This policy applies to the public website raysys.app, the app.raysys.app portal and RaySys cloud services. A customer-managed local installation may also be subject to that customer's policies as the controller of its operational data.
1. Who handles the information
RaySys provides business management, point-of-sale, inventory, billing and related software. For privacy questions or requests concerning your personal data, write to [email protected].
2. Information we collect
Account and identity
- Display name, email address, username and account status.
- Companies you may access, invitations and membership links.
- Access records, sign-in dates and security controls.
Sign-in with Google or Microsoft
If you choose an external provider, RaySys requests only the basic openid, email and profile permissions. We receive the stable identifier assigned by the provider, your email address, email verification and, when available, your display name.
We do not request access to Gmail, Google Drive, contacts, calendars or files. We also do not store Google or Microsoft access tokens or refresh tokens.
RaySys's use and transfer of information received from Google APIs complies with the Google API Services User Data Policy , including its Limited Use requirements.
Operational and support data
- Information the customer enters into its business databases.
- Support messages, commercial requests and related communications.
- Technical data needed for security, diagnostics and abuse prevention, such as IP address, browser, device and error events.
3. How we use information
- Create and protect accounts, authenticate users and maintain sessions.
- Display authorized companies and enforce their access policies.
- Provide, maintain, diagnose and improve contracted services.
- Send invitations, security notices and requested communications.
- Prevent fraud, unauthorized access and use contrary to these terms.
- Meet legal obligations and respond to valid requests from authorities.
Information obtained from Google is used only to identify you, authenticate you and link your RaySys account when you authorize it. We do not sell this data or use it for personalized advertising.
4. When we share information
We do not sell personal information. We may share it only:
- With providers that operate infrastructure, email, security or support under RaySys instructions and with access limited to their function.
- With the organization that administers the company to which you belong, within its legitimate administrative authority.
- When required by law, court order or a valid official request.
- To protect rights, security or service continuity, or to investigate abuse.
- As part of a business reorganization, with reasonable confidentiality and continuity safeguards.
5. Retention
We retain information while the account or service relationship remains active and for the additional period needed for security, backups, dispute resolution and legal obligations. Retention periods may vary by data type, contract and the tax or accounting requirements applicable to the customer.
6. Security and location
We apply reasonable technical and organizational controls, including transport encryption, identity separation, permissions, event logging and secret protection. No Internet-connected system can guarantee zero risk.
Infrastructure providers may process information outside the country where it originated. In those cases, we seek to use established providers and appropriate measures to protect it.
7. Your choices and rights
You may request access, correction, updating, objection or deletion of personal information, subject to applicable legal and contractual obligations. You may also disconnect Google or Microsoft from your RaySys account security settings when that option is available.
To process a request, we may ask for reasonable information confirming your identity and relationship with the relevant organization.
8. Cookies and local storage
RaySys uses cookies and browser storage that are strictly necessary for authentication, security, language preference, company selection and session continuity. We do not use these technologies to sell profiles or for third-party behavioral advertising.
9. Children
RaySys is a business product and is not directed to children. If you believe we received information from a child without appropriate authorization, contact us so that we may investigate.
10. Changes and contact
We may update this policy to reflect service changes, legal requirements or security measures. We will publish the effective version date and, when a change is material, seek to provide notice through an appropriate channel.
Privacy questions: [email protected].