14 months (Google Analytics default) |
| Support chat messages | To answer your question | Legitimate interest | Per tawk.to's retention settings |
| Purchase data (name, email, country, VAT) | To process payment and issue invoices | Contract / legal obligation | As required by tax law (held by Gumroad) |
3. Processors we use
- Gumroad - payments, invoicing, EU VAT (merchant of record)
- Netlify - hosts the website, the two functions that receive the free scan and the paid assessment, and the PDF download form (your email and whether you ticked the updates box)
- Brevo (Sendinblue SAS, France) - sends your report and the free-scan result by email
- ImprovMX - forwards mail sent to hello@reglynn.eu
- Make.com - automation that routes your answers to the report engine, and forwards a bundle buyer's portfolio-summary request and logo to our inbox
- Anthropic (Claude API) - generates the report text from your answers. Data submitted via the API is not used to train models.
- Airtable - delivery and quality log (your email, company name, risk tier, timestamp, your assessment answers and a copy of the report)
- Google Analytics - website analytics, only with your consent, IP anonymised
- tawk.to - live chat support. The chat widget loads only after you accept on the cookie banner; messages you send are kept per tawk.to's retention settings.
- Google Fonts (Google Ireland Ltd) - delivers the website fonts; your browser requests them from Google's servers, which receive your IP address.
- SaaSHub - the review badge image in the footer is loaded from SaaSHub's server.
- Our own mailbox - every report email is blind-copied to hello@reglynn.eu, so we hold a copy as a delivery record and as an early-warning check that reports are sending correctly
Some processors are based outside the EU/EEA. Transfers rely on Standard Contractual Clauses and each provider's own safeguards.
Want it gone? Email hello@reglynn.eu and we will delete your report copy and delivery record. We keep nothing we need.
4. What we never do
- We never sell or rent your data.
- We never use your assessment answers to train AI models.
- We never share your answers with third parties beyond the processors above.
- We don't run advertising trackers or cross-site profiling.
5. Cookies and analytics
Analytics cookies are disabled by default. Nothing is stored until you press Accept on the banner. If you decline, or ignore the banner, Google Analytics stores nothing on your device. You can change your mind any time by clearing your browser storage for this site.
Strictly necessary items (your consent choice, your theme, which popups you have already seen, and your progress in the paid assessment) are stored locally in your browser and are not sent to us. Analytics cookies (Google Analytics) and the tawk.to chat widget load only after you press Accept.
The free scan stores nothing in your browser. This is everything the site stores on your device:
6. Your rights (GDPR)
You have the right to access, correct, delete, restrict or object to processing of your personal data, and to data portability. To exercise any of these, email hello@reglynn.eu - we respond within 30 days, usually much sooner. You also have the right to lodge a complaint with your national data protection authority.
7. Children
Reglynn is a business tool and is not directed at anyone under 16.
8. Changes
If this policy changes materially, we update the date at the top and, where the change affects existing customers, tell them by email.
Reminder: Reglynn provides a self-assessment and does not constitute legal advice. For binding determinations under the EU AI Act, consult a qualified compliance advisor.