Privacy Policy

1. Introduction

DirayahAI ("we", "us", "our") is committed to protecting your personal data. This Privacy Policy explains what data we collect, how we use it, and your rights regarding that data. By using our Service, you agree to this policy.

2. Data We Collect

We collect the following categories of data:

• Account data: name, email address, company name, mobile number, country.
• Usage data: chatbot interactions, document uploads, API usage metrics.
• Billing data: handled entirely by Paddle — we do not store card details.
• Technical data: IP address, browser type, access logs for security purposes.

3. How We Use Your Data

We use your data to provide and improve the Service, process payments via Paddle, send transactional emails (account notifications, usage alerts), and comply with legal obligations. We do not sell your personal data to third parties.

4. Document Content

Documents you upload are stored securely and used solely to power your chatbot. Document content is processed by third-party AI providers (OpenAI, Anthropic) under their respective data processing agreements. We do not use your document content for any purpose beyond delivering the Service to you.

5. Third-Party Services

We use the following third-party services to operate the platform:

• Paddle — payment processing and subscription management
• OpenAI / Anthropic — AI language model processing
• Railway — cloud infrastructure and database hosting
• Resend — transactional email delivery

6. Data Retention

We retain your account data for as long as your account is active. Upon account deletion, your data is retained for 30 days before permanent deletion. Chat logs and document data are deleted immediately upon domain deletion.

7. Your Rights

You have the right to access, correct, or delete your personal data at any time. To exercise these rights, contact us at contact@dirayahai.com. We will respond within 30 days.

8. Cookies

We use only essential session cookies required for authentication. We do not use tracking or advertising cookies. No cookie consent banner is required.

9. Security

We implement industry-standard security measures including encrypted data transmission (TLS), hashed passwords, and access-controlled infrastructure. No method of transmission over the internet is 100% secure — we cannot guarantee absolute security.

10. Contact

For privacy-related enquiries, contact us at contact@dirayahai.com.