Privacy Policy

Last updated: March 10, 2026

1. Introduction

Raya Partners, Inc. ("Raya," "we," "us," or "our") operates the Raya platform, including the website at meetraya.io and the application at app.meetraya.io (collectively, the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our Service.

By accessing or using the Service, you consent to the data practices described in this Privacy Policy. If you do not agree, please discontinue use of the Service.

2. Information We Collect

Information You Provide Directly:

• Account information: Name, email address, organization name, role, and organization details when you register for an account.
• Donor information: Name, email address, mailing address, phone number, and donation history that nonprofit organizations input or that donors provide through donation forms.
• Payment information: Payment details are processed securely by Stripe, Inc., our PCI DSS Level 1 certified payment processor. Raya does not store credit card numbers, bank account numbers, or other sensitive payment credentials on our servers.
• Communications: Emails, support requests, feedback, and any other information you send to us.
• Organization content: Email campaigns, fundraising page content, and other materials you create through the Service.

Information Collected Automatically:

• Usage data: Pages visited, features used, interaction patterns, clicks, and time spent on the Service.
• Device information: Browser type, operating system, screen resolution, and device identifiers.
• Log data: IP address, access times, referring URLs, and pages viewed.
• Cookies and similar technologies: We use cookies and similar tracking technologies to maintain sessions and analyze usage patterns.

Information from Third Parties:

• Google account data: If you connect your Google account, we access only the data you explicitly authorize through Google's OAuth consent screen. You can revoke this access at any time through your Google account settings.
• Stripe: We receive transaction confirmations and payout status information from Stripe related to donations processed through the Service.

3. How We Use Your Information

We use the information we collect for the following purposes:

• To provide, operate, and maintain the Service, including processing donations and managing donor relationships.
• To send donation receipts, tax documentation, and transaction confirmations.
• To communicate with you about your account, respond to support requests, and send platform updates.
• To improve, personalize, and optimize the Service, including analytics and product development.
• To detect, investigate, and prevent fraudulent transactions, abuse, and other illegal activities.
• To comply with legal obligations, including tax reporting and charitable solicitation laws.

4. How We Share Your Information

We do not sell, rent, or trade your personal information to third parties.

We may share your information in the following limited circumstances:

• With nonprofit organizations: Donor information is shared with the nonprofit organizations to which donations are made, enabling them to manage donor relationships, issue tax receipts, and fulfill their charitable missions.
• With service providers: We share information with trusted third-party service providers who assist us in operating the Service, including:
  • Stripe (payment processing)
  • Supabase (database hosting and authentication)
  • Vercel (website and application hosting)
  • PostHog (product analytics)
  • SendGrid (transactional email delivery)
  • OpenAI and Anthropic (AI-powered features, with data minimization practices)
• For legal compliance: We may disclose information when required by law, subpoena, court order, or governmental regulation, or when we believe disclosure is necessary to protect our rights, your safety, or the safety of others.
• Business transfers: In the event of a merger, acquisition, or sale of all or a portion of our assets, your information may be transferred as part of that transaction. We will notify you via email or prominent notice on our website of any such change.

5. Data Security

We implement industry-standard security measures to protect your information:

• All data transmitted between your browser and our servers is encrypted using HTTPS/TLS.
• Payment information is processed by Stripe, a PCI DSS Level 1 certified payment processor.
• We use secure authentication mechanisms including JWT tokens and role-based access controls.
• Our infrastructure is hosted on reputable cloud platforms with enterprise-grade security certifications.
• We conduct regular security assessments and promptly address identified vulnerabilities.

While we strive to protect your information, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.

6. Data Retention

• Account data: Retained for as long as your account is active, plus a reasonable period after account closure for legal and operational purposes.
• Donation records: Retained as required by applicable tax laws and charitable reporting requirements (typically a minimum of 7 years).
• Usage data: Retained in anonymized or aggregated form for analytics purposes.
• Communications: Support correspondence is retained for quality assurance and legal purposes.

You may request deletion of your personal data by contacting us at hello@meetraya.io. Deletion requests are subject to legal retention requirements.

7. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal information:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request that we correct inaccurate or incomplete personal data.
• Deletion: Request deletion of your personal data, subject to legal retention requirements.
• Portability: Request a machine-readable copy of your personal data.
• Opt-out of marketing: Unsubscribe from marketing emails using the link in any marketing communication.
• Revoke third-party access: Revoke Google account or other third-party integrations at any time.
• Do Not Track: We honor Do Not Track browser signals where technically feasible.

To exercise any of these rights, contact us at hello@meetraya.io. We will respond to your request within 30 days.

8. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect, the right to request deletion, and the right to opt out of the sale of personal information. As stated above, we do not sell personal information.

To exercise your CCPA rights, contact us at hello@meetraya.io.

9. International Data Transfers

The Service is operated from the United States. If you access the Service from outside the United States, your information will be transferred to, stored, and processed in the United States. By using the Service, you consent to the transfer of your information to the United States, which may have different data protection laws than your country of residence.

10. Children's Privacy

The Service is not directed to individuals under the age of 13 (or 16 in the European Economic Area). We do not knowingly collect personal information from children. If we become aware that a child has provided us with personal information, we will take steps to delete such information. If you believe a child has provided us with personal information, please contact us at hello@meetraya.io.

11. Cookies and Analytics

We use PostHog for product analytics to understand how the Service is used and to improve the user experience. PostHog may collect usage data, device information, and interaction patterns.

You can manage cookie preferences through your browser settings. Disabling cookies may affect certain features of the Service.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Material changes will be posted on this page with an updated "Last updated" date. If changes are significant, we will notify you by email or through a prominent notice on the Service. Your continued use of the Service after changes constitutes acceptance of the updated Privacy Policy.

13. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, contact us at:

Raya Partners, Inc.
Email: hello@meetraya.io
Website: meetraya.io