Skip to content

Privacy Policy

How RegX collects, uses, and protects your data.

1. Data We Collect

RegX processes two categories of data on behalf of our customers:

  • Account data: name, email address, phone number, and company name provided when you create an account or request a demo.
  • Workforce data: employee names, passport numbers, Emirates ID numbers, visa details, labour card numbers, and document copies uploaded by you or your authorised users.

2. How We Use Your Data

We use your data to provide the RegX platform — tracking employee document expiries, company compliance status, generating alerts, and producing compliance reports. We do not sell your data to third parties. We do not use your data for advertising.

3. Data Storage and Encryption

All data is stored on cloud infrastructure providers with encryption in transit (HTTPS/TLS) and encryption at rest where supported by the underlying infrastructure. Document files are stored in access-controlled storage buckets.

4. Workspace Isolation

Each customer workspace is logically separated. Users in one workspace cannot access data belonging to another workspace. Access is enforced through server-side authentication and authorisation checks, not browser-side controls.

5. AI and OCR Processing

RegX may use AI and OCR technologies to extract information from uploaded documents (e.g., passport expiry dates, Emirates ID numbers). AI-extracted data is always presented for human review before being relied upon. AI is used as an assistant, not as a final authority.

6. Data Retention

Your data is retained for as long as your account is active. Upon account termination, you may request export of your data, after which we will delete it within 30 days unless retention is required by law.

7. Your Rights

You have the right to access, correct, or delete your data. You may export your data at any time. To exercise these rights, contact us at info@regx.ae.

8. Third-Party Processors

We use trusted third-party providers for cloud hosting, authentication, email delivery, and AI/OCR processing. These providers process data only as necessary to deliver the service and are bound by confidentiality and data protection obligations.

9. Updates to This Policy

We may update this policy as RegX evolves. Material changes will be communicated to active customers. Last updated: September 2026.