Privacy Policy

Who we are

Raay ("we", "us") runs raay.co.in and the shop pages on it. For any privacy question or request, write to hello@raay.co.in. This address also acts as our grievance contact under India's Digital Personal Data Protection Act, 2023.

If you scan a shop's QR code (customers)

What we record

To show shop owners how their page is used, we count:

• that the page was opened (a "scan"), and which buttons were tapped;
• when the Wi-Fi password was shown or a coupon code was copied;
• when a nearby shop suggested on the page was shown or opened;
• the type of device: Android, iPhone or computer;
• the date and time.

What we don't collect

• No name, phone number or email.
• No location. We never ask for your location; "nearby" distances are worked out from the shop's address.
• No IP address or full browser details are saved. To stop people faking scans, our server keeps a scrambled, unreadable version of your IP address in its memory for a few minutes; it is never stored.
• No advertising trackers, and we don't sell or rent any data.

To avoid counting the same visit twice, your browser keeps a small note for that tab only ("session storage"). It is deleted when you close the tab and is never sent to us.

Buttons that open other apps

Buttons like WhatsApp, Google reviews, Instagram, Maps, YouTube, Facebook, the shop's website or your UPI app take you to that service. What happens there is covered by their own privacy policies. "Save contact" creates a contact card on your phone; nothing about you is stored by us.

Payments

"Pay with UPI" only shows the shop's own UPI details and QR code. The payment happens inside your UPI app, straight to the shop. Raay never receives, handles or sees your money or bank details.

If you run a shop on Raay (owners)

What we keep

• Your email address, to log you in with a one-time code.
• Your shop's details: name, category, area, logo, buttons (phone, WhatsApp, links, Wi-Fi name and password, UPI ID), offers and design choices. These are shown publicly on your shop page, because that's the purpose of the service.
• Your shop's map location, if you add it. It's used only to work out distances for nearby discovery. The exact coordinates are never shown on any page, only a rounded distance like "120 m away".
• Plan and payment records: plan, amount, date, method and reference of what you paid Raay.
• The anonymous usage counts described above, for your dashboard.

Cookies

When you log in, we set a login cookie so you stay signed in. It's necessary for the dashboard to work and isn't used for anything else. On the QR print page, your logo position settings are remembered on your own device.

Your choices

• Turn off nearby discovery any time in the editor; your shop then neither shows nor appears in suggestions.
• Download all of your shop's data from your dashboard ("Download my data").
• Ask us to correct or delete your account and data (see "Your rights").

Who helps us run Raay

We use a few trusted providers, only to run the service. They process data on our instructions:

• Supabase: database, login and logo storage (servers in Mumbai, India).
• Vercel: hosting the website. Like any web host, it may keep short-lived technical logs (such as IP addresses) for security and reliability.
• Resend: sending login code emails.
• GoDaddy: our domain name.

Some providers may process data outside India, with appropriate safeguards. We never sell personal data.

How long we keep data

• Shop and account data: while your account is active, and deleted within 30 days after you ask us to close it (payment records may be kept longer where tax law requires).
• Anonymous usage counts: kept with the shop and deleted with it. They can't identify any customer.

Your rights

Under the Digital Personal Data Protection Act, 2023, you can ask to see the personal data we hold about you, correct it, delete it, or raise a complaint. Write to hello@raay.co.in; we aim to reply within 30 days. If you're not satisfied, you can approach the Data Protection Board of India.

Security

Connections use HTTPS, owners log in with one-time codes (no passwords to steal), each owner can only manage their own shop, and database access is restricted. No system is perfectly secure, but we'll tell affected owners promptly if something goes wrong.

Children

Raay is a tool for businesses. Shop accounts are for adults (18+). We don't knowingly collect children's data.

Changes

If we change how Raay handles data, we'll update this page and its date, and tell shop owners about important changes by email. See also our Terms of Service.