Your data
Two buttons, no theater
Export gives you everything as one JSON file. Delete makes it gone, immediately. Both are self-serve in Settings, and this page explains what sits behind them.
| What | Specifically | Why we hold it | Held until |
|---|---|---|---|
| Account basics | Name, email, password hash or Google id, plan | Signing you in, running your plan | Until you delete the account |
| Your intake | Use cases, footprint, vendors, pasted policies | Producing your assessment; showing it back to you | Until you replace or delete it |
| Assessments | Mappings, scores, gaps, drafts, open questions | The product itself | Until re-run or deletion |
| Messages you send us | Contact, support, applications | Answering you | Two years, then removed |
Never training data
Your answers go to a model provider only to produce your assessment, under terms that exclude training. Regolyn never trains models on customer data. This is a product decision, not a settings toggle.
Export is complete
The export file contains your account facts, intake, and latest assessment. There is no second, richer copy somewhere else. What you download is what exists.
Delete is immediate
Deletion removes everything from the primary store at once. No 30-day soft delete, no win-back state. Infrastructure backups age out on their providers' standard schedules.
The formal versions live in the privacy policy and security page. This page is the plain-words contract, and where they differ, we fix the formal one.