Privacy policy

For app.goregulus.com. Last updated 15 October 2026.

Controller

MIDATEL TECHNOLOGY, Spain. Write to shuy.zur@goregulus.com for anything about your data.

What we process and why

• Account data (name, email, password stored as a hash, company name): to give you access. Legal basis: the contract.
• What you enter (manufacturers, products, risks, SBOMs, vulnerabilities, incidents): to build your documents. Legal basis: the contract. It is not used for anything else and not shared without your instruction.
• Contact for our own services: when you register or request a review, your name, email and company are recorded in our customer system so we can reply and occasionally tell you about our CRA services. Legal basis: our legitimate interest in answering and in offering related services. You can object at any time by writing to us.
• Billing data for consultancy subscriptions, handled by Stripe. We do not see or store card numbers.
• Technical logs (IP address, time of access): for security, kept for a short period.

We do not use what you do inside the app to profile you or to write to you.

Who else processes it

• Hetzner Online GmbH, which hosts the service in the European Union.
• IONOS, which delivers our email.
• Stripe, for consultancy subscriptions.
• The independent consultant you ask to review your documentation, only with your explicit consent and only for that request.

How long

While your account exists. Deleting the account from Settings deletes its data at once; backups holding it are overwritten within 14 days. Invoices are kept as long as tax law requires.

Your rights

You can access, rectify, erase, restrict or object to the processing of your data, and ask for it in a portable format, by writing to shuy.zur@goregulus.com. You can also complain to the Spanish data protection authority (aepd.es).

Cookies

Only the ones the app needs: the session, your choice of client, theme and sidebar. No analytics or advertising cookies.