Privacy Policy

Last updated July 11, 2026

This Privacy Policy explains how Iraya ("Iraya," "we," "us") collects, uses, and shares information when you use the Iraya app. Iraya is currently in early access, available to a small group of invited users. Because the product is still evolving, this policy may change — we'll update the date above when it does. By signing in to or otherwise using Iraya, you agree to the practices described in this policy. If you don't agree, please don't use Iraya.

Questions about this policy, or want to exercise any of the choices below? Email us at hello@iraya.io. We're a small team, so a real person reads and responds to every request — there's no automated self-serve tool for this yet.

What this policy covers

This policy covers the Iraya app and the boards you create in it. It does not cover other websites or services you might reach through a link inside Iraya (their own privacy practices apply there), and it does not cover any employment-related information if you ever apply to work with us.

Information we collect

Account information. When you sign in with Google, we receive and store your name, email address, and profile picture. That's the full extent of what Google shares with us — we don't request access to your contacts, calendar, files, or anything else on your Google account.

Board content. We store what you and your collaborators put into a board: the title, itinerary, budget line items, checklist and to-do items, notes, and any guest or roster entries (which can include a guest's name, email, phone number, RSVP status, dietary needs, and plus-one). If you use the Vendors section, we store whatever vendor contact and cost details you enter. If you use the Reference section or a transport/stay confirmation field, whatever you type there is stored as-is — this can include confirmation codes or document numbers (like a passport, visa, or license number) if you choose to enter one. We don't require, verify, or specially encrypt these fields beyond our normal database security, so we'd rather you know that upfront than store something highly sensitive there by habit.

Conversations with Iraya's AI assistant. When you chat with Iraya to build or edit a board, we store the full conversation, including any images or documents you attach in the chat.

Usage information. We collect basic behavioral data — for example, that a board was created, reopened, or edited, and which kind of edit it was — so we can tell whether Iraya is actually useful and fix what isn't. This is limited to event names, timestamps, and which board/account they relate to; we do not log your board content or free-text chat messages as "usage data," and we don't use third-party advertising trackers, ad pixels, or analytics SDKs (Iraya's usage data stays in our own database, not a third-party analytics platform).

Technical/error information. If something breaks, our error logs can include your browser's user-agent string and the page you were on, to help us diagnose the problem. We do not log your IP address.

What we don't collect. We don't ask for or verify a Social Security number, driver's license, or passport — we have no identity-verification step. We don't collect biometric data. We don't request precise geolocation. We don't process payments or store card/bank details (Iraya doesn't have a payment processor at all today). We don't buy or receive information about you from data brokers, public records, social media, or other companies.

Where this information comes from

• Directly from you — when you sign in, create board content, or chat with Iraya's assistant
• From people you collaborate with — a co-owner or collaborator you invite to a board, or someone who fills out a public RSVP form you've shared, can add information (including about themselves) to that board
• Automatically — basic usage and error data, described above

How we use your information

• To create your account and let you sign in
• To build and update your boards based on what you tell Iraya's AI assistant — this means sending your chat messages and a summary of your board's content to the AI model that powers the assistant (see "How your information is shared" below)
• To let you share a board with collaborators you invite, or via a public link
• To understand how Iraya is used so we can improve it
• To diagnose and fix errors
• To contact you about your account, an invite, or the product, if needed
• To meet legal obligations, if we're ever required to

We do not use your information for advertising, and we do not sell it.

How your information is shared

With people you choose to share with. Board content is visible to anyone you explicitly invite as a collaborator. If you use a public share link, anyone with that link can see the board's content — including, on the Roster/guest-list section specifically, a guest's RSVP status, dietary needs, and plus-one name. A public share link does not expose the board owner's identity, a guest's email or phone number, or any confirmation codes/document numbers stored on the board — those are deliberately left out of what a public link shows.

We share information with the service providers that run Iraya, strictly to operate the product:

• Google — for sign-in
• Supabase — our database, where your account and board data is stored
• Lovable — the platform Iraya is built and hosted on, including the AI gateway that routes your chat messages (and a summary of your board's content) to the AI model that generates Iraya's responses
• Resend — sends collaborator-invite emails on your behalf (just the invite itself, not your board content)

We may also disclose information if required by law (for example, in response to a valid subpoena), or if we believe in good faith it's necessary to protect the safety of you or others, or to investigate fraud.

How long we keep your information

We keep your account and board content for as long as your account or board exists. We keep a history of changes to a board (so edits can be reviewed or undone) as part of normal board history. If you upload a document for Iraya to extract details from, the extracted data is held temporarily (currently 24 hours) while you review and approve it, then either becomes part of your board or is discarded.

Your choices

You can add or remove collaborators, or leave a board yourself, directly in the app. You can ask us to delete your account and its data, or export your board content, at any time by emailing hello@iraya.io — we'll verify it's really you before acting on the request. If you're a resident of a U.S. state with a privacy law that grants rights like access, correction, or deletion of your personal information, the same email gets you there — since we don't sell personal information or use it for cross-context behavioral advertising, the opt-out mechanisms some privacy laws require for those practices don't apply to Iraya.

Security

Your data is stored in a Postgres database with row-level access controls, so only you and the collaborators you invite can see a given board's content. No system is perfectly secure, and we can't guarantee absolute protection — if you believe your account or data has been compromised, email hello@iraya.io right away. Iraya is provided on an "as is" basis, especially during this early access period, with no warranty regarding the security, accuracy, or availability of your information; to the extent allowed by law, we're not liable for indirect, incidental, or consequential harm arising from a security incident. (Our full liability terms are in the Terms of Service.)

Children's privacy

Iraya is not directed at children under 13, and we do not knowingly collect information from them. We don't currently have an age check in the sign-up flow beyond requiring a Google account.

Changes to this policy

If we make material changes to this policy, we'll update the date at the top of this page. Your continued use of Iraya after a change is posted means you accept the updated policy — if you don't agree with a change, your option is to stop using Iraya and ask us to delete your account (see "Your choices" above).

Contact

Questions about this policy or your data? Email hello@iraya.io.