Privacy Policy

• Account details: your email address, and your name and profile picture if you sign in with Google.
• Shop details: your boutique name, web address, tagline, contact number and UPI ID.
• Your work: photos, product names, collection names and price ranges you upload to your shop page.
• Order records: customer name and phone number, order description, measurements, reference photos, amounts and dates that you enter yourself.
• Upgrade requests: the payment screenshot you upload when moving to a paid plan.

If you choose “Continue with Google”, Google shares only your basic profile with us — your name, email address and profile picture. We use it to create and identify your account.

We never see your Google password, and we do not request access to your Gmail, Drive, Contacts or any other Google service. You can disconnect Rya at any time from your Google account permissions page.

• To create your account and let you sign back in.
• To publish your shop page at your chosen web address.
• To generate tracking links so your customers can follow their orders.
• To count your monthly usage against your plan's limits.
• To review upgrade requests and activate paid plans.
• To contact you about your account, a payment, or an important service change.

When you log an order, you may enter your customer's name and phone number. That information belongs to you as the shop owner — we store it on your behalf so your ledger and tracking links work. It is visible to you, and the order details are visible to anyone holding that order's private tracking link.

Order tracking pages are never indexed by search engines. Please only share a tracking link with the customer it belongs to.

Public: your shop page — boutique name, tagline, contact button and the portfolio photos, product names and price ranges you upload.

Private: your email address, your order ledger, customer names and phone numbers, amounts, and payment screenshots. Payment screenshots are stored in a private location that is not publicly browsable.

We do not sell, rent or trade your information or your customers' information to anyone. We do not use it for advertising and we do not share it with data brokers.

We use a small number of trusted providers to run Rya:

• Supabase — secure database, file storage and sign-in.
• Cloudflare — hosting, domain routing and security.
• Google — optional sign-in, only if you choose it.

These providers process data only to deliver the service, under their own security and privacy commitments.

Rya keeps a secure sign-in session in your browser so you stay logged in, and briefly remembers your chosen boutique name during signup. We do not use advertising or cross-site tracking cookies.

All traffic to Rya is encrypted. Shop data is protected by database-level rules so one shop owner can never read another shop's orders or customers. No system is perfect, so please use a strong password and keep your login details private.

We keep your shop and order records for as long as your account is open, so your ledger stays complete. If you ask us to delete your account, we remove your shop page, photos and order records, keeping only what we are legally required to.

• Edit or remove your shop details and portfolio photos at any time from your dashboard.
• Delete individual orders from your ledger.
• Ask us to export or permanently delete everything tied to your account.

Rya is built for business owners and is not intended for children under 13. We do not knowingly collect information from them.

If we update this policy, the new date will appear at the top of this page. Significant changes will also be communicated to you by email.