Privacy Policy

1. Who we are

ENRAY operates enray.org, a business directory and events platform for Kerala, India. Postal address: EKP Arcade, Kondotty, Malappuram, Kerala 673638, India. Data questions: [email protected].

2. Data we collect

• Account data — name, email, password (stored as a secure hash), optional phone and city.
• Listing data — business details you submit: name, address, phone, email, website, photos.
• Claims data — ownership proof references (e.g. GST/PAN number) used solely for verification.
• Event & booking data — event details; attendee name, email, phone and ticket quantity for bookings.
• Payment data — order amount, plan, and payment status. Card/UPI details are handled entirely by Cashfree; we never see or store them.
• Usage data — standard server logs (IP address, pages visited, browser type) for security and performance.

3. How we use your data

• To operate the directory, events, reviews, and claims features;
• To process payments and issue invoices;
• To send transactional emails (welcome, listing approval, booking confirmations, payment receipts);
• To verify business ownership claims;
• To prevent fraud and abuse, and to comply with legal obligations.

We do not sell your personal data to anyone.

4. What is public

Business listings (including business contact details), events, and reviews (with your first name and avatar) are public by design — that is the purpose of a directory. Your account email, password, and claim documents are never public.

5. Third-party services

• Cashfree Payments — payment processing (PCI-DSS Level 1 certified);
• Google Maps — map display on the map view and business pages;
• Cloudflare — content delivery and security;
• Google Sign-In — optional social login.

Each processes data under its own privacy policy.

6. Cookies & local storage

We use minimal browser storage: a login token (so you stay signed in) and Cloudflare's security cookies. We do not run third-party advertising trackers.

7. Data retention & security

Account and listing data are kept while your account is active. Payment records are retained as required by Indian tax law. Data is transmitted over HTTPS and passwords are stored using bcrypt hashing. No system is 100% secure, but we take reasonable technical measures to protect your data.

8. Your rights

You may access and update your profile and listing at any time from your dashboard. To delete your account or request a copy or erasure of your data, email [email protected] — we respond within 7 working days.

9. Children

The Service is not directed at children under 18, and we do not knowingly collect their data.

10. Changes

We may update this policy from time to time; the “Last updated” date above reflects the current version. Material changes will be highlighted on this page.