Privacy Policy

This Privacy Policy explains how Regen (“Regen,” “we,” “us,” or “our”) processes personal information when you use regengpt.com, our applications, APIs, account services, and related offerings (collectively, the “Service”).

Regen is the controller of personal information described here unless a different notice states otherwise. Questions and privacy requests may be sent to support@regengpt.com.

Depending on how you use the Service, we collect:

• Account information: email address, display name, authentication provider, account status, verification status, plan, and preferences.
• User content: prompts, conversations, uploaded images, generated content, feedback, and support communications.
• Voice and live-mode information: short microphone recordings submitted with your consent for transcription, text transcripts created during live conversations, and the preset voice identifier and name linked to your account. Regen does not retain microphone recordings or generated playback audio. Live transcripts are retained as normal chat messages.
• Usage and transaction information: model selections, token and credit usage, timestamps, subscription status, purchases, and limited billing records. Payment card details are handled by our payment processor and are not stored by Regen in full.
• Device, network, and security information: IP address, user-agent information, browser-stored device identifier, hashed device and IP signals, authentication events, and information used to detect multiple accounts, ban evasion, fraud, and abuse.
• Advertising attribution information: Google click identifiers (such as GCLID, GBRAID, or WBRAID), campaign parameters, referring page, landing page, and whether the resulting account later subscribed. We use this information to measure which advertisements produce signups and subscriptions.
• Moderation information: flagged prompts, the preceding conversational context, reason and confidence for a flag, review status, and related account identifiers.

Messages are stored so you can maintain chat history and use the Service. Regen personnel do not routinely read private conversations. Access is limited to authorized personnel when a message is flagged by our safety system, when you request support, when needed to investigate security or abuse, or when required to comply with law.

Requests that pass our local safety checks are transmitted to the AI provider selected for the request so it can generate a response. Requests blocked by Regen’s local moderation system are not sent to OpenRouter. Service providers may process data under their own contractual and privacy obligations.

In live mode, short microphone recordings are transmitted to ElevenLabs only after you provide consent so the recording can be transcribed. Regen processes the recording in memory for that request and does not save it to Firebase, chat history, or Regen storage. ElevenLabs processes the recording under its own terms and privacy practices. Only the resulting user and assistant text is saved in chat history under the same retention and review rules as other messages.

You may choose from preset voices made available by ElevenLabs. Your selected provider voice identifier and name are linked to your Regen account. Generated speech is returned for immediate playback and is not saved by Regen as a separate audio file. Transcription and speech-generation activity uses Regen credits.

If account memory is enabled, Regen locally derives a limited set of explicit, non-sensitive facts and compact chat summaries for continuity across conversations. Old conversations are not retransmitted in full for this purpose. Only the compact memory is added to future model requests. You can review, pause, or erase memory from Account Settings.

• Provide accounts, conversations, live voice features, text-to-speech, media generation, APIs, subscriptions, and support.
• Calculate usage, credits, billing, and service eligibility.
• Authenticate users and protect accounts and infrastructure.
• Detect prohibited content, fraud, multiple-account abuse, and attempts to evade bans.
• Debug, maintain, analyze, and improve reliability and performance.
• Measure advertising performance, attribute signups and subscriptions, and avoid counting the same conversion more than once.
• Communicate service, security, billing, and policy updates.
• Comply with legal obligations and enforce our Terms of Service.

Where applicable law requires a legal basis, we rely on performance of our contract, legitimate interests in operating and securing the Service, compliance with legal obligations, and consent where required. You may withdraw consent where processing is based on consent, without affecting earlier lawful processing.

Regen uses automated local rules and security signals to block certain messages and account-creation attempts. Signals may link a browser or network to another account. Because IP addresses may be shared, IP-only signals use a higher threshold than device signals. These controls are intended to prevent harmful use, fraud, multiple accounts, and ban evasion, but may occasionally produce false positives.

You may request review of an automated restriction by contacting support@regengpt.com.

We may disclose information to:

• Infrastructure, authentication, database, storage, analytics, advertising-measurement, AI-model, speech, and support providers that process information for us, including Firebase/Google and Google Ads, OpenRouter or model providers available through it, and ElevenLabs for preset voices, transcription, and text-to-speech.
• Stripe and other payment providers for subscriptions, transactions, fraud prevention, refunds, and financial records.
• Professional advisers, auditors, insurers, and corporate transaction participants subject to appropriate obligations.
• Courts, regulators, law enforcement, or other parties when we reasonably believe disclosure is required by law or necessary to protect rights, safety, and the integrity of the Service.

We do not sell personal information. We do not disclose personal information for targeted advertising across unrelated services.

We retain information only for as long as reasonably necessary for the purposes described in this Policy. Account data and message history are generally retained while your account remains active. After deletion, some information may remain temporarily in backups or be retained when required for billing, tax, dispute, security, fraud-prevention, legal, or enforcement purposes.

Security signals and records connected to banned accounts may be retained for the duration reasonably necessary to prevent ban evasion and repeated abuse. Moderation reports are retained while needed for review, appeals, safety analysis, and legal compliance. Retention is determined by the sensitivity of the information, operational need, legal requirements, and risk of harm.

Depending on your location, you may have rights to know or access, correct, delete, restrict or object to processing, receive a portable copy, withdraw consent, opt out of certain processing, and appeal a denied request. You may also complain to your local data-protection authority.

California and other U.S. state residents may have rights to request categories and specific pieces of personal information, correction, deletion, and information about disclosures, and to opt out of sale, sharing, or targeted advertising where applicable. Regen does not sell personal information or use it for cross-context behavioral advertising. We will not discriminate against you for exercising a privacy right.

Submit a request to support@regengpt.com. We may verify your identity and authority before fulfilling a request. Authorized agents may submit requests where permitted by law.

Regen and its providers may process information in the United States and other countries. Where required, we use recognized safeguards for international transfers, such as adequacy decisions, contractual protections, or other lawful transfer mechanisms. Local laws in those locations may differ from those where you live.

We use cookies, browser local storage, and similar technologies for authentication, preferences, security, a persistent anti-abuse device identifier, and first-party advertising attribution. When an advertising parameter is present, we may retain the initial and most recent campaign information so a later signup or subscription can be attributed to that campaign. Google Ads measurement may set or read measurement technologies as described by Google. Blocking required storage may prevent account creation or parts of the Service from working. Regen does not use this information to sell personal information or for cross-context behavioral advertising.

We use administrative, technical, and organizational safeguards designed to protect personal information, including access controls, server-side authorization, hashed abuse-prevention identifiers, and restricted admin tools. No system is completely secure, and we cannot guarantee absolute security.

The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If local law requires a higher minimum age or parental consent, that requirement applies. Contact us if you believe a child has provided information contrary to this section.

We may update this Policy as the Service or law changes. We will post the revised version and update the effective date. Where required, we will provide additional notice or obtain consent.

Privacy inquiries and rights requests: support@regengpt.com.