Privacy Policy

1. Controller

The controller for the processing of data on this website is Annabelle Kanga, REGUCORE, Baarerstrasse 135, 6300 Zug, Switzerland. Contact: info@regucore.ch.

2. Applicable law

We process personal data in accordance with the Swiss Federal Act on Data Protection (FADP) and, where applicable, the EU General Data Protection Regulation (GDPR).

3. Data processed

• Data entered in the contact or demo request forms: name, business email, company, role, country, area of interest, preferred language and message.
• The texts you enter in the REGUCORE AI modules and the documents you upload to them.
• For client accounts: name, email, organisation, number of uses per month, ReguCoach AI training results and, for ReguAcademy, the chosen path, evaluation results and attestations.
• Technical data needed to display the website, such as IP address and browser, processed by the hosting provider.
• Your language and module settings, stored locally in your browser. For client accounts, a login cookie is needed for the client area to work.

4. Purposes

We use this data to answer your request, organise a demo or a pilot discussion, provide the REGUCORE AI modules, show training progress, issue and verify attestations and limit abuse. We do not sell personal data.

5. How requests are transmitted and stored

Data entered in the forms is sent over a secure connection and forwarded by email to REGUCORE (info@regucore.ch). A copy of each request is kept in the site’s administration area, which only REGUCORE can access. To limit abuse, the site keeps a fingerprint of your IP address for ten minutes, not the address itself.

6. Artificial intelligence modules

ReguWrite AI, ReguCoach AI, ReguAudit AI, ReguRisk AI, ReguDocs AI and the ReguAcademy tutor send the texts you enter and the documents you upload to the Claude AI service of Anthropic PBC, in the United States, which generates the answer. This website does not keep this content. An uploaded document is read during the request, sent, then deleted.

According to its terms, Anthropic generally deletes this data within 30 days and does not use it to train its models. Longer periods may apply in case of abuse or legal obligation.

The website keeps a technical log of each call, without its content: date, module, client account if any, model used, volume processed and a digital fingerprint of the request. In demo mode, a fingerprint of your IP address, not the address itself, is used to apply the daily limit and appears in this log.

Do not enter any patient data or personal data of third parties in the modules. In the demo, use fictitious data only.

7. Training records

For client accounts, ReguCoach AI records mission results: date, domain, correct answers and reasoning score. They are used to show your progress.

For client accounts, ReguAcademy records the chosen path and, for each evaluation, the date, module, content version, number of correct answers and result. A passed evaluation produces an attestation with an ID, recorded with your name, organisation, module, score and date. Your answers are not kept.

If your account is linked to an organisation, the training manager appointed by it sees, for each member, the ReguCoach scores by domain and the number of missions, the ReguAcademy path, passed modules, scores, number of attempts and attestation IDs, and the date of the last activity. They see neither your answers nor your justifications. The client organisation decides on this use and is accountable to its staff for it, in particular under art. 328b of the Swiss Code of Obligations. The modules show a notice about this.

When a person presents a ReguAcademy attestation, REGUCORE confirms on request whether the ID, name, module and date match its register. Once the account is deleted, an attestation can no longer be verified. Keep your PDF.

8. Recipients and transfers

• Website hosting: HOSTINGER, UAB, Vilnius, Lithuania. Server in Lithuania, backups in France.
• Email: Zoho Mail, with emails stored in the European Union.
• Artificial intelligence: Anthropic PBC, San Francisco, United States.

Switzerland recognises that the member states of the European Union provide adequate data protection. The transfer to Anthropic in the United States relies on the standard contractual clauses included in its data processing agreement.

9. Retention

• Requests received through the forms: 48 months after receipt, then deletion. The copy on the website is deleted automatically.
• Technical log of the AI modules: 24 months, then automatic deletion.
• Client accounts, training results and the attestation register: for the duration of the contract, then deletion within 3 months after it ends.
• IP address fingerprint: 10 minutes for the forms, 24 hours for the demo limit.

Legal retention obligations, for example for accounting, remain reserved.

10. Your rights

Within the limits of applicable law, you can request access, rectification, erasure or restriction of your data, and object to its processing. Contact: info@regucore.ch. You can also contact the competent supervisory authority, in Switzerland the Federal Data Protection and Information Commissioner (FDPIC).

11. Changes

This policy may change. The current version is published on this page.