Privacy Policy

1. Information We Collect

We collect and process various categories of personal and usage data, including:

• Account Information: When you register or request enterprise access, we collect your name, corporate email address, and organizational details.
• Connected-Storage & Transient Processing: Under our Connected-Storage model, all document analysis and storage resides directly within your connected service (OneDrive, Google Drive, or SharePoint). When we process a document, it is analyzed transiently in volatile RAM memory. Erayaha.AI retains zero document content or raw analysis files on our servers (only basic, non-PII metadata for usage tracking), ensuring zero data-retention risk.
• Usage Metadata: We collect aggregated, non-PII usage telemetry (e.g. features accessed, timing data, and document type classifications) to improve platform latency and security.
• Device Parameters: Basic telemetry including IP address, browser type, and operating system properties for security audit logging.

2. How We Use Information

We use processed data exclusively to:

• Deliver and optimize our real-time document reasoning services
• Maintain operational platform security and prevent credential abuse
• Comply with strict legal obligations and regulatory standards

3. Connected-Storage & Zero Data Retention Guarantee

We operate on a secure, zero-retention connected-storage architecture:

• Connected-Storage: All CLM analysis storage happens directly in your connected service. Erayaha.AI stores zero document content or raw customer files on its servers.
• Immediate Purge: Any transient text analyzed is completely purged from RAM instantly upon processing completion.
• No Model Training: We strictly NEVER use your uploaded drafts, policies, or proprietary contracts to train or fine-tune our foundational AI models.
• VPC Isolation: Enterprise clients can opt for virtual private sandbox parameters where data never crosses outside your corporate perimeter.

4. Subprocessors

We utilize high-tier, SOC 2 aligned subprocessors such as Vercel and Google Cloud Platform for web routing and infrastructure scaling. All subprocessors are bound by data processing agreements equivalent to our own.

5. Your GDPR & CPRA Rights

If you are residing in the EEA, UK, Switzerland, or California, you are entitled to exercise your full rights including the right of access, rectification, erasure, and portability of your personal account records. To issue any data removal or access requests, contact our Data Protection Officer at:privacy@erayaha.ai.