Privacy Policy

This Privacy Policy explains how RayAI ("we", "us", "our") collects, uses, stores, and shares your information when you use the Service. It is written to align with the general principles of the Philippine Data Privacy Act of 2012 (RA 10173). If you access the Service from outside the Philippines, you understand your data will be processed in the Philippines and by the third-party providers listed below, which may be located in other countries.

1. Information We Collect

Account information: email address and authentication credentials (managed via Supabase Auth).

Profile & resume data: full name, phone number, target roles, skills, employment history, education, resume text, summary, salary expectations, LinkedIn/portfolio links, and any resume file you upload or paste.

Application activity: jobs you save or apply to, generated cover letters, application status, and recipient email addresses you enter for the email-submitter feature.

Billing information: your selected plan, billing cycle, and payment reference numbers. GCash/Maya QR payment details are collected and processed directly by PayMongo - RayAI never stores your GCash or Maya credentials.

Usage data: feature usage counters (e.g., free-tier tailoring/cover-letter/interview limits) needed to enforce plan limits.

2. How We Use Your Information

• To provide the Service: authenticate you, store your profile, and generate tailored resumes, cover letters, match scores, and interview coaching content.
• To process payments and manage your subscription plan.
• To send application emails on your behalf when you use the email-submitter feature (via Gmail).
• To enforce plan limits and prevent abuse of the Service.
• To communicate with you about your account, service updates, or support requests.
• To improve the Service, including diagnosing errors and understanding feature usage in aggregate.

We do not sell your personal information to third parties.

3. AI Processing

When you request a tailored resume, cover letter, match score, or interview coaching content, relevant parts of your profile and the job description are sent to Google's AI API to generate that content. This processing is necessary to provide the feature you requested. Review Google's AI API terms for how Google handles data submitted to its API.

4. Third-Party Service Providers

We share information with the following providers strictly to operate the Service:

• Supabase - database, file storage, and authentication.
• Google AI - AI-generated resumes, cover letters, match scoring, and interview content.
• PayMongo - payment processing for Pro/Premium subscriptions via GCash/Maya QR code.
• Gmail / SMTP - sending job application emails you initiate through the Service.

We do not share your information with advertisers or data brokers. We may disclose information if required by law, to enforce our Terms, or to protect the rights, property, or safety of RayAI, our users, or others.

5. Data Retention

We retain your account and profile data for as long as your account is active. If you delete your account, we delete or anonymize your personal data within a reasonable period, except where retention is required for legal, billing, or fraud-prevention purposes.

6. Your Rights

Subject to applicable law, you may:

• Access, correct, or update your profile information directly from Settings.
• Request a copy of your data or request deletion of your account by contacting us.
• Withdraw consent for optional processing (e.g., stop using AI features) at any time - this may limit functionality.

7. Data Security

We use industry-standard measures to protect your data, including encrypted connections (HTTPS), Supabase Row Level Security so your data is only accessible to your own account, and database-level protections preventing client-side tampering with subscription/plan fields. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

8. Cookies & Local Storage

RayAI uses essential cookies for authentication (managed by Supabase Auth) and browser local storage for non-sensitive UI preferences. We do not use third-party advertising or tracking cookies.

9. Children's Privacy

The Service is not directed at individuals under 18. We do not knowingly collect information from children. If you believe a child has provided us information, contact us and we will delete it.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Last updated" date above. Continued use of the Service after changes take effect constitutes acceptance of the revised policy.

11. Contact

For privacy questions, data access, or deletion requests, contact raymart.leyson.rl@gmail.com.