Privacy Policy

Relay is a universal contact routing platform that allows users to capture contact information once and automatically sync it to connected third-party systems. We are based in the United States and our Service is governed by the laws of the State of Nebraska.

If you have any questions about this Privacy Policy, please contact us at: duron.jonathan27@gmail.com

2.1 Information You Provide Directly

When you create an account or use the Service, we collect:

• Account information: name, email address, password
• Contact data you enter: names, phone numbers, email addresses, company names, job titles, and notes of third-party contacts
• Connected system credentials: OAuth tokens and authorization data for third-party platforms you connect (e.g. KW Command, Google Contacts, HubSpot)
• Payment information: billing name, address, and payment method (processed securely by our payment provider — we do not store full card numbers)
• Communications: messages you send us via support or email

2.2 Information We Collect Automatically

When you use the Service, we automatically collect:

• Device information: device type, operating system, browser type and version
• Usage data: pages visited, features used, actions taken within the app, timestamps
• Log data: IP address, access times, error logs, and referring URLs
• Notification data: whether push notifications were delivered and opened

2.3 Information from Third Parties

When you connect third-party platforms to Relay, we may receive limited information from those platforms necessary to establish and maintain the connection, such as organization IDs, access tokens, and confirmation of successful contact submissions. We do not retrieve or store contact data from your Connected Systems — data flows only from Relay outward.

We use the information we collect to:

• Provide, operate, and maintain the Service
• Route contact data to your Connected Systems as directed by you
• Generate vCard files for download
• Send push notifications related to contact save actions
• Process payments and manage your subscription
• Respond to your support requests and communications
• Improve and develop new features of the Service
• Monitor and analyze usage patterns to improve performance and reliability
• Detect, prevent, and address fraud, abuse, and security issues
• Comply with legal obligations

We do not use your contact data for advertising, profiling, or any purpose other than routing it to the systems you have connected.

4.1 With Connected Systems

When you save a contact in Relay, we transmit that contact data to the third-party platforms you have connected and authorized. You control which systems receive your data through your connector settings.

4.2 With Service Providers

We share information with trusted third-party service providers who assist us in operating the Service, including:

• Cloud hosting and infrastructure providers
• Payment processors
• Email and communication services
• Analytics providers
• Security and fraud prevention services

All service providers are contractually required to handle your data securely and only for the purposes we specify.

4.3 For Legal Reasons

We may disclose your information if we believe in good faith that such disclosure is necessary to:

• Comply with a legal obligation, court order, or government request
• Protect and defend the rights or property of Relay
• Prevent or investigate possible wrongdoing in connection with the Service
• Protect the personal safety of users or the public

4.4 Business Transfers

If Relay is involved in a merger, acquisition, asset sale, or bankruptcy, your information may be transferred as part of that transaction. We will notify you via email or a prominent notice within the Service before your information is transferred and becomes subject to a different privacy policy.

4.5 We Do Not Sell Your Data

We retain your account information and contact data for as long as your account is active or as needed to provide you the Service. Specifically:

• Active accounts: data retained for the duration of your subscription
• Cancelled accounts: data retained for 30 days following cancellation, then permanently deleted
• Deleted contacts: removed from our systems within 30 days of deletion
• OAuth tokens for Connected Systems: retained until you disconnect the integration or delete your account
• Payment records: retained as required by applicable tax and financial regulations

You may request early deletion of your data at any time by contacting us at duron.jonathan27@gmail.com.

We take the security of your data seriously and implement the following measures:

• Encryption of all OAuth tokens and authentication credentials at rest using AES-256 encryption
• Secure transmission of all data using TLS/HTTPS
• Access controls limiting who within our team can access user data
• Regular security reviews and vulnerability assessments
• Secure, environment-isolated storage of API keys and secrets

Despite these measures, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security of your data. In the event of a data breach affecting your personal information, we will notify you in accordance with applicable law.

We use cookies and similar tracking technologies to operate and improve the Service. These include:

• Essential cookies: required for the Service to function, including session management and authentication
• Analytics cookies: help us understand how users interact with the Service so we can improve it
• Preference cookies: remember your settings and preferences

You can control cookies through your browser settings. Disabling certain cookies may affect the functionality of the Service. We do not use cookies to serve advertising.

If you use the Relay mobile application, we may send you push notifications to alert you when a contact is ready to be saved to your device. You can manage push notification preferences through your device settings at any time. Disabling push notifications will not affect your ability to use the core features of the Service.

The Service may contain links to third-party websites or integrate with third-party platforms. This Privacy Policy does not apply to those third-party services. We encourage you to review the privacy policies of any third-party services you connect to or access through Relay. We are not responsible for the privacy practices of third-party platforms.

The Service is not directed to children under the age of 13, and we do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13 without parental consent, we will take steps to delete that information promptly. If you believe we have inadvertently collected information from a child under 13, please contact us at duron.jonathan27@gmail.com.

11.1 All Users

Regardless of your location, you have the right to:

• Access the personal information we hold about you
• Correct inaccurate or incomplete personal information
• Delete your account and associated personal data
• Export your contact data in a portable format
• Withdraw consent for data processing where consent is the legal basis

11.2 California Residents (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including:

• The right to know what personal information we collect, use, share, or sell
• The right to delete personal information we have collected from you
• The right to opt out of the sale of your personal information (note: Relay does not sell personal information)
• The right to non-discrimination for exercising your CCPA rights

To exercise your CCPA rights, please contact us at duron.jonathan27@gmail.com. We will respond within 45 days.

11.3 European Residents (GDPR)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have rights under the General Data Protection Regulation (GDPR), including:

• Right of access: obtain a copy of your personal data
• Right to rectification: correct inaccurate personal data
• Right to erasure: request deletion of your personal data
• Right to restriction: limit how we process your data
• Right to data portability: receive your data in a structured, machine-readable format
• Right to object: object to processing based on legitimate interests
• Right to lodge a complaint with a supervisory authority

Our legal bases for processing your data under GDPR include: performance of a contract (providing the Service), legitimate interests (improving and securing the Service), and your consent (push notifications, optional features).

To exercise your GDPR rights, contact us at duron.jonathan27@gmail.com. We will respond within 30 days.

Relay is based in the United States. If you access the Service from outside the United States, your information may be transferred to and processed in the United States, which may have different data protection laws than your country.

For users in the EEA or UK, we ensure appropriate safeguards are in place for international transfers, including Standard Contractual Clauses where required.

When you enter contact information for other individuals into Relay, you are submitting personal data about those individuals. You represent that you have a lawful basis for processing and transmitting this data, including obtaining any necessary consents from those individuals.

Relay acts as a data processor with respect to the contact information of third parties you submit. You, as the user, are the data controller responsible for ensuring your use of such data complies with applicable privacy laws.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will notify you by:

• Sending an email to the address associated with your account
• Displaying a prominent notice within the Service
• Updating the “Effective Date” at the top of this policy

Your continued use of the Service after any changes to this Privacy Policy constitutes your acceptance of the updated policy. We encourage you to review this policy periodically.

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

We will respond to all privacy-related inquiries within 30 days.