Legal

Privacy Policy

Effective: 21 September 2026

This policy describes how Rasyn Technologies Private Limited ("Rasyn", "we", "us") handles personal data when you use:

  • rasyn.tech (marketing site)
  • app.rasyn.tech (Rasyn application)
  • benchmark.rasyn.tech and benchpress.rasyn.tech (Benchpress landing site and application)
  • the Rasyn APIs

together, the "Service".

It should be read with the Terms of Service.

We do not sell personal data.

1. Who we are

Rasyn Technologies Private Limited

CIN: U62099DL2025PTC452875

Registered office: New Delhi, Delhi 110068, India

Contact: [email protected] (also [email protected]).

This policy does not claim compliance with the Digital Personal Data Protection Act, 2023. Where that Act applies to you, you may have additional rights under it.

2. Data we collect

Account and billing. Name, work email, password hash (held by our auth provider), organisation name if you give it, plan, credit balance, and payment metadata from Dodo Payments (we do not store full card numbers).

Your documents and outputs. Files you upload, text you submit, job parameters, and the structured outputs, logs, and confidence scores we generate.

Usage and diagnostics. Job timestamps, page counts, feature use, error codes, approximate device/browser data, and IP address. On app.rasyn.tech, and later on benchpress.rasyn.tech, we use PostHog for product analytics and Sentry for error tracking. Those tools receive event names, page paths, account or user identifiers we attach, device/browser data, IP address, and, for Sentry, stack traces and request metadata. We do not intend to send document contents or job outputs to PostHog or Sentry.

Website analytics. On rasyn.tech, benchmark.rasyn.tech and benchpress.rasyn.tech we use Google Analytics, which collects IP address, device/browser data, pages viewed, referrer, and approximate location. See Google's policy. Opt out with the Google Analytics opt-out add-on.

Support. The content of emails you send us.

Auth mail. Supabase sends verification and password-reset mail. Dodo Payments sends payment receipts.

We do not currently run our own marketing-mail system. If that changes, we will update this policy.

3. How we use data

  • create and secure accounts
  • run extraction and Benchpress jobs
  • bill, collect tax records, and prevent abuse
  • debug, secure, and measure the Service
  • send transactional and account email (Section 2 of the Terms)
  • train and evaluate models, unless you opt out (Section 4)
  • comply with law

Legal bases we rely on, where a basis is required: performance of the contract, legitimate interests in operating and improving the Service, and consent where you have a choice (analytics cookies on the marketing sites; training opt-out).

4. Model training

We may use documents you upload, prompts, and outputs generated for you to train and evaluate Rasyn models.

To opt out, email [email protected] from your account email with the subject Training opt-out. The opt-out applies going forward to that account. It does not apply to processing needed to run your jobs, to aggregated or de-identified usage metrics, or to files you send to third-party vendors through Benchpress.

5. Benchpress and other vendors

If you use Benchpress to compare vendors:

  • Rasyn processes the copy we receive under this policy.
  • Each selected vendor processes the copy we send it under that vendor's privacy policy. Those vendors may be outside India and may have different training, retention, and sharing rules.
  • Starting a comparison is your instruction to transmit the selected files to those vendors.

Read the vendor's policy before you send it documents that contain personal data.

6. Processors and locations

We use service providers to run the Service. Current hosting regions:

FunctionProviderRegion
App compute and website hostingDigitalOcean (Droplet, App Platform)Bangalore (BLR1), India
Some serverless functionsSupabaseMumbai (ap-south-1)
AuthenticationSupabaseUS East (us-east-2)
Object storageCloudflare R2Asia-Pacific
GPU inferenceModalUS East
PaymentsDodo Paymentsas operated by Dodo
Website analyticsGoogle Analyticsprocessed by Google, including outside India
Product analyticsPostHogUnited States
Error trackingSentryUnited States

Personal data is therefore processed in India, the United States, and the Asia-Pacific region. By using the Service you instruct us to make those transfers as needed to provide it.

We may also disclose data if required by law, or in connection with a merger, financing, or sale of the company, under confidentiality.

7. Cookies

Necessary. Session and security cookies on the applications. The Service will not work without them.

Analytics and diagnostics. Google Analytics cookies on the marketing sites. PostHog may set cookies or use local storage on app.rasyn.tech and benchpress.rasyn.tech to measure product use. You can block third-party cookies in the browser; that may reduce the quality of analytics but does not stop the applications from running. Sentry does not require a marketing cookie.

8. Retention

DataPeriod
Studio uploads and resultsFree 7 days; Starter 15 days; Plus 30 days; Pro 90 days, then deleted from our storage
API job files24 hours, then deleted from our storage
Account profileWhile the account exists
Billing and tax recordsAs required by law
Support emailAs needed to resolve the request, then as required by law
Product analytics and error eventsper PostHog and Sentry retention on their free tiers; we do not keep a separate identified marketing profile
Marketing-site analyticsper Google Analytics

Deletion from our storage does not apply to copies already sent to a Benchpress vendor.

9. Your requests

Email [email protected] from your account email to:

  • access or correct account data
  • delete your account and stored documents (completed within 30 days, except records we must keep)
  • opt out of training (Section 4)
  • object to marketing if we later send any

There is no self-serve delete control yet. We may need to verify that the request comes from the account holder. We aim to respond within 30 days.

10. Security

We use HTTPS, access controls, and provider-side encryption in transit and at rest where the provider supports it. No method of transmission or storage is fully secure. You must not treat the Service as an archive or as a system of record for original documents.

11. Children

The Service is not directed at anyone under 18. We do not knowingly collect personal data from children. If you believe we have, email [email protected] and we will delete it.

12. Sensitive documents

You may upload documents that contain health, identity, or financial data. You decide whether that is lawful. We process that material to provide the Service. We do not offer HIPAA or analogous sector contracts except under a separate enterprise agreement.

13. Changes

We may update this policy. The effective date at the top will change. For material changes we will email the account address where reasonable. Continued use after the effective date is acceptance.

14. Contact

Rasyn Technologies Private Limited

New Delhi, Delhi 110068, India

CIN: U62099DL2025PTC452875

[email protected] · [email protected] · https://rasyn.tech