Privacy Policy
Effective date: 2026-11-02
Scope and operator
RAYTHIA LLC operates the RAYTHIA business management service, including its website and limited beta. This notice addresses information handled to provide RAYTHIA. A participating business may independently decide what customer information to enter into its workspace; contact that business about its own privacy practices. RAYTHIA LLC is based in Florida. The free, limited Beta is intended for up to five selected US businesses. Its initial geographic scope is Florida; additional US states have not yet been selected. Health-data or biometric-data processing and use by children under 13 are outside the planned Beta scope.
Information processed
Depending on enabled features, data may include company and account details; names, emails, phone numbers and team roles; customer and lead details; conversations and WhatsApp channel identifiers; sales, documents and delivery records; AI classifications or translations; invitation and security/audit records; and technical information needed to operate the service. Beta applications also include the applicant and company names, business type and description, email, team size, requested capabilities, WhatsApp usage and optional challenge or notes. We do not assume that every beta workspace uses every feature.
Purposes of processing
We use Beta application information to evaluate participation and contact applicants. We use relevant information to create and secure accounts, manage company workspaces, process requested business workflows, route conversations and leads, provide enabled AI assistance, send service notifications, troubleshoot issues and meet applicable obligations. We do not describe features not yet enabled as active services.
Business customers and access
A business generally determines the content and purpose of the customer records it enters. Authorized members of that business may access its workspace according to their assigned permissions. RAYTHIA handles those records to provide the requested service, subject to the relevant agreements and applicable law. RAYTHIA determines the purposes of processing for its own applicant selection, account administration, security and operations.
Providers and WhatsApp
RAYTHIA uses Supabase for database and authentication services and Vercel for application hosting. Enabled features may use Meta/WhatsApp for channel onboarding and communications, OpenAI for AI-assisted translation and invoice data extraction, and Resend to deliver Beta applications to RAYTHIA’s administrative email inbox. The application submission flow does not create a Beta application database record in RAYTHIA or automatically delete the email. Information disclosed to each provider depends on the feature used. Provider processing, locations and terms may differ. RAYTHIA does not sell personal information or disclose it for targeted advertising in this Beta. This statement does not exclude disclosures to providers for the service purposes described above.
Cookies and browser storage
We use cookies to support authentication, invitation acceptance and password recovery. The raythia_locale cookie remembers your language choice for up to one year. If you choose to remember your email at login, we store it in this browser's local storage without a fixed expiry; you can remove it by clearing the site's browser data or submitting the login form with that option unchecked. Browser settings let you block or clear cookies and site storage, but doing so may affect sign-in and language preferences.
Online tracking and Do Not Track
We do not use advertising pixels or track your browsing across other companies' websites for targeted advertising. Our service does not change its behavior in response to browser Do Not Track signals. Connected third-party services may use their own cookies and collect information under their own privacy notices when you use those services. This statement about Do Not Track does not limit rights or opt-out obligations under applicable law.
Retention, backups and security
We retain account and business information while necessary for the active service and authorized purposes, subject to applicable obligations. Our approved Beta objectives provide for monthly application review and removal of eligible rejected or withdrawn application emails within 90 days after the final participation decision, subject to documented legal or operational holds. Account closures are to be reviewed within 30 days to assess exports, legal holds, provider copies and authorized deletion or restriction. Minimal privacy-case evidence is to be retained for 24 months after closure, or longer where required by law or documented holds, with monthly review of disposal eligibility. These are operational objectives, not automatic-expiry controls or confirmation that irreversible deletion is currently operational. Irreversible deletion has not been authorized or verified as operational. Requests are reviewed under the manual process described at /data-deletion. Deletion from an active system does not establish deletion of email copies, Storage objects, backups or provider-held data. Their expiry dates and complete erasure have not been verified. We do not promise zero retention by OpenAI. We use access controls and other safeguards, but no system can be guaranteed completely secure.
International processing and legal rights
Participating businesses are selected within the United States. Service providers may process information in other countries. Privacy rights depend on applicable law and may include access, correction, deletion and other rights. Before disclosing records or taking action, we verify the requester’s identity and, for business-controlled records, authority for the affected tenant. We may coordinate with the business controlling those records. Our operational limitations do not waive applicable rights or extend legally required response periods.
Requests and contact
Email security@raythia.com to request access, correction or deletion, or to report a privacy or security concern. During beta, requests are handled manually. Do not email passwords, verification codes or sensitive identity documents. See /data-deletion for the procedure.
Changes
We may update this notice when features, practices or legal requirements change. We will post the revised notice and its effective date on this page. We will notify affected account holders of material changes by email before those changes take effect, and obtain consent where required by applicable law.