How Roya handles your data
Version 0.6 · 28 September 2026
This page describes what we actually do today, in plain English. Roya is a product. Your material is handled by software, not by someone reading it at a desk.
What this page is
A description of how your information is handled. The agreement between us is the terms of service you accept when you create your space, together with this page. If you also have a signed engagement agreement with us, that agreement comes first where they differ.
What we hold
What you tell us when you start. Your company name, the country you operate in, and your one line description of what the company does. These exist so the research lands on your company and not one with a similar name.
What you upload. The documents you choose to share. Nothing is taken automatically. You decide what to send, and you can remove any file yourself at any time.
What you say in a session. Sessions with Rayi are recorded and transcribed. We keep the transcript. The audio is handled by our voice provider during the session, and a recording may be kept.
What we find in public. Your website, filings, news and other public sources, gathered into a short brief so the first conversation does not start from nothing.
How you use the product. The name and work email on the account you sign in with, which files were uploaded and by whom, and a record of access to shared session links. That record keeps a one way scramble of the network address rather than the address itself, because the point is to notice something unusual, not to know where you were sitting.
Who and what can see it
- The system. Your material is processed automatically. That is what produces the research, the conversation, the minutes and the work itself.
- Your team. People you invite into your space see the same sessions and documents you do.
- Your own space only. Every client sits in a separate space. No other client can reach your space, and no sign-in of theirs can be made to.
- People at Roya, only when you allow it. A person at Roya cannot open your documents, your files or your rooms because of who they are. They ask, in their own words, and you decide. If you say yes, they can open your work from then on, and you can take that back at any moment. Every time anyone opens anything it is written down where you can read it, and we cannot edit that list. You can see all of it, answer anyone waiting, and take back anything you allowed, on who can see your work.
- The one door we have not shut. Someone holding the keys to our database could read your material without passing through any of that. We are closing it with named accounts and no standing access to live data, and until that is done we would rather write it here than let you believe otherwise.
- The companies we run on. Listed below, under their own contracts, and only to provide their part of the service.
Nobody else, unless you ask us to share it.
The companies we use, and where your data is processed
Roya is a Saudi business, and some of the tools we run on process data outside the Kingdom. We would rather say that plainly than imply otherwise.
| Company | What it does for you | Where it processes data |
|---|---|---|
| Supabase | The database, the file storage and sign in | India |
| Vercel | Runs the product itself | India, behind a global network |
| OpenAI | The models that read your material, write the work and think for Rayi in a session | United States |
| Hakim | Rayi's hearing and voice in a live session | Germany |
| LiveKit | Carries the live audio of a session | Global network, closest region to you |
| Railway | Runs the part of Rayi that joins a live session | Netherlands |
| Sign in with your work account | Global | |
| ElevenLabs | Standby voice. Not in use today, kept in case we need to switch back | United States |
| Sentry | Tells us when something breaks. It receives the kind of error and where in our code it happened. No names, no content, none of your words | Germany |
| PostHog | Counts how the product is used, such as how many sessions were opened. It receives no names, no content and none of your words, and nothing is stored on your device | Germany |
We update this page before we add a new company to that list.
Training
We do not use your documents, your words or your figures to train AI models. We do not sell them, and we do not share them so that anyone else can train on them. We require the same of the companies above, and where one of them offers a training setting, it is switched off on our account.
What Roya keeps for itself
We want to be straight about this, because it is part of how the product works.
You own your material. Your documents, your words and your figures remain yours, and the work produced for you is yours.
What we keep for ourselves is what the system learns about how to do the work: patterns, methods, and the shape of problems we have seen before. This is anonymised. It never includes your name, your documents, your figures, or anything that could identify you or your company, and it stays with us after you leave. It is what makes the next piece of work sharper than the last.
If your situation calls for a narrower arrangement, tell us before you start and we will write it into your agreement.
How long we keep it
While you are working with us, we keep what the work needs.
After that, we keep your raw material for up to 24 months and then remove it. We keep it that long because clients come back, and picking up an old thread is worth far more when the record is still there. The anonymised learning described above is not covered by that removal.
You can shorten this. Ask us to delete everything and we will, apart from anything we are required by law to keep.
What deleting everything reaches. Your files, your documents and your records go from our own storage and our database, and we delete what our providers hold on our behalf, including the recording and the transcript of your live sessions. The anonymised learning described above is not part of it, because by then it cannot be traced back to you.
What you can do
- Remove any file yourself, at any time, from the documents screen. It goes from our storage as well as from the list.
- Ask for a copy of what we hold about you.
- Ask us to correct something that is wrong.
- Ask us to delete everything.
- Decline the recording of a session, or stop one partway.
- Ask questions about any of this and get a straight answer.
How your material is protected
- Files sit in private storage that is not reachable from the public internet.
- Each client's data is separated at the database level, so a mistake in the application cannot show your material to another client.
- Data is encrypted while it travels and while it is stored.
- Access to shared session links is logged, and those links expire.
- Our credentials are held in a credential store, never in code or in messages.
Please do not send more personal data than the work needs
Most of what we ask for is about your company, not about people. If a document carries personal details about employees or customers that the work does not need, take them out first, or tell us so we can handle it properly.
If something goes wrong
If your data is exposed in a way it should not have been, we will tell you without undue delay, tell you what happened and what we are doing about it, and meet our obligations under the Saudi Personal Data Protection Law.
Changes to this page
We update this page when what we do changes, and always before a new provider starts handling your data. The version and date at the top tell you which one you are reading. Where a change materially affects you, we will tell you rather than quietly change the page.
Contact
For anything on this page, including a request to see, correct or delete what we hold. If you have a named contact at Roya, they can help too.
Version 0.6 · 28 September 2026