Legal
Privacy policy
Last updated 15 October 2026
Draft. Before launch the site owner needs to add the company's legal name, address and contact email, and have this page reviewed by a qualified lawyer.
This policy explains what personal data Regionly collects, why, who processes it and the choices you have. Regionly is operated by the operator of Regionly, which is the controller of your personal data.
What we collect
- Account details: your email address, your name if you give it, and a scrambled (hashed) version of your password. We never store your password itself.
- Workspace details: workspace names, who belongs to them and their roles, and invitations you send, including the invitee's email address.
- Your ads: the videos you upload, a thumbnail frame, the transcript of the speech, the notes and brand words you add, and the versions Regionly produces for you, including scripts, voiceovers, generated images and videos.
- Billing: your plan, credit balance and history, and a customer reference from Stripe. Card details are collected and held by Stripe, never by us.
- Technical data: our hosting provider keeps short-lived server logs, which include IP addresses and request details, to run and secure the service.
Why we use it
- To provide the service you signed up for: storing your ads, localising them and showing you the results. This is necessary to perform our contract with you.
- To take payment and keep billing records. This is necessary for the contract and to meet our legal obligations.
- To keep the service secure and working, and to fix problems. This is in our legitimate interests.
- To reply when you contact us.
We don't sell your data, we don't use it for advertising, and we don't use your ads to train AI models.
Who processes it
To localise an ad, its content is sent to the AI providers that do each step. We share only what each step needs.
- Vercel hosts the site and stores uploaded and generated files.
- Neon hosts our database.
- ElevenLabs transcribes your ad, dubs it and records voiceovers.
- Higgsfield generates presenters and video scenes for regenerated ads.
- Anthropic rewrites your script for each market.
- Stripe handles payments and subscriptions.
Some of these providers are based in, or process data in, the United States. Where personal data leaves the UK, we rely on the safeguards UK law allows, such as the UK addendum to the EU standard contractual clauses or the UK–US data bridge.
Images on our marketing pages are loaded from picsum.photos, which receives your IP address when you view them.
How long we keep it
We keep your account, ads and versions for as long as your account is open. When you delete your account, we delete it from our database and remove its files from our storage straight away. Payment and invoice records are kept by Stripe for as long as tax law requires. Copies held by the AI providers are deleted according to their own retention policies.
Your rights
Under UK data protection law you can ask to access, correct, delete or receive a copy of your personal data, and you can object to or ask us to restrict some uses of it. You can delete your account at any time from the data deletion page.
To make a request, contact us at our contact page. If you're unhappy with how we handle your data, you can complain to the Information Commissioner's Office at ico.org.uk.
People in your ads
Your ads may show or include the voices of other people. You're responsible for having their permission to localise their likeness and voice, including cloning a voice for a dub. We process their data on your behalf, only to make the versions you ask for.
Changes to this policy
If we change this policy in a way that matters, we'll tell you by email or in the app before the change takes effect.
See also: Privacy · Terms · Cookies · Data deletion