Introduction

REGAL APPLICATION LLC (hereinafter referred to as "we," "the company," or "REGAL") is committed to protecting your privacy. This Privacy Policy applies to personal information collected, used, stored, and shared through REGAL's official website, mobile applications, APIs, and other digital platforms (collectively, the "Platform"). This policy is formulated in accordance with the U.S. Federal Trade Commission (FTC) Privacy Framework, the California Consumer Privacy Act (CCPA), the EU General Data Protection Regulation (GDPR), and international privacy standards, aiming to clarify the legal basis for data processing, user rights, and security commitments.

1. Scope and Purpose of Information Collection

1.1 Information Voluntarily Provided

When you register an account, subscribe to services, or contact customer support, we may collect your name, email address, phone number, mailing address, company name, and job title as identification information. If you choose to log in using a third-party account (e.g., Google, Facebook), we will obtain your public profile information through authorized interfaces. Payment information (e.g., credit card number, bank account) is processed through third-party payment gateways compliant with PCI DSS standards, and we only store transaction records for order management and dispute resolution.

1.2 Passively Collected Information

- Device and Usage Data: We automatically collect your IP address, browser type, operating system, screen resolution, device model, location information (derived from GPS or IP address), access time, page view paths, and click behavior through technologies such as cookies, pixel tags, and device IDs. This data is used to optimize platform performance, analyze user behavior, and provide personalized services.

- Log Data: Servers automatically record user access logs, including requested URLs, HTTP status codes, response times, and error reports, for troubleshooting and security audits.

- Third-Party SDKs: We may integrate third-party analytics tools (e.g., Google Analytics, Mixpanel) and advertising services (e.g., Google Ads), which may collect device identifiers, advertising identifiers, and interaction data. Detailed third-party lists and data processing rules are provided in Appendix A.

2. Use and Sharing of Information

2.1 Core Purposes

- Provide and maintain platform functionality, including account management, order processing, customer support, and service update notifications.

- Conduct marketing activities, such as sending product recommendations, promotional information, and user surveys. You may opt out at any time via account settings or unsubscribe links.

- Perform data analysis and product improvements, for example, optimizing interface design and enhancing algorithm recommendation accuracy through user behavior data.

- Fulfill legal obligations, such as responding to judicial requests, enforcing terms of service, and preventing fraud.

2.2 Information Sharing Recipients

- Service Providers: We share necessary information with third-party service providers (e.g., cloud storage, payment processing, email delivery, customer support systems) and require them to comply with this policy and data confidentiality obligations.

- Affiliated Companies: Data is shared within the corporate group for unified user management, cross-platform service integration, and internal audits.

- Public Authorities: We disclose information to government agencies, law enforcement, or regulatory bodies as required by law, or for purposes such as public safety and anti-money laundering.

- Business Partners: We share anonymized or de-identified data with advertisers and data analytics companies for market research and targeted marketing, ensuring no personally identifiable information is disclosed.

3. User Rights and Choices

3.1 Access and Correction

You may access, modify, or supplement your personal information through your account settings. To obtain a complete data copy, please submit a written request to our privacy compliance email. We will respond to data access requests within 30 days, or up to 45 days if additional time is required.

3.2 Right to Deletion

You have the right to request the deletion of your account and associated data. We will complete the deletion within 30 days after verifying your identity, except where retention is required by law or due to technical limitations.

3.3 Opt-Out Options

- Marketing Communications: Unsubscribe via account settings or unsubscribe links in emails.

- Personalized Advertising: Disable ad tracking through device settings or use third-party ad choice tools (e.g., NAI, DAA).

- Cookies: Manage cookie preferences through browser settings or review our Cookies Policy for details.

3.4 Data Portability

Upon request, we will provide your personal data in a structured, commonly used, and machine-readable format to facilitate transfer to another service provider.

4. Data Security and Protection

4.1 Technical Measures

- Sensitive data is transmitted using AES-256 encryption, and stored data is protected through sharding encryption and access controls.

- Regular penetration testing, vulnerability scanning, and security audits are conducted to promptly address system vulnerabilities.

- Multi-factor authentication (MFA) and the principle of least privilege are implemented to restrict employee access.

4.2 Administrative Measures

- A Data Protection Officer (DPO) is appointed to oversee policy compliance and conduct privacy training.

- A data breach emergency response plan is in place, requiring notification to regulatory authorities within 72 hours of discovery and prompt notification to affected users.

- Data Processing Agreements (DPAs) are signed with third-party service providers to define data security responsibilities and breach compensation terms.

4.3 International Transfers

When transferring data outside the United States, we rely on EU Standard Contractual Clauses (SCCs) or other lawful transfer mechanisms to ensure recipients provide an equivalent level of protection.

5. Child Privacy Protection

We do not provide services to children under 13 years of age. If we identify a minor user, we will immediately delete their account and data and notify their guardian. We comply with the Children’s Online Privacy Protection Act (COPPA) and do not collect, use, or disclose children’s personal information without verifiable parental consent.

6. Policy Updates and Notifications

We reserve the right to update this policy. Material changes (e.g., changes to data processing purposes or expanded third-party sharing) will be communicated at least 30 days in advance via platform announcements, email, or push notifications. Continued use of the platform after updates constitutes acceptance of the revised terms.

7. Dispute Resolution and Contact Information

For inquiries regarding this policy or data processing, please contact us:

- Privacy Compliance Email: [email protected]

- Mailing Address: REGAL APPLICATION LLC, 5090 N Marty Ave Apt 103, Fresno, CA 93711 US

You may also file complaints with local data protection authorities or consumer rights organizations. We will cooperate with investigations and provide timely feedback.

8. Governing Law and Jurisdiction

This policy is governed by the laws of the State of California, USA. Disputes shall be submitted to the U.S. District Court for the Northern District of California or the Superior Court of San Mateo County. The invalidity of any provision shall not affect the validity of the remaining terms.

9. Miscellaneous Provisions

- Disclaimer: While we take reasonable measures to protect data, we do not assume liability for data breaches caused by third-party unauthorized access or force majeure, given the inherent risks of internet transmission and storage.

- Hyperlink Policy: The platform may contain links to third-party websites. We are not responsible for their privacy practices and recommend reviewing their privacy policies.

- No Waiver: Failure or delay in exercising rights under this policy shall not constitute a waiver of such rights.