Your privacy matters. This policy explains what information Rayova collects, why we collect it, how we protect it, and the choices available to you.
Rayova Fintech Corp. ("Rayova," "we," "us," or "our") respects your privacy. This Privacy Policy explains how we collect, use, disclose, retain, and protect personal information when you visit rayova.com and other Rayova webpages that link to this Policy (collectively, the "Site"), communicate with us, request a proposal or demonstration, or otherwise interact with Rayova.
This Policy applies to personal information for which Rayova determines the purposes and means of processing. When Rayova processes personal information on behalf of a client through a website, form, workflow, integration, or other solution, the client generally controls that information and its privacy notice and agreement with Rayova also apply. Questions about information submitted to a client-branded service should normally be directed to that client first.
Depending on how you interact with us, we may collect:
Please do not submit government identifiers, passwords, financial account details, health information, information about children, or other sensitive personal information through a general inquiry form unless Rayova has specifically requested it and provided an appropriate secure method.
When you use the Site, Rayova and its service providers may automatically collect:
We do not ask Google Analytics to receive information that directly identifies you. Do not place personal information in public URLs or query-string parameters, because URLs may be included in analytics, browser history, server logs, and referral data.
We may receive business contact information from your organization, a referral partner, a client, public professional or company sources, event organizers, or service providers you direct to interact with us. We use this information only for reasonable business purposes and subject to applicable law.
We may use personal information to:
We will not use personal information for a new purpose that is materially different from the purposes described here without providing notice and obtaining consent where required.
Rayova collects, uses, and discloses personal information with your consent, except where applicable law permits or requires otherwise. Consent may be express or implied depending on the sensitivity of the information and your reasonable expectations. You may withdraw consent at any time, subject to legal or contractual restrictions and reasonable notice. Withdrawal may prevent us from providing a requested service.
Where European Economic Area or United Kingdom data-protection law applies, our legal bases may include your consent, performance of a contract or steps requested before entering a contract, compliance with a legal obligation, and our legitimate interests in operating and securing our business, responding to business inquiries, improving the Site, and preventing misuse. We balance those interests against your rights and interests.
The Site and embedded services may use cookies, browser storage, or similar technologies that are necessary to provide requested functions, maintain security, remember preferences, or manage restricted access. Disabling essential technologies may prevent parts of the Site from working.
We use Google Analytics 4 (measurement ID G-14QGXC819R) to measure Site use and performance. Google Analytics may collect a pseudonymous client identifier, approximate location, device and browser information, session statistics, and Site interactions. Its first-party cookies may include _ga and a property-specific _ga_* cookie and may remain on your device for up to two years unless you delete them sooner.
Where applicable law requires consent, non-essential analytics will not be activated until you consent through the cookie controls made available on the Site. You may later change your selection through those controls. You may also delete or block cookies through your browser and use the Google Analytics Opt-out Browser Add-on. Google explains its data practices in Google’s Privacy Policy.
Rayova uses Wizara technology to display and process forms and workflow experiences. When you submit a Wizara-powered form, the information is transmitted to the relevant form environment and may be made available to Rayova or the identified client that requested the form. The notice presented with the form, the purpose of the form, and any applicable client privacy policy govern that collection in addition to this Policy. More information is available in the Wizara Privacy Policy.
Rayova may disclose personal information only as reasonably necessary to:
We do not sell or rent personal information. We do not share personal information for cross-context behavioural advertising. We do not knowingly collect or disclose personal information through the Site for the purpose of determining eligibility for credit, employment, housing, insurance, or another decision producing legal or similarly significant effects.
Rayova is a Canadian business. Personal information may be processed in Canada and in other countries where Rayova’s or a service provider’s personnel, systems, or subprocessors operate, including the United States. Information processed in another jurisdiction may be subject to the laws of that jurisdiction and may be accessible to courts, law-enforcement, or national-security authorities where legally permitted.
When required, Rayova uses contractual, organizational, and technical measures intended to provide appropriate protection for cross-border processing. A client contract may require specified data locations or additional transfer safeguards; those requirements apply to the relevant client service.
We retain personal information only for as long as reasonably necessary for the purposes described in this Policy, to meet legal or contractual obligations, to resolve disputes, and to enforce agreements. Unless a different period is required by law, contract, litigation hold, or a documented business need, our target retention periods are:
| Record | Target period |
|---|---|
| General inquiries, demonstration requests, and unsuccessful proposals | Up to 24 months after the last meaningful interaction |
| Client, supplier, contract, billing, and tax records | For the relationship and generally seven years afterward, or longer if law requires |
| Google Analytics event and user-level data | Up to 14 months in Rayova’s analytics property; aggregated reports may be kept longer |
| Routine web and security logs | Generally up to 12 months, unless needed to investigate or document an incident |
| Marketing consent, suppression, and unsubscribe records | As long as reasonably needed to honour preferences and demonstrate compliance |
| Information processed for a client | According to the client agreement, documented instructions, and applicable law |
When information is no longer required, we securely delete it or de-identify it. De-identified or aggregated information that cannot reasonably identify an individual may be retained and used for legitimate business purposes.
Rayova uses administrative, technical, and physical safeguards appropriate to the sensitivity of the information. These may include encryption in transit, access controls, authentication, least-privilege practices, confidentiality obligations, logging, backups, security updates, and provider review. No internet transmission or storage system is completely secure, and we cannot guarantee absolute security.
If a breach of security safeguards creates a real risk of significant harm or otherwise triggers a legal notification duty, Rayova will notify affected individuals and regulators as required by applicable law.
Subject to applicable law and lawful exceptions, you may:
To make a request, contact the Privacy Officer using the details in Section 16. We may need to verify your identity and clarify the scope of your request. We will respond within the period required by applicable law. Access may be limited where disclosure would reveal another person’s information, confidential commercial information, legally privileged material, or where another lawful exception applies.
If European Economic Area or United Kingdom law applies, you may also have rights to erasure, restriction, objection, data portability, withdrawal of consent, and a complaint to your local supervisory authority. If an applicable United States state privacy law covers Rayova, you may also have rights to know, delete, correct, obtain a copy, opt out of covered sale, sharing, targeted advertising, or profiling, and appeal a denied request without discriminatory treatment. Rayova does not sell personal information or share it for cross-context behavioural advertising, so there is no sale or such sharing to opt out of.
If the California Consumer Privacy Act applies to Rayova and your information, the categories described in Section 1—identifiers and contact information, internet or electronic activity, professional or commercial information, and content you submit—describe the personal information Rayova may have collected during the preceding 12 months. Sections 2 and 5 describe the business purposes and categories of recipients. Rayova has not sold those categories or shared them for cross-context behavioural advertising. Rayova does not knowingly sell or share the personal information of anyone under 16.
Rayova sends commercial electronic messages only where permitted by applicable law. Marketing messages identify the sender and include a working unsubscribe method. You may unsubscribe at any time by using the link in the message or contacting us. We will process the request within the legally required period. We may still send non-promotional messages needed to respond to your request, administer an agreement, provide a service, or protect security.
Rayova designs and operates websites, forms, workflows, cloud solutions, and integrations for clients. In those situations, Rayova may act as a service provider or processor and use personal information only to provide the contracted services, follow documented client instructions, maintain security, and meet legal obligations. The client is responsible for giving appropriate notice, establishing lawful authority, responding to individual requests, and determining retention, unless the applicable agreement states otherwise. If you submit information to a client-branded experience, review the client’s privacy notice and contact that client about your rights.
The Site is intended for organizations and adults seeking business services. It is not directed to children under 13, and Rayova does not knowingly collect personal information from children under 13 through the Site. If you believe a child has submitted personal information to Rayova without appropriate consent, contact us so we can investigate and take appropriate action. A separate client service intended for children must have its own age-appropriate notice, consent process, and safeguards.
Rayova does not use information collected through the general Site to make solely automated decisions that produce legal or similarly significant effects about individuals. Rayova may use artificial intelligence or automation to support content, workflows, demonstrations, security, or service delivery, subject to human oversight and applicable contractual and legal requirements. If a client solution uses automated decision-making in a way that requires a specific notice, that notice will be provided with the relevant solution.
The Site links to and may embed websites or services operated by others. Their privacy practices are governed by their own policies, not this Policy. Review those policies before providing personal information. A link or integration does not mean Rayova controls the third party’s privacy or security practices.
We may update this Policy to reflect changes in our services, practices, providers, or legal obligations. We will post the revised version on this page and update the date at the top. If a change materially affects how we use information already collected, we will provide additional notice and obtain consent where required.
Send privacy questions, requests, or complaints to:
Privacy OfficerWe will investigate complaints and take appropriate steps to address substantiated concerns. You may also contact the Office of the Privacy Commissioner of Canada or the privacy regulator in your jurisdiction.
Effective date and last updated: August 19, 2026
2026 © Rayova - All Rights Reserved • Privacy Policy • Terms of Service
