1. Scope
This policy applies to Raysly, provided by Luxa Energy LTD, including your authorised users, your storefront(s), your integrations and any automated access to the service. It forms part of your agreement under the Business Terms of Service, and it grants no access to a feature outside your subscribed plan.
2. Lawful business use
Do not use the service to infringe privacy, intellectual property or other rights, to facilitate fraud, to unlawfully discriminate, or to enable unlawful activity. Obtain all permissions required for the communications you send, the material you upload, and the processing you initiate through the service.
Do not misrepresent an offer, an installation, a price, a grant, subsidy or financing figure, or a financial outcome to a customer. Review estimates, calculator output and any assisted-generation content before presenting it to a customer as verified.
3. Outreach, messaging and lead handling
- Lawful communications. Follow applicable direct-marketing and electronic-communications law (including ePrivacy/PECR-derived consent and soft-opt-in rules in your customers' jurisdictions) for every email, SMS or call you send through the service. Some countries require prior consent even for marketing to businesses: in Switzerland, for example, mass advertising by email or SMS needs the recipient's prior consent (UWG Art. 3(1)(o)), and breach can be prosecuted on complaint. Do not send bulk marketing through the service to recipients who have not consented where such a rule applies. Every marketing message must include a working unsubscribe or opt-out mechanism, and you must honour an opt-out or do-not-contact request promptly.
- Sender identification. Identify your business accurately in outreach. Do not falsify sender names, phone numbers, email headers or business registration details.
- Leads assigned to you. Use a lead assigned to you (whether from your own storefront or from the Comparisun marketplace) only to respond to that person's enquiry and to provide the service or product they asked about. Do not resell, transfer or share an assigned lead's personal data with another business without the customer's consent, and do not use a marketplace-assigned lead to build a general marketing list beyond what the customer consented to.
- Objections and deletion. Honour a customer's objection to processing or request for deletion in relation to their own lead or account data, to the extent it is within your control as controller of your storefront (see the Business Terms of Service, Section 6-7), and tell us at support@raysly.com if you need our assistance to action a request that touches data we process on your behalf.
- Retention. Do not retain a customer's lead data for longer than necessary for the purpose for which it was collected or than applicable law requires; align your own retention practice with the retention information in your storefront's Privacy Notice.
4. Storefront and customer-facing content
Content on your storefront, and any customer-facing material you publish through the service, must:
- accurately identify your business as the trader the customer is contracting with;
- not make a savings, payback, return-on-investment, grant or subsidy claim you cannot substantiate with a real, current, officially-sourced figure — no invented, estimated-as-if-verified, or "provisional" financial figures presented as fact;
- not use content, images or claims that infringe a third party's rights;
- comply with any platform-locked checkout, refund or price-disclosure text (you may not alter or obscure it);
- where you enable optional analytics or marketing tags on your storefront, only do so consistently with the consent state your storefront's cookie banner records — do not fire a tag before the required consent is given in a jurisdiction where consent is required.
5. Security
Do not attempt unauthorised access to another business's account, tenant, data or system through the service. Do not introduce malicious code, attempt to extract credentials, bypass access controls, or intentionally disrupt the service, including through automation that evades agreed rate or usage limits.
Security research. This policy does not authorise penetration testing, vulnerability scanning, access to another customer's data, or disruption of live systems. If you want to conduct authorised security testing of your own account or storefront, request written permission and scope from support@raysly.com first; testing outside an agreed scope is a breach of this policy regardless of intent. Report a security concern you discover, whether in scope or not, to support@raysly.com.
6. Third-party platforms and integrations
Where you connect a third-party integration through the service (for example, social media publishing, accounting, calendar or storage), you must also comply with that third party's own terms and policies. For social media publishing specifically, comply with the connected platform's content, automation and API usage policies; a breach of the connected platform's terms that puts our own integration credentials or access at risk is also a breach of this policy.
7. Assisted-generation features
Where the service offers assisted generation or automated document parsing (for example, extraction of data from an uploaded competitor offer), you must review the output for accuracy before relying on it or presenting it to a customer as verified. Do not use an assisted-generation feature to produce content intended to deceive a customer.
8. Restricted and sensitive data
Do not submit special-category personal data (health, biometric, criminal-record or similarly sensitive information) or other regulated data categories through the service unless the relevant feature is designed and documented for that purpose. National ID card and passport numbers are not, by themselves, a GDPR special category, but are subject to national-law conditions in some countries (Art. 87 GDPR) — see the Privacy Notice and Data Processing Agreement for how these are handled where a checkout asks for identity documents (for example, in Cyprus).
9. Reporting and enforcement
Report suspected misuse of the service, by another customer or by anyone else, to support@raysly.com with enough detail to identify the issue, without including more personal or confidential data than necessary to describe it.
Except where the risk is urgent, we will tell you why before restricting your access for a suspected breach of this policy and give you a reasonable opportunity to respond; you can ask us to review a restriction by writing to support@raysly.com. Suspension and termination for breach of this policy remain governed by the Business Terms of Service, Section 11; this policy does not itself create unlimited discretion to disable your access or delete your content.
10. Changes
Changes to this policy follow the amendment process in the Business Terms of Service, Section 16. A material change identifies what changed and when it takes effect. Previous applicable versions remain available on request.
Document scope: Cyprus, Switzerland, United Kingdom.