Privacy Policy

Effective: 2026. Operated by REG MON AUS PTY LTD (ABN 49 697 171 074). Compliant with the Privacy Act 1988 (Cth).

This policy explains what personal information we collect, how we use it, and your rights under Australian privacy law.

What we collect

From clients: firm name, contact name, contact email, phone (optional), practice areas, jurisdictions, and subscription tier. We do not collect information about your clients.

From website visitors: standard web analytics (pages visited, approximate location, device type) via Google Analytics 4 and Plausible Analytics. We use Cloudflare for DNS and CDN, which logs IP addresses for security purposes.

What we do not collect

We never collect or store personally identifiable information (PII) about the clients or third parties of our subscribers. RegMonitor is a regulatory-content service, not a CRM.

How we use it

We use client information to deliver digest emails, urgent alerts, and ad-hoc query responses; to authenticate portal access; to send service-related communications; and to process payments via Stripe.

Website analytics are used only in aggregate to improve the site.

Where it lives

Our primary database is hosted by Supabase in the Sydney region (ap-southeast-2). Our application runtime is hosted by Railway. Transactional email is sent via SendGrid. SMS alerts are sent via Twilio. Payments are processed by Stripe. Each of these providers has their own privacy commitments which we require to meet or exceed the Privacy Act.

Data retention

Client account data is retained for the life of the subscription and for 90 days after cancellation, after which it is permanently deleted (except where we are required by law to retain it).

Regulatory content we have aggregated is retained indefinitely — it is all publicly sourced and forms the basis of historical search.

Your rights

Under the Privacy Act you have the right to access your information, correct it, and have it deleted. To exercise these rights, email privacy@regmonitor.com.au. We respond within 30 days.

Complaints

If you believe we've breached the Privacy Act, contact us first at privacy@regmonitor.com.au. If we cannot resolve the issue, you may escalate to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

Changes to this policy

We will notify subscribers by email of any material change to this policy at least 30 days before it takes effect.

Contact

Privacy Officer: REG MON AUS PTY LTD
Email: privacy@regmonitor.com.au