Raylu Privacy Policy

Last updated: July 24, 2026

This Privacy Policy describes how Raylu Inc., 450 Lexington Avenue, New York, NY 10016 ("Raylu," "we," "us") collects, uses, and discloses personal information when you visit raylu.ai (the "Site") or use Raylu's products and services (the "Services").

1. Scope: three roles

We handle personal information in three different capacities, and different rules apply to each.

Raylu as a business (controller). When you visit the Site, communicate with us, attend a demo, or register for an account or trial, Raylu decides how and why your information is processed. This Privacy Policy governs that processing.

Raylu as a service provider (processor). When a customer organization uses the Services and submits or connects data ("Customer Content"), Raylu processes that data on the customer's behalf, as governed by our agreement with that customer. This Privacy Policy does not override those agreements. If your personal information appears in Customer Content and you have questions or requests about it, please contact the organization that submitted it; we will support that organization in responding as required by law.

Raylu as a data provider (controller of professional information). The Services include a database of company and business-professional information (the "Raylu Database") that Raylu compiles from public sources and licensed data providers and makes available to customers. Raylu determines how the Raylu Database is compiled and is the controller of the personal information in it. Section 2 describes what it contains, and Sections 11 and 12 describe your rights — including the right to have your profile removed.

2. Information we collect

Information you provide. Name, email address, phone number, company name and role, and the contents of your communications with us — for example when you request a demo, register for a trial, sign up for updates, or contact us.

Information collected automatically. When you visit the Site or use the Services, we automatically collect usage data such as IP address, browser type and version, device identifiers, pages visited, and the dates, times, and duration of visits, using cookies and similar technologies (see Section 5).

The Raylu Database (information from other sources). To provide company-intelligence services, we collect business-professional information about individuals in their professional capacity — such as name, job title, employer, business contact details (including business email address), professional experience, and links to public professional profiles — together with company-level information. We obtain this information from publicly available sources (such as company websites, press coverage, public registries, and public professional profiles) and from licensed third-party business-data providers. We use it solely to provide business-intelligence, prospecting, and related professional services to our customers. We do not collect sensitive categories of personal information (such as health, biometric, or precise geolocation data) for the Raylu Database, and it is not directed at consumers acting in a personal capacity. If you would like your information removed from the Raylu Database, contact us at privacy@raylu.ai and we will remove it (see Section 11).

What we do not collect. We do not ask you to provide bank account details, government identification documents, dates of birth, or payment card information through the Site. Customer billing is handled through invoicing under our customer agreements.

3. How we use information

We use the information described in Section 2 to provide, maintain, secure, and improve the Site and Services; to create and administer accounts and trials; to respond to inquiries and provide support; to send administrative communications about the Services; to send marketing communications you can opt out of at any time (see Section 6); to understand how the Site and Services are used, including through analytics; to comply with legal obligations and enforce our agreements; and, in connection with a corporate transaction such as a merger, financing, or sale of assets, to evaluate or complete that transaction.

4. How we share information

We share personal information with: service providers that process it on our behalf (such as cloud hosting, analytics, and email providers, listed in Sections 5 and 6), under contracts limiting their use of the information to providing services to us; our affiliates, who are required to honor this Privacy Policy; professional advisors such as lawyers and accountants where necessary; law enforcement or authorities where required by law or where we believe in good faith that disclosure is necessary to comply with a legal obligation, protect our rights or property, prevent or investigate wrongdoing, protect personal safety, or protect against legal liability; parties to a corporate transaction, in connection with or during negotiations of any merger, financing, acquisition, or sale of all or a portion of our business, with notice before your personal information becomes subject to a different privacy policy; and others with your consent.

We do not share personal information with third parties for their own direct marketing purposes.

5. Cookies and analytics

We use cookies and similar technologies (such as web beacons in emails) to operate the Site, remember preferences, authenticate users, and understand usage.

Essential cookies are required for the Site to function. Functionality cookies remember your choices. Analytics cookies help us understand how visitors use the Site.

We use Google Analytics to analyze Site traffic. You can opt out of Google Analytics with the browser add-on at https://tools.google.com/dlpage/gaoptout, and more information about Google's practices is at https://policies.google.com/privacy. We do not use advertising or retargeting pixels on the Site.

You can also instruct your browser to refuse cookies; parts of the Site may not function without essential cookies. Where applicable law requires it, we honor opt-out preference signals such as Global Privacy Control.

6. Email communications

With your consent or as otherwise permitted by law, we may send you marketing emails about Raylu products and events. You can opt out at any time using the unsubscribe link in any marketing email or by contacting us; we will continue to send administrative messages about your account or trial where necessary. We use SendGrid (Twilio) to send email; their privacy policy is available at https://www.twilio.com/en-us/legal/privacy.

7. Sale and sharing of personal information

Site visitors. We do not sell personal information for money, we do not share personal information for cross-context behavioral advertising, and we have not done either in the preceding 12 months. Our analytics provider processes Site data under terms limiting its use to providing services to us. We do not knowingly sell or share the personal information of anyone under 16.

The Raylu Database. We license access to the Raylu Database (Section 2) to business customers for business-intelligence purposes. Depending on how the CCPA's definitions apply, providing that access may constitute a "sale" of the business-professional information in the database. You have the right to opt out of any sale of your personal information and to have your profile removed entirely — contact privacy@raylu.ai or see Section 11.

We do not use or disclose sensitive personal information for purposes requiring a right to limit under California law.

8. Retention

We retain personal information for as long as necessary for the purposes described in this Privacy Policy, to comply with legal obligations, resolve disputes, and enforce agreements. Usage data is generally retained for shorter periods unless needed for security or legal compliance. Customer Content is retained and deleted as provided in our customer agreements (and, for trials, as described in our Terms of Service).

9. Security

We use commercially reasonable administrative, technical, and physical safeguards designed to protect personal information. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

10. International transfers

We are based in the United States, and personal information we collect is processed in the United States and other locations where we or our service providers operate. Where required by law, we use appropriate safeguards for cross-border transfers, such as the European Commission's Standard Contractual Clauses.

11. Your rights

Depending on where you live, you may have rights to access, correct, delete, or receive a copy of your personal information, to object to or restrict certain processing, and to withdraw consent.

European Economic Area / United Kingdom. If you are in the EEA or UK, Raylu is the controller of the personal information described in Section 2, including the Raylu Database (see Section 1 for Customer Content). Our legal bases are: performance of a contract (providing the Site, Services, accounts, and trials); legitimate interests (securing and improving the Site and Services, B2B marketing, analytics, and compiling and providing business-professional information for business-intelligence purposes); consent (where required, e.g., certain cookies and marketing); and legal obligations. Where we rely on legitimate interests to process professional information not collected from you directly (the Raylu Database), this Privacy Policy serves as notice of that processing: the categories collected, sources, and purposes are described in Section 2, and you may object to the processing or request erasure at any time — we will remove your profile on request. You also have the rights of access, rectification, restriction, and portability, the right to withdraw consent at any time, and the right to lodge a complaint with your local data protection authority.

California. If you are a California resident, you have the right to know the categories and specific pieces of personal information we collect, use, and disclose; the right to correct inaccurate information; the right to delete personal information, subject to legal exceptions; the right to opt out of sale or sharing (see Section 7); the right to limit use of sensitive personal information (see Section 7); and the right not to be discriminated against for exercising these rights. In the preceding 12 months we collected the categories described in Section 2: identifiers, professional or employment-related information (Raylu Database), commercial information (records of services considered or obtained), and internet or other network activity, from the sources and for the purposes described above, and disclosed them for business purposes to the service providers described in Sections 4–6. California's Shine the Light law also permits you to request information about disclosure of personal information to third parties for their direct marketing purposes; as stated in Section 4, we do not disclose personal information for that purpose.

Removal from the Raylu Database. Regardless of where you live, if you want your information removed from the Raylu Database, email privacy@raylu.ai with enough information to identify your profile (name, employer, business email). We will remove it and take reasonable steps to prevent re-inclusion.

Exercising your rights. Contact us at privacy@raylu.ai. We may need to verify your identity before responding, and an authorized agent may submit a request on your behalf with proof of authorization. We will respond within the timeframe required by applicable law (45 days in California, extendable once by 45 days with notice). We will not discriminate against you for exercising your rights.

12. Children

The Site and Services are intended for business users and are not directed to anyone under 18. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us personal information, contact us and we will delete it.

13. Third-party links

The Site may link to websites we do not operate. We are not responsible for their content or privacy practices, and we encourage you to review their privacy policies.

14. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. We will post the updated policy on this page with a revised "Last updated" date and, for material changes, provide notice by email or a prominent notice on the Site before the change takes effect.

15. Contact

Questions or requests: privacy@raylu.ai, or Raylu Inc., 450 Lexington Avenue, New York, NY 10016.