Skip links
RedRays - Your SAP Security Solution

REDRAYS, INC   /   LEGAL

Privacy Policy

Last updated: October 6, 2026

RedRays, Inc (“RedRays”, “we”, “us” or “our”) respects your privacy. This Privacy Policy explains how we collect, use and disclose personal information when you visit redrays.io, contact us, request a demonstration, receive our communications, or interact with us as a customer, partner or supplier.

For these activities, RedRays is responsible for deciding how personal information is used. Information processed through a customer’s deployment of our security products is also addressed in section 6 and in the applicable customer agreement.

1. Information we collect

  • Information you provide: your name, business email address, telephone number, company, job role, and information included in an enquiry, demo request, support ticket or other communication.
  • Business relationship information: contact details, correspondence, product or service interests, contractual details, and billing or transaction records relevant to our relationship with you or your organization.
  • Technical and usage information: IP address, browser and device information, approximate location derived from an IP address, referring pages, pages visited, timestamps and interactions with our website. Cookies and similar technologies may associate these interactions with a browser or device.
  • Information from other sources: business contact information provided by your organization or a partner in connection with an introduction or a service request, and information you make publicly available in a professional context.

Please provide only information relevant to your request. Do not include passwords, private keys, production credentials or unnecessary sensitive personal information in website forms.

2. How and why we use information

We use personal information to:

  • Respond to enquiries, arrange demonstrations and provide requested information.
  • Deliver and support our products and services, administer accounts and licenses, and manage business relationships.
  • Send service communications and relevant product, research or event updates, subject to applicable marketing rules and your choices.
  • Understand website use, improve content and services, and measure the effectiveness of business communications.
  • Protect our website and services, investigate abuse, prevent fraud, maintain records and meet legal obligations.

Where data protection law requires a legal basis, processing depends on the activity: taking steps at your request or performing a contract; our legitimate interests in responding to business enquiries, maintaining relationships, improving services and protecting systems; compliance with legal obligations; or your consent where required, including for certain marketing activities and tracking technologies. You may withdraw consent at any time without affecting processing already carried out lawfully.

Providing enquiry and business contact information is generally voluntary. If information needed to respond to a request or deliver a service is not provided, we may be unable to complete that request.

3. Cookies, analytics and embedded services

Our website uses cookies, scripts and similar technologies for functionality, security, analytics and business communications. These technologies can collect device identifiers, IP addresses and information about how you use the website.

Website services include HubSpot for contact forms and customer relationship tools, business visitor identification tools such as Leadfeeder, website analytics services, and Google services such as reCAPTCHA and embedded maps. Depending on the feature and configuration, these providers may receive information you submit or technical information from your browser. Their own privacy notices may also apply to processing they perform for their own purposes.

You can manage cookies through your browser and use any consent or preference controls offered on the website. Blocking cookies or third-party content may affect forms, maps or other features. Browser controls do not necessarily stop every form of data collection. Contact us if you need information about a particular technology or the choices available to you.

4. Marketing choices

You can stop promotional emails by using the unsubscribe link in a message or by contacting [email protected]. We may still send communications needed to respond to you, administer an existing service or meet legal obligations. Where communications are tailored using your interests or previous interactions, you may object to that use by contacting us.

5. When information is shared

We may disclose information to service providers supporting hosting, website operation, forms, customer relationship management, analytics, communications, technical support and business administration, as needed for the purposes described above. Some embedded service providers may process information under their own privacy policies.

Information may also be disclosed to professional advisers; to authorities or other parties where legally required or necessary to protect rights, safety and security; to a successor in connection with a merger, acquisition or transfer of business, subject to applicable protections; or where you direct or authorize the disclosure.

External websites and services linked from our website have their own privacy practices. Please review their notices before providing information directly to them.

6. RedRays products and customer data

Organizations control the systems, users and data they make available to their RedRays deployment. Security assessments and support materials can contain personal information, such as user identifiers or information included in technical records. Where we process this information on a customer’s behalf, the applicable customer agreement and data processing terms govern that processing. The customer is responsible for its instructions and for the privacy notices it provides to its users.

Integrations, including Microsoft Sentinel, can transmit selected security findings and related metadata to a destination configured by the customer. The exported content, schedule, access and retention depend on the customer’s configuration and the destination service. Microsoft’s terms and privacy information apply to its services.

If your information is managed by an organization using RedRays, contact that organization first about access, correction or deletion. We can assist the customer as required by our agreement and applicable law.

7. International processing

RedRays is based in the United States. Personal information may be processed in the United States and other countries where our service providers operate. Those countries may have different data protection laws. Where applicable law restricts a transfer, the required transfer safeguards must apply, such as an adequacy decision or appropriate contractual protections. Contact us for details about the locations and safeguards relevant to your information.

8. How long information is retained

Retention depends on the purpose and type of information. We consider the time needed to handle an enquiry, the duration of a business relationship, support and security needs, applicable accounting or other legal requirements, limitation periods and the need to resolve disputes. Marketing preference records may need to be retained to respect an opt-out.

Information should be deleted or anonymized when it is no longer needed for these purposes. Information in customer-controlled deployments is subject to the customer’s retention settings and obligations. You may contact us about the retention criteria that apply to a particular record or request deletion, subject to applicable exceptions.

9. Your privacy rights

Depending on where you live and the law that applies, you may have the right to request access to or a copy of your personal information, correction, deletion, restriction of processing or data portability. You may also have the right to object to certain processing, withdraw consent, or opt out of certain disclosures or uses, including targeted advertising where applicable.

To make a request, email [email protected] with the subject “Privacy request”. Describe your request and the relationship you have with RedRays. We may need proportionate information to verify your identity or an authorized representative’s authority. We will respond within the period required by applicable law and explain any applicable exception. You may also complain to the data protection authority responsible for your location.

10. Security

We use technical and organizational measures intended to protect personal information against unauthorized access, alteration, disclosure and loss. No website, transmission method or storage system can guarantee absolute security. Contact us promptly if you believe personal information shared with RedRays has been compromised.

11. Children

Our website and services are intended for business and professional use and are not directed to children under 16. If you believe a child has provided personal information to us, please contact us so that we can review the circumstances and take appropriate action.

12. Changes to this policy

We may update this policy to reflect changes in our services, practices or legal requirements. The date above identifies the latest revision. Where required, we will provide additional notice of material changes or obtain consent before applying a new use of personal information.

13. Contact RedRays

RedRays, Inc
1111B S Governors Ave STE 7629
Dover, DE 19904, United States

Email: [email protected]
Telephone: +1-641-823-24-86