Privacy Policy

Last updated 2026-07-06

Controller

Ray AI Inc., a company registered in the State of Delaware, USA

251 Little Falls Drive, Wilmington, DE 19808, New Castle County, Delaware, USA

Data protection officer (external): Martin Bastius, heyData GmbH, datenschutz@heydata.eu, +49 89 41325320

What we process

(a) Email address, on key signup. Purpose: issuing and managing your API key, and contacting you about the service. Legal basis: Art. 6(1)(b) GDPR (performance of a contract you request by signing up for a key). Retention: until you request deletion of your key.

(b) IP addresses. Purpose: rate limiting and abuse prevention. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in preventing abuse of a free, unauthenticated service). What we retain, and for how long:

Signup log: your IP address is recorded when you sign up for a key (persisted, used to enforce a per-IP daily signup limit). IP addresses from signups are kept for 90 days for abuse prevention, then deleted.
API usage counters: keyed by IP/key, pruned after 24 hours.
Teaser rate limiter: the public teaser endpoint keeps IP hit-counts in memory only (never written to disk, cleared on process restart).
Suspected-bot signups: signup attempts that trigger our anti-bot honeypot are logged to the server's error output, including the IP address; these log lines are subject to the same 90-day handling as our server logs.

(c) API request metadata. Key-linked request timestamps, retained 24 hours to enforce your key's rate limit, then deleted.

We use no cookies, run no analytics, make no third-party requests from any page (including fonts, which are self-hosted), do not use your data for marketing, and do not sell personal data.

Hosting

This service is hosted by Hetzner Online GmbH, a Germany-based hosting provider, on a server located in Ashburn, Virginia, United States. We have a Data Processing Agreement with Hetzner in place per Art. 28 GDPR.

The funding-round dataset

The company and funding-round information in our dataset is compiled from public press coverage. Founder names and public LinkedIn profile URLs are likewise collected from publicly available sources. We process this data under the legitimate-interest basis of Art. 6(1)(f) GDPR: compiling publicly available, professional (not private) information about business events and the people involved in them. If you are a founder or other individual named in our dataset and want your information removed or corrected, contact privacy@getray.ai.

Your rights

Under the GDPR, you have the right to: access the personal data we hold about you; rectification of inaccurate data; erasure of your data; restriction of processing; object to processing; data portability; and to lodge a complaint with a supervisory authority. To exercise any of these rights, contact privacy@getray.ai.