Privacy Policy
Effective date: 03 March 2026
This Privacy Policy explains how Vayra (“we”, “us”, or “our”) collects, uses, and protects personal information when you use our website and application (the “Service”). This policy is intended to comply with applicable privacy laws in the United Kingdom, European Economic Area (EEA), United States, and other English-speaking jurisdictions.
1. Scope
This Privacy Policy applies to information collected through vayra.pro and the Vayra application. By using the Service, you agree to the collection and use of information in accordance with this policy.
2. Information we collect
Account information
When you register or use the Service, we may collect personal information such as your email address and authentication identifiers.
Workspace and content data
We store data you create or upload in order to provide the Service, including:
- Workspace and team member information
- Client names and associated records
- Activity entries, metrics, notes, and report content
- Generated report snapshots and PDFs
- Brand settings such as colours and uploaded logos
Technical and usage data
We automatically collect limited technical information necessary to operate and secure the Service. This may include IP address, browser type, device information, usage activity, and log data.
Public report links
If you generate public share links, the information contained within those shared reports may be accessible to anyone with the link. You are responsible for ensuring no sensitive personal data is included in publicly shared reports.
3. How we use information
We use collected information to:
- Provide, maintain, and operate the Service
- Generate reports, PDFs, and share links
- Authenticate users and manage workspace access
- Improve performance, reliability, and user experience
- Communicate important updates or respond to inquiries
- Detect and prevent fraud, abuse, or security issues
- Comply with legal obligations
4. Legal bases for processing (UK/EEA)
Where applicable under UK GDPR or EU GDPR, we rely on the following legal bases:
- Performance of a contract (providing the Service)
- Legitimate interests in operating and improving the Service
- Compliance with legal obligations
- Consent, where required
5. How we share information
We do not sell personal data. We may share information only as necessary to operate the Service:
- With infrastructure and hosting providers (such as database, storage, and hosting platforms)
- With service providers that support analytics, security, or communications
- Where required by law or to protect rights, safety, or the Service
- In connection with a merger, acquisition, or asset sale
Brand assets such as uploaded logos are stored securely and served via time-limited signed URLs when needed for report rendering.
6. International data transfers
Your information may be processed in countries outside your own. Where required, we use appropriate safeguards such as contractual protections to ensure personal data remains protected in accordance with applicable laws.
7. Data retention
We retain personal data only as long as necessary to provide the Service and fulfil legitimate business or legal purposes. You may request deletion of your data at any time, subject to legal or operational requirements.
8. Security
We implement appropriate technical and organisational safeguards to protect personal information. However, no system can guarantee absolute security.
9. Your rights
Depending on your location, you may have rights regarding your personal data, including access, correction, deletion, restriction, objection, and data portability. Residents of certain jurisdictions (such as the UK, EEA, and some US states) may have additional rights under local law.
To exercise your rights, contact us at hello@vayra.pro.
10. Children’s privacy
The Service is not intended for children under 16. We do not knowingly collect personal information from children.
11. Changes to this Privacy Policy
We may update this Privacy Policy periodically. Continued use of the Service after updates constitutes acceptance of the revised policy.
12. Contact
For privacy-related questions or requests, contact: