Ray

Privacy Policy

Effective date: May 27, 2026

This Privacy Policy describes how Ray ("Ray," "we," "us," or "our") collects, uses, and discloses information when you use raywp.com, rayanalyze.com, and any related services we operate (collectively, the "Services").

Ray is operated by Adam Rosenkoetter and is based in Atlanta, Georgia, USA. You can reach us at adam@raywp.com.

By using the Services, you agree to the practices described here. If you do not agree, please do not use the Services.

1. Information we collect

Information you provide directly. When you contact us, sign up for an account, or use our Services, you may provide your name, email address, business name, billing information, and any other information you choose to share.

Information from Google when you sign in. If you sign in to RayAnalyze using your Google account, we receive your name, email address, profile picture, and a Google OAuth refresh token. The refresh token allows us to access the specific Google Analytics 4 properties you authorize us to read.

Google Analytics 4 data. When you connect a Google Analytics 4 property, we read aggregate analytics data (such as sessions, users, pageviews, traffic sources, device breakdowns, and other metrics) from that property in order to generate the reports and insights you have requested. We do not access personally identifying information about your end users from your GA4 data.

Usage information. We log technical information about how you use the Services, including IP address, browser type, pages viewed, and timestamps, to operate, secure, and improve the Services.

Cookies and similar technologies. We use cookies and similar technologies for authentication, preferences, and analytics. You can control cookies through your browser settings.

Payment information. Subscription payments are processed by Stripe. We do not store full payment card numbers on our servers; Stripe handles payment information in accordance with its own privacy policy and PCI-DSS standards.

2. How we use information

We use the information we collect to:

  • Provide, operate, and maintain the Services;
  • Generate the analytics reports, dashboards, and AI-assisted insights you request;
  • Authenticate you and protect your account;
  • Process payments and manage subscriptions;
  • Communicate with you about the Services, including service notices and support;
  • Improve, troubleshoot, and develop new features;
  • Comply with legal obligations and enforce our terms.

3. Google user data — Limited Use disclosure

RayAnalyze's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

  • We only use Google user data (including Google Analytics 4 data accessed via OAuth) to provide or improve user-facing features that are prominent in RayAnalyze.
  • We do not transfer Google user data to third parties except as necessary to provide or improve user-facing features, and only to service providers acting on our behalf under contractual obligations consistent with this policy.
  • We do not use or transfer Google user data for serving advertisements, including retargeting, personalized advertising, or interest-based advertising.
  • We do not allow humans to read Google user data, unless: (a) we have your affirmative consent for specific messages; (b) it is necessary for security purposes (such as investigating abuse); (c) it is required to comply with applicable law; or (d) the data has been aggregated and anonymized for internal operations.

You can revoke RayAnalyze's access to your Google account at any time by visiting your Google Account permissions page.

4. How we share information

We do not sell your personal information. We share information only in the following limited circumstances:

  • Service providers. We share information with vendors who help us run the Services — including hosting (Vercel), database (Neon / DigitalOcean), payment processing (Stripe), email delivery, error monitoring, and AI processing (Google Gemini). These providers are bound by confidentiality and may only use the information to perform services for us.
  • Legal requirements. We may disclose information when required by law, legal process, or to protect the rights, safety, or property of Ray, our users, or the public.
  • Business transfers. If Ray is involved in a merger, acquisition, or asset sale, your information may be transferred as part of that transaction, subject to the protections of this policy.
  • With your consent. We will share information with third parties when you direct us to.

5. AI processing

RayAnalyze uses third-party AI services (currently Google Gemini) to generate insights from your analytics data. When you request an AI-generated report or use the AI chat, the relevant analytics data and your question are sent to the AI provider for processing. The AI provider processes the data only to return a response and does not use it to train models on customer data per its terms.

6. Data retention

We retain account information and connected analytics metadata for as long as your account is active. You can request deletion of your account and associated data at any time by emailing adam@raywp.com. Some information may be retained for a limited period as required to comply with legal obligations, resolve disputes, or enforce agreements.

When you delete your account or revoke Google access, your stored Google OAuth refresh token is deleted and we lose the ability to read your GA4 data.

7. Data security

We use industry-standard technical and organizational measures to protect your information, including TLS encryption in transit, encrypted storage at rest, and access controls. No system is fully secure, however, and we cannot guarantee the security of information transmitted to or stored on the Services.

8. Your rights

Depending on where you live, you may have rights to access, correct, delete, or port your personal information, or to object to or restrict certain processing. To exercise these rights, email adam@raywp.com. We will respond within the timeframes required by applicable law.

If you are in the European Economic Area or the United Kingdom, you also have the right to lodge a complaint with your local data protection authority.

9. Children

The Services are not directed to children under 13 (or under 16 in the EEA/UK). We do not knowingly collect personal information from children. If you believe a child has provided us information, please contact us so we can delete it.

10. International users

Ray is based in the United States. If you access the Services from outside the U.S., you understand that your information will be transferred to and processed in the U.S., where data protection laws may differ from those in your country.

11. Changes to this policy

We may update this policy from time to time. When we make material changes, we will update the "Effective date" above and, where appropriate, notify you by email or through the Services. Your continued use of the Services after the changes take effect constitutes acceptance of the updated policy.

12. Contact us

Questions about this policy, requests to exercise your rights, or any other privacy-related inquiries should be sent to:

Ray Attn: Adam Rosenkoetter adam@raywp.com Atlanta, Georgia, USA