Privacy Policy

Last updated: 11.08.2026

This policy is issued by eXpanby Ltd (Reg. No. 40203434700), the operator of RegiFlow.

1. What we collect

Account information (name, email, organization), authentication tokens for connected services (Pipedrive and your chosen registry data provider), and usage/audit data needed to operate the Service. Company registry data synced through RegiFlow is written directly into your own Pipedrive account and is not otherwise retained by us beyond what's needed to operate the sync.

2. How we use it

To provide and operate the Service, authenticate you, process billing, communicate with you about your account, and improve the product. We do not sell your data.

3. Third parties

We share data with the third-party services you connect (Pipedrive, your chosen registry provider) and with infrastructure providers necessary to run the Service (hosting, database, email, payment processing).

4. Data retention

We retain account data for as long as your organization's account is active, and for a reasonable period after to comply with legal or accounting obligations.

5. Your rights

Depending on your jurisdiction, you may have rights to access, correct, or delete your personal data. Contact us to exercise these rights.

6. Security

Credentials and connection tokens are encrypted at rest. We use industry-standard practices to protect your data, but no system is completely secure.

7. Contact

Questions about this policy: Regiflow@expanby.com.