Privacy Policy
Last Updated: December 17, 2025
At RAGReady, we take your privacy seriously. This Privacy Policy explains how we collect, use, and protect your information when you use our document conversion service.
Our Core Privacy Commitment:
We do NOT collect, store, or retain your uploaded documents. Your documents are processed entirely in memory and permanently deleted immediately after conversion.
1. Information We Collect
1.1 Account Information
- Email Address: Required for account creation and service notifications
- Account Credentials: Password (stored encrypted) for authentication
1.2 Payment Information
- Payment Processing: All payment details are processed by Stripe, a PCI Level 1 certified payment processor
- What We Store: We only receive payment confirmation details (transaction ID, amount, timestamp)
- What We Don't Store: We do NOT store credit card numbers, CVV codes, or full payment details
1.3 Usage Metrics
- Number of conversions performed
- File sizes and formats processed
- Conversion timestamps
- Credit usage and balance
1.4 Your Documents
Zero Document Storage Policy:
- Documents are processed entirely in memory (RAM)
- Documents are NEVER written to disk or permanent storage
- Documents are permanently deleted immediately after conversion completes
- We do NOT use your documents for AI training or any other purpose
- We do NOT share your documents with third parties
2. How We Use Your Information
We use the information we collect for the following purposes:
- Service Delivery: To process your document conversions and deliver results
- Account Management: To manage your account, credits, and subscription
- Billing: To process payments and maintain transaction records
- Communication: To send service updates, receipts, and support responses
- Service Improvement: To analyze usage patterns and improve our service (aggregated data only)
3. Data Retention
- Account Information: Retained as long as your account is active
- Transaction Records: Retained for 7 years for tax and legal compliance
- Usage Metrics: Retained in aggregated form for service analytics
- Documents: Deleted immediately after conversion (never retained)
You can request account deletion at any time by contacting contact@ragready.app. Upon deletion, all personal information will be removed from our active systems within 30 days.
4. Cookies & Tracking
4.1 Essential Cookies
We use essential cookies for:
- Authentication and session management
- Security and fraud prevention
- Service functionality
4.2 What We Don't Do
- We do NOT use advertising cookies
- We do NOT track you across other websites
- We do NOT sell your data to third parties
- We do NOT use behavioral tracking for marketing
5. Data Sharing & Third Parties
We share information only in these limited circumstances:
- Stripe: Payment processing (see Stripe Privacy Policy)
- Legal Requirements: When required by law or to protect our legal rights
- Service Providers: Trusted partners who assist in service delivery (under strict confidentiality agreements)
We NEVER sell your personal information or documents to third parties.
6. Data Security
We implement industry-standard security measures to protect your information:
- Encryption: Data in transit is encrypted using TLS/SSL
- Access Controls: Strict access controls and authentication requirements
- In-Memory Processing: Documents processed in RAM without disk writes
- Regular Audits: Security audits and updates to protect against vulnerabilities
7. Your Rights
You have the following rights regarding your personal information:
- Access: Request a copy of your personal information
- Correction: Update or correct your account information
- Deletion: Request deletion of your account and personal data
- Export: Request a machine-readable export of your data
- Opt-Out: Unsubscribe from marketing emails (service emails still required)
To exercise these rights, contact us at contact@ragready.app or manage settings in your account dashboard.
8. Regional Privacy Rights
8.1 GDPR (EU/UK/Swiss Residents)
If you're located in the European Union, United Kingdom, or Switzerland, you have additional rights under GDPR:
- Right to access your personal data
- Right to rectification of inaccurate data
- Right to erasure ("right to be forgotten")
- Right to restrict processing
- Right to data portability
- Right to object to processing
8.2 CCPA (California Residents)
California residents have rights under the California Consumer Privacy Act (CCPA):
- Right to know what personal information is collected
- Right to delete personal information
- Right to opt-out of sale of personal information (we don't sell data)
- Right to non-discrimination for exercising privacy rights
8.3 Other US States
We comply with privacy laws in Virginia, Colorado, Connecticut, and other states with comprehensive privacy legislation.
9. Children's Privacy
RAGReady is not intended for use by individuals under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately.
10. International Data Transfers
Your information may be transferred to and processed in the United States. We ensure adequate safeguards are in place for international data transfers in compliance with applicable privacy laws.
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last Updated" date. Continued use of RAGReady after changes constitutes acceptance of the updated policy.
12. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or your personal information, please contact us:
Your privacy matters to us. We're committed to protecting your data and being transparent about our practices. If you have any questions or concerns, please don't hesitate to reach out.