Raytays Rewards privacy notice
Raytays Rewards lets customers sign in to view information from their Square Loyalty profile.
Information used
When you sign in with Google, the website uses your Google account identity, email address, and basic profile information to create and authenticate your website account. If you register with email and password, Supabase handles your credentials and email confirmation. Resend delivers account confirmation and password-reset emails using your email address and the necessary account links. You may also save a display name. Raytays does not receive your Google password.
You can request a one-time verification text to confirm your loyalty phone number. Twilio receives the phone number and checks the code you enter. After successful verification, the website can connect your account to a single matching Square Loyalty profile. Raytays staff can also connect profiles after confirming your identity. The connection allows the website to retrieve your loyalty points, available reward options, and recent loyalty activity from Square. Entering a phone number alone does not grant access to another customer's account.
Square processes purchases and manages loyalty earning and redemption. This website does not collect payment-card details.
Service providers
Raytays uses Google for Google sign-in, Supabase for account authentication and database services, Cloudflare for website hosting, Square for customer and loyalty records, Twilio for requested phone-verification texts, and Resend for account emails. The site also embeds the StreetFoodFinder schedule and loads fonts from Google Fonts; these services receive browser requests when their content loads.
Catering inquiries
When you send a catering inquiry, Raytays uses your name, email address, event date, guest count, event location, and message to respond and discuss your event. Supabase processes the submission and Resend delivers it to the Raytays business mailbox. Cloudflare Turnstile checks for automated abuse and processes browser and network information for that check. Inquiry submissions do not subscribe you to marketing or confirm a booking.
The website stores protected hashes and request times for duplicate prevention and submission limits; it does not store the full inquiry in its database. These protection records are removed after two days when another submission is processed. Inquiry emails remain with the email providers and business mailbox as needed to handle your request and associated business records. Contact Raytays to request deletion.
Browser storage
The website stores sign-in session information in your browser to keep you signed in. Sign out on shared devices. Google, Square, and other linked services have their own privacy notices and settings.
Requests and support
Contact Raytays at ray@raytays.com to request help with your website account, correction of account details, or account deletion. Website-account deletion and Square customer or transaction records are separate requests; deleting one does not automatically delete the other.
Retention
Raytays keeps website accounts and their associated profile information and Square profile links until account deletion is requested. There is no automatic deletion based on inactivity. Square customer, loyalty, and transaction records are managed separately; requesting deletion of a website account does not automatically delete those records.
The website keeps private verification records, including a protected phone-number hash, provider verification identifier, request times, verification status, and attempt counts. It does not store your verification code. Verification texts are for connecting your account, not marketing.