Rayberg
rayberg.ai

Privacy Policy

Last updated: July 2026

1. Controller

The controller responsible for data processing on rayberg.ai is the Rayberg team. Contact: hello@rayberg.ai.

2. What data we process

  • Account data (email, name, profile picture) — managed through Clerk Inc., USA. Legal basis: Art. 6(1)(b) GDPR (performance of a contract).
  • Payment data (cardholder, IBAN, receipts) — processed by Stripe Payments Europe Ltd. We do not store card data ourselves.
  • Prompt & asset data — Your inputs are sent to the respective model providers (OpenAI, fal.ai, Anthropic, ElevenLabs, World Labs, ByteDance Atlas). You will find the list of providers in section 5.
  • Telemetry — server logs (IP, user agent, path) for error analysis, retained for a maximum of 30 days.

3. Retention

Account data: kept until you delete your account or ask us to delete it. Payment receipts: retained for 10 years to comply with statutory tax retention obligations. Generated assets: kept for as long as you keep them in your library — for Free-tier accounts, assets may be removed automatically after 30 days of inactivity.

4. Your rights

You have the right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), and to object (Art. 21) to the processing of your data. Please send requests to hello@rayberg.ai.

5. Third parties

We use the following providers as processors and only transfer data to them as far as necessary to provide the service:

  • Vercel Inc. (USA) — hosting + CDN. DPA: vercel.com/legal/dpa
  • Neon Inc. (USA) — Postgres database (EU region).
  • Clerk Inc. (USA) — authentication.
  • Stripe Payments Europe Ltd. (Ireland) — payments.
  • OpenAI (USA) — GPT Image, Sora 2.
  • Anthropic (USA) — Claude for chat + Director.
  • fal.ai (USA) — certain image + video models.
  • ElevenLabs (USA) — audio + voice synthesis.
  • ByteDance Atlas Cloud (Singapore) — Seedance, Nano Banana, and other models.
  • World Labs (USA) — Marble 3D world reconstruction.
  • Resend Inc. (USA) — transactional emails.

For providers based outside the EU, we rely on Standard Contractual Clauses (Art. 46(2)(c) GDPR) as the safeguard for the transfer.

6. Cookies

We use strictly necessary cookies only (session cookies for the Clerk login and the Stripe checkout session). No tracking, no advertising cookies, and no cookie banner is required.

7. Complaints

You have the right to lodge a complaint with the competent supervisory authority — in the EU, you may contact any data protection authority, such as the supervisory authority at your place of residence.