Privacy Policy
Last updated: 7 August 2026
The short version: we collect the answers you give in the assessment and your email address, use them to generate and deliver your report, and don't keep them beyond that plus a delivery record. We never sell or share your data, and we never use it to train AI models.
1. Who we are
Reglynn ("we", "us") provides EU AI Act self-assessment reports at reglynn.eu. For questions about this policy or your data, contact hello@reglynn.eu — a human reads everything.
2. What we collect and why
| Data | Why | Legal basis | Retention |
|---|---|---|---|
| Assessment answers | To generate your personalised report | Contract / your request | Raw answers are not retained after your report is generated. A copy of the finished report — which reflects your answers — is kept as a delivery and quality record, in Airtable and in our email archive, until you ask us to delete it. Never used to build a profile or for marketing. |
| Email address (+ optional company name) | To deliver your report and answer follow-up questions | Contract / legitimate interest | Kept as a delivery record until you ask us to delete it |
| Analytics (page views, referrer, button clicks) | To understand which pages help founders | Consent — off unless you accept | 14 months (Google Analytics default) |
| Support chat messages | To answer your question | Legitimate interest | Per tawk.to's retention settings |
| Purchase data (name, email, country, VAT) | To process payment and issue invoices | Contract / legal obligation | As required by tax law (held by Gumroad) |
3. Processors we use
- Gumroad — payments, invoicing, EU VAT (merchant of record)
- Jotform — hosts the full assessment form
- Make.com — automation that routes your answers to the report engine
- Anthropic (Claude API) — generates the report text from your answers. Data submitted via the API is not used to train models.
- Airtable — delivery log (email, tier, timestamp, report copy)
- Google Analytics — website analytics, only with your consent, IP anonymised
- tawk.to — live chat support
- Netlify — website hosting
- Namecheap Private Email — sends your report
- Our own mailbox — a copy of every report is retained as a delivery record and an early-warning check that reports sent correctly
Some processors are based outside the EU/EEA. Transfers rely on Standard Contractual Clauses and each provider's own safeguards.
Want it gone? Email hello@reglynn.eu and we will delete your report copy and delivery record. We keep nothing we need.
4. What we never do
- We never sell or rent your data.
- We never use your assessment answers to train AI models.
- We never share your answers with third parties beyond the processors above.
- We don't run advertising trackers or cross-site profiling.
5. Cookies and analytics
Analytics cookies are disabled by default. Nothing is stored until you press Accept on the banner. If you decline, or ignore the banner, Google Analytics stores nothing on your device. You can change your mind any time by clearing your browser storage for this site.
Strictly necessary items (like remembering your consent choice and your progress in the free scan) are stored locally in your browser and never sent to us.
6. Your rights (GDPR)
You have the right to access, correct, delete, restrict or object to processing of your personal data, and to data portability. To exercise any of these, email hello@reglynn.eu — we respond within 30 days, usually much sooner. You also have the right to lodge a complaint with your national data protection authority.
7. Children
Reglynn is a business tool and is not directed at anyone under 16.
8. Changes
If this policy changes materially, we update the date at the top and, where the change affects existing customers, tell them by email.
Reminder: Reglynn provides a self-assessment and does not constitute legal advice. For binding determinations under the EU AI Act, consult a qualified compliance advisor.