Last updated: April 20, 2026

Rayform is a one-person company at private-beta stage (April 2026). This page is a short, plain-language description of every kind of data we touch today. If anything here changes, the date above changes with it.

1. Data you give us directly

When you submit the waitlist form, your email, phone, role, selected analytics stack, and optional note are stored in our database and sent to vishal@tryrayform.com. We don't use a CRM. We don't enrich it with third-party data. We don't sell or share it. We delete it if you email and ask.

2. Customer analytics data (pilot tenants only)

When a pilot tenant connects Amplitude, Mixpanel, Segment, or PostHog, Rayform reads events through a read-only token. Events are processed inside a per-tenant enclave and never mingle with other tenants. Default retention is 30 days. Events never train shared models. You can revoke the token at any time; we delete derived state within 7 days of revocation.

3. This site

This marketing site runs no analytics, no pixels, no cookies, and no third-party trackers beyond Google Fonts (for typography). Your browser sends a request to fonts.googleapis.com; we receive nothing from that request. The site is served as static HTML/CSS/JS.

4. Security posture

SOC 2 Type I is in progress (target Q4 2026). A pentest report is available on request at beta onboarding. The SDK served to end-users is < 14 KB gzipped, respects CSP, and never exfiltrates DOM content outside declared slots.

5. Contact

Questions: vishal@tryrayform.com. Data deletion requests are processed within 5 business days.