Privacy Policy | The 5-Day Paycheck Replacement Challenge

Effective date: July 28, 2026

This Privacy Policy explains how Regalis Capital ("Regalis Capital," "we," "us," or "our") collects, uses, discloses, sells, shares, and otherwise processes personal information about you when you visit our websites, purchase or access the 5-Day Paycheck Replacement Challenge (the "Product"), interact with our advertising, communicate with us, or otherwise use our services (together, the "Services").

This policy is directed to users in the United States, and our Services are intended for United States residents. By using the Services, providing information to us, or communicating with us, you acknowledge that you have read and understood this policy. Where we rely on your consent, your continued use of the Services and your voluntary provision of information constitute that consent to the fullest extent permitted by law.

Notice at collection

We collect the categories of personal information described in the section "Information we collect," including identifiers, contact information, commercial and transaction information, internet and device activity, geolocation data, inferences, and, where you choose to provide it, certain sensitive personal information. We collect this information for the business and commercial purposes described in "How we use your information," including service delivery, marketing and advertising, analytics, product development, and improvement of our models and systems.

We retain personal information for as long as a business need exists, as described in "Data retention." We may disclose personal information to the recipients described in "How we share your information," and we may sell or share personal information as those terms are defined under California law. To exercise your privacy rights, including the right to opt out of the sale or sharing of your personal information, see "Your California privacy rights," the dedicated Do Not Sell or Share My Personal Information section, and "How to exercise your rights."

1. Information we collect

We collect a broad range of personal information from and about you, from the sources described in Section 2. The categories we collect include, to the fullest extent permitted by law:

Identifiers: name, email address, postal address, telephone number, account username, order and customer identifiers, IP address, device identifiers, cookie and pixel identifiers, and online or advertising identifiers.
Contact information: the email address, phone number, and mailing details you provide at checkout, in forms, in surveys, or in communications with us.
Commercial, purchase, and transaction information: records of products purchased or considered, order history, purchase amounts and dates, billing information, and the last digits and type of the payment method used. Full payment card numbers are processed by our third-party payment processor and are not stored by us.
Internet, network, device, and usage data: browser type and settings, operating system, device type and model, language settings, referring and exit pages, pages and content viewed, links and buttons clicked, time spent, session activity, and other interaction and diagnostic data collected automatically as you use the Services.
Cookies, pixels, and tracking technologies: data collected through cookies, web beacons, tracking pixels, software development kits, local storage, and similar technologies. This expressly includes advertising and analytics pixels such as the Meta Pixel (Facebook Pixel), the Meta Conversions API, the Google advertising and analytics tags, and similar pixels, tags, and tracking tools operated by advertising and analytics partners.
Geolocation data: general location inferred from your IP address or device, such as country, region, state, or city.
Inferences: profiles and inferences drawn from the information above reflecting your preferences, characteristics, interests, predispositions, behavior, and likelihood to purchase.
Communications records: the content and records of your communications with us, including emails, text messages, chat messages, call records, support tickets, survey responses, and social media interactions.
Information from third parties: information we receive from data brokers, marketing partners, advertising platforms, analytics providers, affiliates, business partners, and social media platforms, including audience, demographic, interest, and contact data, and information used to enhance, verify, or supplement the information we already hold about you.
Sensitive information you choose to provide: certain information that may be treated as sensitive under some state laws, such as precise account log-in credentials, only if and to the extent you voluntarily provide it. We do not request sensitive personal information beyond what is needed to provide the Services.

Interactive tools and calculators run in your browser. The interactive tools and calculators in the Product, such as the buy-box tool, the deal-grader tool, and the personal financial statement (PFS) inputs, run entirely in your browser. The figures you enter into these tools are processed locally on your device. They are never transmitted to or stored on our servers, unless you separately choose to send them to us, for example by emailing them to support.

2. How we collect information

We collect personal information from the following sources:

Directly from you: when you purchase the Product, create or access an account, fill out a form, enter your contact details, respond to a survey, or contact our support team.
Automatically: through cookies, pixels, tags, and similar technologies when you visit our sites, view our advertising, open our emails, or use the members hub.
From third parties: including advertising platforms (such as Meta and Google), analytics providers, payment processors, our checkout provider, affiliates, business partners, data brokers, and social media platforms.

3. How we use your information

We use personal information for the following business and commercial purposes, and for any additional purposes disclosed to you or to which you consent, in each case to the fullest extent permitted by applicable law:

Provide the Services: process your purchase, deliver and administer access to the Product and members hub, authenticate you, and provide customer support.
Marketing and promotions: send you marketing and promotional communications by email, text message, phone, and other channels about our products, offers, and those of our affiliates and partners, subject to the consent and opt-out terms in Section 5.
Advertising, remarketing, and custom audiences: deliver, target, measure, and optimize advertising, including retargeting and remarketing, and build and use custom audiences and lookalike or similar audiences on advertising platforms including Meta (Facebook and Instagram) and Google. We may share identifiers, including hashed email addresses and phone numbers, with these platforms for audience matching.
Analytics and measurement: understand and measure how the Services and our advertising perform, including conversions, attribution, and engagement.
Product development and improvement: develop, test, and improve our products, offers, content, and Services.
Model and system improvement: use your communications, usage data, and other information to train, fine-tune, evaluate, and improve our models, algorithms, automated systems, and artificial intelligence tools used to operate, personalize, secure, and improve the Services and our marketing, consistent with your choices described in Sections 8, 9, and 10.
Profiling and personalization: create profiles and inferences and personalize content, offers, and advertising based on your characteristics and behavior.
Cross-device and cross-context tracking: link and associate your activity, devices, and identifiers across browsers, devices, sites, apps, and over time to recognize you and deliver consistent, targeted experiences and advertising.
Business operations and security: maintain and secure the Services, prevent fraud and abuse, enforce our terms, and protect our rights and the rights of others.
Legal and compliance: comply with law, respond to legal process, and establish, exercise, or defend legal claims.

4. Cookies, pixels, and tracking technologies

We and our partners use cookies, web beacons, tracking pixels, tags, software development kits, local storage, and similar technologies to operate the Services, remember your settings, analyze traffic and performance, and deliver and measure advertising.

These technologies include advertising and analytics pixels operated by third parties, such as the Meta Pixel and the Meta Conversions API, Google advertising and analytics tags, and similar ad pixels and tags. These technologies may collect device and usage data and identifiers and share them with the operating platforms so that we and they can target, retarget, and measure advertising, including through custom and similar audiences.

You can control cookies through your browser settings, and you can manage some advertising cookies through industry opt-out tools such as the Digital Advertising Alliance (optout.aboutads.info) and the Network Advertising Initiative (optout.networkadvertising.org). Blocking cookies may affect how the Services function. For our response to browser Do-Not-Track signals, see Section 12.

5. Communications consent (phone, text, and email)

This section describes the consent you provide when you give us your phone number or email address, and how to opt out. Please read it carefully.

5.1 Calls and text messages (phone consent)

By providing your telephone number to us, you give your express written consent to receive marketing, promotional, transactional, and informational calls and text messages (SMS and MMS) at the number you provide, from Regalis Capital and its affiliates, partners, service providers, and agents. You expressly agree that these calls and texts may be delivered using an automatic telephone dialing system or other automated dialing or messaging technology, an artificial voice, a prerecorded voice, or a ringless voicemail, and you consent to receive such automated, artificial-voice, and prerecorded-voice calls and messages, including robocalls and robotexts.

You agree that we and the parties above may contact you at the number provided regardless of whether that number is listed on any federal, state, corporate, or internal Do-Not-Call registry or list, and you waive any objection to being contacted on that basis to the fullest extent permitted by law.

How this consent is collected. The consent described in this section is captured when you submit your phone number through a checkout or opt-in form that presents this disclosure and asks you to take an affirmative action, such as checking a box or clicking a clearly labeled button. Providing your number through such a form is your electronic signature evidencing that consent. This policy describes the consent; the checkout form is where you affirmatively give it.

Consent is not a condition of purchase. You are not required to provide this consent, or to agree to receive these calls or messages, in order to buy the Product or use the Services. Message and data rates may apply, and message frequency varies.

How to opt out of texts: reply STOP to any marketing text message to opt out of further marketing texts, and reply HELP for help. How to opt out of calls: tell the caller or our support team that you wish to be placed on our internal Do-Not-Call list, or email support@regaliscapital.com. Opting out of one channel does not automatically opt you out of the others.

5.2 Email communications (CAN-SPAM)

By providing your email address, you consent to receive marketing, promotional, transactional, and informational emails from Regalis Capital and its affiliates and partners. We handle marketing email consistent with the federal CAN-SPAM Act: our marketing emails identify the message as an advertisement where required, include a valid physical postal address, and provide a clear way to opt out.

How to opt out of marketing email: email support@regaliscapital.com with your request to opt out. We process email opt-out requests by hand within 7 business days. We may still send you non-marketing transactional or relationship messages, such as receipts, account notices, and information needed to deliver the Product.

6. How we share your information

We disclose personal information to the following categories of recipients, for the business and commercial purposes described in this policy:

Service providers and processors: vendors who perform services for us, such as payment processing, checkout, hosting, members-hub delivery, email and text-message delivery, customer support, analytics, and fraud prevention.
Advertising and analytics platforms: platforms such as Meta and Google, and other ad networks, exchanges, and measurement providers, including for the purpose of building and using custom and similar audiences and measuring advertising.
Affiliates: entities that control, are controlled by, or are under common control with Regalis Capital.
Business partners: marketing and promotional partners with whom we jointly offer, promote, or cross-promote products and services.
Corporate transactions: counterparties and advisors in connection with a merger, acquisition, financing, reorganization, sale of assets, or similar transaction, in which personal information may be transferred as a business asset.
Legal and safety recipients: law enforcement, regulators, courts, and other parties where necessary to comply with law or legal process, enforce our terms, or protect rights, property, or safety.

Sale and sharing of personal information. Some of the disclosures described above, in particular disclosures to advertising platforms and business partners and disclosures for cross-context behavioral advertising, may be considered a "sale" or "sharing" of personal information under California law and similar laws of other states. We disclose that your personal information may be sold or shared as those terms are defined by applicable law. You have the right to opt out of the sale or sharing of your personal information, as described in Section 8 and Section 10. We do not knowingly sell or share the personal information of consumers under 16 years of age.

7. Data retention

We retain personal information for as long as a business need exists, which means for as long as necessary to fulfill the purposes described in this policy, including to provide the Services, maintain records of transactions and communications, support our marketing and advertising, develop and improve our products and systems, and comply with our legal obligations, resolve disputes, and enforce our agreements. When personal information is no longer needed for these purposes, we take reasonable steps to delete, de-identify, or archive it in accordance with applicable law.

8. Your California privacy rights (CCPA and CPRA)

This section applies to California residents and is provided under the California Consumer Privacy Act, as amended by the California Privacy Rights Act (together, the "CCPA").

8.1 Categories of personal information collected

In the 12 months before the effective date of this policy, we have collected the following statutory categories of personal information. The sources, uses, and disclosure recipients for each are described elsewhere in this policy.

CCPA category	Examples we collect	Sold or shared
Identifiers	Name, email, phone number, postal address, IP address, device and online identifiers, cookie and advertising IDs	Yes
Customer records (Cal. Civ. Code 1798.80)	Contact and billing details, payment method type and last digits	Yes
Commercial information	Products purchased or considered, order and transaction history	Yes
Internet or network activity	Browsing and usage data, interactions with our sites, ads, and emails	Yes
Geolocation data	General location inferred from IP or device	Yes
Audio, electronic, or visual information	Records of communications, such as emails, texts, chats, and call records	No
Inferences	Profiles and predictions about preferences and behavior	Yes
Sensitive personal information	Account log-in credentials, only if you provide them	No

We collect these categories for the business and commercial purposes described in Section 3. We disclose these categories to the recipients described in Section 6. Where a category is marked "sold or shared," we mean sold or shared as those terms are defined under the CCPA, primarily through advertising and analytics technologies and disclosures to advertising platforms and business partners.

8.2 Your rights under the CCPA

Subject to verification and legal exceptions, California residents have the following rights:

Right to know and access: request the categories and specific pieces of personal information we have collected, the sources, the business or commercial purposes, and the categories of third parties to whom we disclosed it, covering the 12-month period before your request.
Right to delete: request deletion of personal information we collected from you, subject to exceptions.
Right to correct: request correction of inaccurate personal information we maintain about you.
Right to opt out of sale or sharing: direct us not to sell or share your personal information, including for cross-context behavioral advertising.
Right to limit use of sensitive personal information: to the extent we use sensitive personal information beyond the purposes permitted by law, direct us to limit that use.
Right to non-discrimination: we will not discriminate against you for exercising your rights.

8.3 Do Not Sell or Share My Personal Information

You have the right to opt out of the sale or sharing of your personal information, including for cross-context behavioral advertising. You do not need to create an account, verify your identity, or use any exact wording to exercise this right. To opt out, email support@regaliscapital.com and ask to opt out (you may, but do not have to, use the words "Do Not Sell or Share My Personal Information"). We review each email request by hand and stop selling or sharing the personal information tied to your request within 7 business days. Email is the way to exercise this right.

No identity verification is required to opt out of the sale or sharing of your personal information. To exercise your separate right to limit the use of sensitive personal information, email us at the same address. You may also manage certain advertising cookies through your browser and the industry opt-out tools described in Section 4.

We do not operate an automated opt-out mechanism. We do not automatically process the Global Privacy Control (GPC) or any other browser or device opt-out preference signal. To opt out of the sale or sharing of your personal information, email us as described above.

8.4 Verification and authorized agents

To protect your information, we verify your identity before responding to a request to know, delete, or correct. We may ask you to provide information that we can match against our records, such as the email address and details associated with your purchase. We will not use information collected for verification for any other purpose. You may use an authorized agent to submit a request on your behalf. We may require the agent to provide proof of your written authorization and may require you to verify your identity directly with us.

9. Other state privacy rights

Residents of certain other states, including Virginia, Colorado, Connecticut, Utah, and Texas, may have privacy rights under their state laws. Depending on your state and subject to that state's exceptions, these rights may include the right to confirm whether we process your personal data and to access it, the right to correct inaccuracies, the right to delete personal data, the right to obtain a portable copy of your data, and the right to opt out of targeted advertising, the sale of personal data, and certain profiling.

To exercise these rights, submit a request to support@regaliscapital.com. We will verify and respond as required by the applicable state law. If your state provides an appeal process and we decline to act on your request, we will inform you of how to appeal.

10. How to exercise your rights

Email is the way to exercise every privacy right described in this policy. To make a request, email support@regaliscapital.com and tell us which right you wish to exercise. To help us locate your records and verify your request, please include the email address you used with us and any relevant order details. We review each request by hand and respond within 7 business days, and in any event within the time periods required by applicable law. We do not operate an automated request mechanism. We may decline a request, in whole or in part, where an exception applies or where we cannot verify your identity.

11. Security

We maintain reasonable administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, use, alteration, disclosure, and loss. However, no method of transmission or storage is completely secure, and we cannot and do not guarantee the absolute security of your information. You provide information to us and use the Services at your own risk. In the event of a data breach affecting your personal information, we will notify you and the appropriate authorities as required by applicable law.

12. Additional disclosures

12.1 Children

Different laws set different age thresholds, so this paragraph uses three: our Services are for adults 18 and over, we follow the federal children's privacy rule for anyone under 13, and we apply the stricter California standard for minors under 16. The Services are intended for adults and are not directed to children under 18 years of age. We do not knowingly collect personal information from children under 13, and we do not knowingly collect or sell the personal information of minors under 16 without the required consent. If you believe a child has provided us personal information, contact us at support@regaliscapital.com and we will take appropriate steps to delete it.

12.2 Third-party links and services

The Services may contain links to third-party websites, platforms, and services that we do not control, including advertising and social media platforms. This policy does not apply to those third parties, and we are not responsible for their privacy practices. We encourage you to review the privacy policies of any third party you interact with.

12.3 Do-Not-Track

Some browsers offer a Do-Not-Track signal. There is no common industry standard for how to respond to these signals, and we do not currently respond to browser Do-Not-Track signals. We also do not automatically process the Global Privacy Control (GPC) or any other browser or device opt-out preference signal. To opt out of the sale or sharing of your personal information, email support@regaliscapital.com as described in the Do Not Sell or Share My Personal Information section. See Section 4 and that section for the choices available to you.

12.4 Users and processing location

The Services are intended for United States residents, and we process and store information in the United States. If you access the Services from outside the United States, you do so on your own initiative and are responsible for compliance with local law, and you understand that your information will be processed in the United States.

12.5 Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the effective date at the top of this page and, where required by law, provide additional notice. Your continued use of the Services after an update takes effect constitutes your acceptance of the updated policy to the extent permitted by law.

13. Contact us

For questions about this policy or to exercise your privacy rights, contact:

Regalis Capital
Privacy requests: support@regaliscapital.com