Privacy Policy

Relay helps you organize your work across connected tools.

We collect only the information required to provide this service.

We never sell personal data.

Built for trust

We keep the surface area small. Here's everything we collect, and why:

• Authentication information — Account details such as your email and name, used only to sign you in and secure your session.
• Connected services — Metadata about the accounts you connect — provider, scopes, and sync state.
• Workspace metadata — The structure of your channels, projects, and teams so briefings are organized for you.
• AI requests — The content of briefings and questions you ask, processed to generate responses.
• Usage analytics — If enabled, anonymous, aggregated statistics about feature usage that help us improve reliability.
• Device information — Browser and platform details needed to keep the app compatible and secure.

We keep tracking minimal — here's everything we store in your browser, and why:

• Authentication cookies — Session cookies set by Clerk keep you signed in. They are strictly necessary — without them you couldn't log in at all.
• Local storage preferences — Preferences like your theme are saved locally in your browser and used to personalize the app.
• No ad or cross-site tracking — We don't use advertising cookies, tracking pixels, or third-party cross-site trackers of any kind.

Relay connects to your tools the way modern apps should — without ever seeing your password.

• OAuth 2.0 only — Relay connects to your tools using OAuth 2.0. We never see or store your passwords.
• Encrypted tokens — Access tokens are encrypted before storage and scoped to the minimum permissions required.
• Revoke anytime — You can revoke access anytime from Settings — connections stop immediately.

Relay runs on one simple loop — connect, sync, process, deliver — with your data stored in an encrypted PostgreSQL database hosted in the EU or US.

Where your data is stored

Your data is used for one purpose only: making Relay work for you.

• Generate AI briefings — Morning digests assembled from your connected tools.
• Answer user questions — Context-aware answers about your work.
• Perform requested automations — Actions you explicitly ask Relay to take.
• Sync workspace — Keep briefings current across your apps.
• Improve reliability — Anonymized diagnostics that keep Relay stable.
• Prevent abuse — Detect and block unauthorized usage.

• Minimum necessary data — Only the minimum necessary information is sent to AI providers.
• We don't train on your data — Relay never trains models on your content. Note that some AI providers we call run free tiers whose own terms allow prompt retention — see the Terms.
• Minimized before processing — Relay minimizes data before processing.

• Disconnect anytime — Disconnect any integration from Settings — we delete the stored credential and revoke it with the provider where supported. Briefings already generated stay until you delete your account.
• Permanent deletion — Deleting your account removes your data and OAuth tokens immediately. If you share a workspace with others, their workspace data stays — only your membership and personal history go.

Enterprise-grade protections on every layer of the stack — from how you sign in to how your data moves and is stored.

Security architecture

• OAuth 2.0 Authentication — You authorize Relay via OAuth 2.0 — we never see or store your passwords.
• Encrypted Token Storage — Access tokens are encrypted at rest with AES-256-GCM. Encryption keys are never stored alongside your data.
• TLS 1.3 Encryption — All traffic between your devices and Relay is protected with TLS 1.3 in transit.
• Least Privilege Access — Relay requests only the scopes its features actually use. Some are write scopes (send email, create events, post messages) — every write is gated behind an explicit confirmation step.
• Revoke Access Any Time — Disconnect any integration instantly from Settings. Deleting your account clears your stored credentials right away.

Security at a glance

Common questions

• Built on Supabase with row-level security
• Credentials never logged or exposed in plaintext
• We never sell your data. It is shared only with the providers needed to run Relay

Relay connects to the services you choose. Each provider has its own privacy policy — Relay only receives the data required for the features you enable.

• Google Workspace
• Microsoft
• Slack
• ClickUp
• Notion
• GitHub
• Linear
• HubSpot
• Jira
• Zoom
• Discord
• Todoist
• Airtable
• X
• OpenRouter
• Groq
• Supabase
• Clerk
• Vercel

Your data belongs to you — and you can act on that at any time.

• Access your data — Request a copy of everything we hold about you.
• Export your data — Download your data in portable formats (portability).
• Delete your data — Erase your account and data permanently.
• Disconnect integrations — Revoke any connected service instantly.
• Object to processing — Opt out of non-essential processing at any time.
• Request correction — Fix inaccurate information at any time.
• Contact support — Talk to a human about your data, any time.

Relay processes your data on the lawful basis of delivering the service you signed up for, and on your consent where required. For any privacy concern, email relayapphq@gmail.com — we respond to every request within 30 days.

We may update this policy from time to time to reflect changes in our practices, technology, or legal requirements.

If we make material changes, we'll notify you by email or through the app before they take effect. The “Last updated” date at the top of this policy reflects the most recent revision.

Your continued use of Relay after changes take effect constitutes acceptance of the updated policy.

Questions, requests, or anything at all — we answer everything personally.