Privacy Policy

1. Information We Collect

We collect the following information when you use RegKnot:

• Account data: email address, name, professional role
• Vessel profiles: vessel names, IMO numbers, flag states, and other details you provide
• Chat history: questions you ask and responses generated by the AI
• Usage data: message counts, feature usage, timestamps
• Documents you upload: files you attach in chat, such as manuals or procedures
• Payment data: processed securely by Stripe — we do not store card numbers

2. How We Use Your Data

• To provide and improve the RegKnot service
• To personalize regulatory responses based on your vessel profile
• To process payments and manage subscriptions
• To send service-related communications (account, billing, support)
• To monitor and prevent abuse

Documents you upload are used to answer your questions. If a document is relevant to your work, we keep it in your account so later answers can use it, and we may review it to improve RegKnot. We never show your documents to other users or use them to answer anyone else's questions. You can delete any document at any time in Account settings.

3. Data Sharing

We do not sell your personal data. We share data only with:

• Stripe: for payment processing
• Anthropic: your chat messages, and passages of documents you attach, are sent to Anthropic's API to generate responses
• OpenAI: text from your questions and documents is sent to OpenAI's API to index it for search
• Resend: for transactional email delivery

We may also disclose data if required by law or to protect our rights.

4. Data Storage & Security

Your data is stored on secured servers. Chat history and account data are stored in a PostgreSQL database. Passwords are hashed using bcrypt. API communication is encrypted via TLS. Documents you upload are stored on our servers and no other user can open them; a document that isn't about maritime work is deleted 7 days after you upload it. We retain your data for as long as your account is active. When you delete your account, its data is deleted with it; records of payments are kept for accounting.

5. Your Rights

You may:

• Export your conversations from Account settings, or request a copy of your data
• Delete your account and its data yourself from Account settings, or ask us to
• Delete any document you upload, from Account settings
• Update your profile information at any time

To exercise these rights, email support@regknots.com.

6. Cookies

We use httpOnly cookies for authentication (JWT refresh tokens). We do not use third-party tracking cookies or analytics cookies at this time.

7. Children

RegKnot is not intended for use by anyone under the age of 18. We do not knowingly collect data from children.

8. Changes

We may update this policy from time to time. Material changes will be communicated via email or in-app notice. Continued use after changes constitutes acceptance.

9. Contact

Questions about privacy? Email us at support@regknots.com.