Privacy Policy

01Introduction

RaykoLabs Inc. ("RaykoLabs", "we", "our", or "us") builds AI demo and support agents, including an embeddable Voice Agent widget and an AI Demo Agent that run on customer websites. This Privacy Policy explains how we collect, use, store, and protect personal data when you visit raykolabs.com or use our services. We are committed to handling data lawfully, transparently, and with data minimization in mind.

02Who this policy covers

This policy covers visitors to the RaykoLabs marketing site and the customers who sign up for our services. If you are an end-visitor interacting with the RaykoLabs widget or Demo Agent embedded on another company's website, the specifics of what we process on that company's behalf are set out in our Visitor Data Notice. In that case the site owner running the widget is the controller of the data and RaykoLabs acts as their processor.

03Information we collect

• Marketing site forms. When you submit a contact or pricing form we collect your name, email, and company.
• Analytics data. Page views, device and browser information, UTM source, a hashed or truncated IP (we never store raw IP addresses), and pseudonymous visitor and session IDs.
• Product data. When the widget or Demo Agent is used we process chat messages, voice audio, conversation transcripts, and, for demos, a recording of the on-screen session. Voice audio is processed live for speech-to-text and text-to-speech and is not retained; only transcripts are stored. The full breakdown is in the Visitor Data Notice.

04Cookies and analytics

We use cookies and browser storage for attribution, session continuity, and analytics, and we use a small set of analytics tools: Google Analytics (GA4) and Microsoft Clarity on the marketing site, and our self-hosted Rayko Analytics in the EU. Our widget respects the browser's Do-Not-Track signal. A complete list of cookies and storage keys, with their purposes and lifetimes, is published in the Visitor Data Notice.

05How we use your information

• Respond to your contact and pricing inquiries
• Create and manage customer accounts
• Provide, operate, and improve the demo and support agents
• Provide customer support
• Measure and attribute marketing performance
• Meet our legal, security, and contractual obligations

06Service providers and sub-processors

We rely on a small set of trusted providers to deliver our services, including Vercel (hosting), Supabase (database and storage), Hetzner Cloud (self-hosted backend, analytics, and CRM in the EU), Browserbase (demo session recording), Google (Gemini for demo reasoning and voice), and OpenAI (post-call transcript analysis). Each provider is bound by data protection terms and is used only for the stated purpose. The full sub-processor table, including locations and the data each one processes, is in the Visitor Data Notice. When we add or replace a sub-processor, customers under contract receive notice in advance, with a reasonable opportunity to object on data protection grounds.

07Where your data is stored

Core product data, including transcripts, form leads, and recording metadata, is stored in AWS us-east-1 (N. Virginia, United States) via Supabase. Demo session recordings are stored with Browserbase in the United States. Analytics events and CRM lead records run on our self-hosted servers in the Netherlands (EU). Where personal data is transferred outside the European Economic Area or the United Kingdom, we rely on Standard Contractual Clauses with the relevant provider.

08Data retention

We keep personal data only as long as needed for the purpose it was collected. Demo session recordings are kept for 7 days by default and are extendable on customer request. Transcripts, form leads, and analytics events are kept for 12 months. We delete data earlier on request.

09Data sharing

We do not sell or rent your personal data. We share it only with the sub-processors described above, each bound by data protection terms, solely to deliver our services, and where we are required to do so by law.

10Your rights

Depending on your location, you have the right to access, correct, delete, or receive a copy of your personal data, to object to or restrict certain processing, and to withdraw consent at any time. To exercise these rights, contact us at contact@raykolabs.com. If your data was collected through the widget or demo on another company's site, please raise the request with that site owner; we will assist them in responding.

11Data security

We apply appropriate technical and organizational measures to protect personal data against unauthorized access, alteration, disclosure, or destruction. Raw IP addresses are hashed or truncated at the point of collection, identifiers are pseudonymous, and access to production data is restricted.

12Changes to this policy

We may update this Privacy Policy from time to time. We will post the revised version on this page and update the "Last updated" date above. Material changes affecting customers under contract will be notified in advance.

13Contact

Questions about this Privacy Policy or our data practices can be sent to Aayush Verma at contact@raykolabs.com.