Privacy Policy

Last updated: September 29, 2026

This Privacy Policy explains how HyperEZ Inc. ("HyperEZ", "we", "us", or "our") collects, uses, and protects information when you use Regnax, available at b2b.regnax.ai, including its API and chat console (the "Service").

1. Information we collect

• Account information: your email address and basic account settings.
• API keys: stored in hashed form. We do not retain the original key value after it is shown to you once.
• Conversations and inputs: the prompts, messages, and content you submit, together with the responses generated.
• Attachments: images and PDF files you attach to saved chat conversations. These files are stored in Amazon Web Services (Amazon S3) so the conversation can be reopened later.
• Free trial chats without an account: if you use the chat without logging in, we record the text of your messages and the responses, your IP address, and a device identifier kept in a browser cookie. We use this to operate trial limits and prevent abuse, and we delete these records after 30 days.
• Usage and billing records: credit consumption, request counts, plan and subscription details, and related metering data.
• Bank transfer and tax invoice details (Korea): if you top up by bank transfer, the depositor name, your account email, and the business registration certificate you send us, used to confirm the payment and issue a tax invoice.
• Basic request logs: technical records such as IP address, timestamps, and request metadata, used for security, rate limiting, and abuse prevention.

2. How we use your information

• To provide, operate, and maintain the Service, including routing requests and returning responses.
• To meter usage, manage credits, and process billing.
• To secure the Service, enforce rate limits, detect and prevent abuse, and troubleshoot issues.
• To communicate with you about your account, support requests, and important changes.
• To improve the reliability and quality of the Service.

3. AI processing (Amazon Web Services)

The AI models behind the Service are run on Amazon Bedrock, operated by Amazon Web Services (AWS). To generate responses, the inputs you submit (including attachments) are sent to Amazon Bedrock for processing, and the outputs are returned to you. We share only what is needed to generate the response. When a request uses web search, the search query is sent to our web search provider to retrieve results.

4. Sharing with payment processors and service providers

• Polar (Polar Software Inc.): processes subscriptions and USD top-ups as our Merchant of Record. Information needed to process your purchase is shared with and processed by Polar in accordance with its own privacy policy.
• PortOne (PortOne Inc.): where KRW card payments are enabled, processes those payments. Information needed to process the payment is handled by PortOne and the card payment provider in accordance with their own privacy policies.
• Amazon Web Services: hosts AI processing (Amazon Bedrock) and attachment storage (Amazon S3) as described above.
• Email delivery provider: sends sign-in codes and account emails to your email address.

We do not store full payment card details on our systems.

5. No sale of personal data

We do not sell your personal data. We do not share it with third parties for their own independent marketing purposes.

6. Data retention

We retain usage and billing records for as long as needed to provide the Service, meet legal and audit obligations, and resolve disputes. Conversation and account data, including stored attachments, are retained while your account is active and for a reasonable period thereafter; deleting a conversation also deletes its stored attachments. Free trial chats made without an account are deleted after 30 days. We clean up transient data such as expired sessions and one-time verification codes on an ongoing basis. We may retain certain records longer where required by law.

7. Security measures

We apply technical and organizational safeguards designed to protect your information, including hashing of API keys and credentials and encryption of data in transit. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

8. Your rights

Subject to applicable law, you may request access to, correction of, or deletion of your personal data. To make a request, contact us at support@regnax.ai. We may need to verify your identity before acting on a request.

9. Governing law

This Privacy Policy is governed by the laws of the Republic of Korea, without regard to its conflict of laws rules.

10. Contact

For privacy questions or requests, contact us at support@regnax.ai.