Privacy Policy

1. Who We Are

Raina is a trust orchestration platform operated by Raina Ventures LLC ("Raina," "we," "us," or "our"). We provide authenticity and verification scoring services for media and content analysis.

2. Data We Collect

We collect different types of information depending on how you interact with our Service:

Account Information

• Registration data: Email address, name, and password (hashed)
• Profile information: Organization name, job title (optional)
• Authentication data: Login timestamps, session tokens, OAuth provider IDs

Payment & Billing Metadata

• Subscription details: Plan type, billing cycle, subscription status
• Transaction records: Invoice IDs, payment dates, amounts
• Note: We do not store full payment card numbers. Payment processing is handled by Stripe.

Usage & Telemetry Data

• Feature usage: Scans performed, features accessed, API calls made
• Performance metrics: Response times, error rates (anonymized)
• Analytics: Page views, session duration, navigation paths (with consent)

Device & Browser Information

• Technical data: Browser type, operating system, screen resolution
• Network data: IP address (for security and fraud prevention)
• Device identifiers: For session management only

Content You Submit

• Scan content: Text, images, URLs, or files you submit for verification
• Analysis results: Trust scores, signals, and verification reports
• Retention: Content is processed and results stored per your retention settings

Support Communications

• Contact form submissions: Name, email, message content
• Support tickets: Issue descriptions, attachments, correspondence history

3. How We Use Your Data

We use your information for the following purposes:

• Service delivery: To provide content verification and trust analysis
• Account management: To create, maintain, and secure your account
• Billing: To process payments and manage subscriptions
• Communication: To respond to inquiries and send service updates
• Improvement: To enhance our Service based on usage patterns (with consent)
• Security: To detect and prevent fraud, abuse, and security threats
• Legal compliance: To meet regulatory and legal obligations

4. Cookies & Tracking

We use cookies and similar technologies to enhance your experience:

Essential Cookies (Always Active)

• Session cookies: Required for authentication and security
• CSRF tokens: Protect against cross-site request forgery
• Preferences: Remember your settings (theme, language)

Analytics Cookies (Opt-in Only)

• PostHog: Product analytics and feature usage tracking
• Purpose: Understand how users interact with our Service
• Control: Disable via cookie banner or browser settings

5. Legal Bases for Processing

We process your data based on the following legal grounds:

• Contract: Account creation, service delivery, and billing (necessary to perform our contract with you)
• Consent: Analytics cookies and marketing communications (you may withdraw consent at any time)
• Legitimate interests: Security, fraud prevention, and service improvement
• Legal obligation: Compliance with applicable laws and regulations

6. Data Sharing & Processors

We share data only as necessary to provide our Service:

Service Providers

• Stripe: Payment processing (PCI-DSS compliant)
• PostHog: Product analytics (with consent only)
• Cloud infrastructure: Hosting and data storage
• AI providers: Content analysis (data processed, not retained by providers)

We do not:

• Sell your personal data to third parties
• Share data for advertising purposes
• Allow processors to use your data for their own purposes

7. Data Retention

We retain your data for as long as necessary to provide our Service:

• Account data: Until you delete your account
• Scan history: Configurable retention period (default: 90 days)
• Billing records: 7 years (legal/tax requirements)
• Support tickets: 2 years after resolution
• Analytics data: 12 months (anonymized thereafter)

You can request earlier deletion of your data at any time (see Your Rights below).

8. Security

We implement industry-standard security measures:

• Encryption: TLS 1.3 for data in transit, AES-256 for data at rest
• Authentication: Secure password hashing (bcrypt), optional 2FA
• Access controls: Role-based permissions, audit logging
• Infrastructure: Deployed on cloud providers that maintain SOC 2 Type II attestation; Raina itself is pursuing SOC 2 Type II attestation (Type I audit in planning, Type II observation window expected to complete 2027). Current status is available from sales on request.
• Monitoring: 24/7 security monitoring and incident response

Compliance posture: Raina references industry frameworks (SOC 2, HIPAA, StateRAMP, FedRAMP) as roadmap targets. Except where explicitly stated as "attested" or "authorized" with a named auditor and date, references describe controls we operate or readiness toward those frameworks, not completed third-party attestations or authorizations.

9. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of your personal data
• Correction: Update inaccurate or incomplete data
• Deletion: Request deletion of your data ("right to be forgotten")
• Export: Receive your data in a portable format
• Restriction: Limit how we process your data
• Objection: Object to processing based on legitimate interests
• Withdraw consent: Revoke consent for analytics at any time

10. International Transfers

Raina is based in the United States. If you access our Service from outside the US, your data may be transferred to and processed in the United States or other countries where our service providers operate.

We ensure appropriate safeguards are in place for international transfers, including Standard Contractual Clauses (SCCs) where required by applicable law.

11. Children's Privacy

Our Service is not directed to children under 16 years of age. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us immediately at support@raina.com and we will delete the information.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy with a new "Last updated" date. For significant changes, we may also send you an email notification. We encourage you to review this policy periodically.

13. Contact Us

If you have questions about this Privacy Policy or how we handle your data: