Privacy Policy
Effective 24 October 2026
This policy is from Rayfora, India ("Rayfora", "we"). It says, in plain words, what Rayfora keeps about you and your company, why, who can see it, and what you can ask us to do with it. It follows India's Digital Personal Data Protection Act, 2023.
Your company's work stays your company's
Products, photographs, templates, collections, prices, orders and everything else your company puts into Rayfora belong to your company. They are never made public, never shown to any other company, and never sold. Each company's data is walled off from every other's inside our database. The only thing every company can see is a template Rayfora itself publishes in its own library.
What we keep
- Your account: your name, the login we give you, your contact phone, your contact email if you give one, your role, and your password — kept only as a scrambled hash nobody at Rayfora can read.
- Your company's work: what your company enters, imports and makes in Rayfora.
- A Try free request: the name, company, email and mobile number typed into it.
- How Rayfora is used: recordings of visits to the app and to rayfora.com — where people click, scroll and get stuck — made with PostHog. Everything typed is hidden in them, and so is every product's text and every photograph; what remains readable is Rayfora's own buttons, labels, headings and menus. Fair mode, the join and reset pages and links carrying a secret are never recorded.
- Activity and errors: your company's Activity log, which records who changed what; and technical records of errors and requests, which never contain your products' values.
Why we keep it
- To run Rayfora for your company: signing you in, keeping your work, making your decks.
- To see where Rayfora is hard to use, and make it easier.
- To answer your questions and fix problems.
- To contact you. Your contact phone and email are visible only to your company; Rayfora may also use them to contact you, including about Rayfora's own products and offers. Tell us at sales@rayfora.com and we will stop promotional contact.
Who else handles it
A few services do work for us, each only to run Rayfora:
- Render hosts the app and its database.
- Cloudflare R2 stores files: photographs, templates and spreadsheets.
- PostHog (in its EU region) keeps the usage recordings described above.
- Sentry receives reports of errors, rebuilt first so that no product value, form or password is in them.
- An email service sends Rayfora's emails, such as a Try free code.
Nobody else receives your data, unless the law requires us to give it.
How long
Your company's work and accounts are kept while your company uses Rayfora, and deleted when you ask after it stops. Usage recordings are kept for about one month. A deleted product waits in your Trash for 20 days first, so a mistake can be undone.
Keeping it safe
Rayfora is reached only over an encrypted connection; passwords are stored only as hashes; and a sign-in link or reset link works once and runs out. Nobody at Rayfora ever knows your password.
What you can ask
You may ask to see what Rayfora keeps about you, to correct it, to delete it, or to stop promotional contact — write to sales@rayfora.com. Your company's administrator can also change most of it from the People page.
Cookies and storage in your browser
Rayfora uses one cookie to keep you signed in, and stores fair mode's offline copy on your phone if you sync it. PostHog stores a small identifier in your browser so that one visit is one recording.
Changes
If this policy changes, the new version goes here with a new date. Questions: sales@rayfora.com.