Privacy Policy

Relay CRM ("Relay", "we", "us") is a customer relationship tool for tracking contacts, companies, and correspondence. This policy explains what we collect, why we collect it, and the control you have over it.

1. Information we collect

• Account information — the email address and password you register with, plus any display name, job title, phone number, or avatar you add to your profile.
• CRM records you create or import — contacts, companies, email addresses, phone numbers, job titles, lifecycle stages, lead statuses, labels, custom fields, notes, tasks, and activity history.
• Email correspondence — if you connect a Gmail account, message metadata (sender, recipient, subject, timestamp) and message content associated with your contacts, so Relay can show your correspondence history and calculate follow-up timing.
• Preferences — your default follow-up interval, stale-conversation threshold, default email tone, signature, and notification settings.
• Technical logs — limited request and error logs used to keep the service running and to diagnose problems.

2. How we use your information

• To operate your workspace: storing, displaying, searching, and organizing your contacts, companies, and activity.
• To calculate relationship signals such as who owes the next response and which conversations have gone stale.
• To send you the notifications you enable, such as overdue tasks or new replies.
• To authenticate you and protect accounts from unauthorized access.
• To maintain, secure, and improve the reliability of the service.

We do not sell your personal information, and we do not use your contacts or correspondence for advertising.

3. Google user data and Gmail access

Connecting Gmail is entirely optional and Relay works without it. If you choose to connect it:

• Access is granted through Google OAuth. You approve the permissions on Google's own screen and we never see or store your Google password.
• We request only the access needed to read correspondence involving your contacts and, when you ask, to send email on your behalf.
• Access credentials are stored encrypted and are used only to perform the actions you request inside Relay.
• Relay's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
• We do not sell Google user data, do not transfer it to third parties except as needed to provide the features you use, and do not use it to train generalized artificial intelligence or machine learning models.
• You can disconnect Gmail at any time from Settings, or revoke access directly in your Google Account permissions. Disconnecting stops any further syncing.

4. AI features

Relay includes an assistant and an email drafting helper. When you use them, the relevant context — such as the contact or company you are working with, recent activity, and recent correspondence — is sent to our AI provider to generate a response. That content is used only to produce your result. It is not used to train models, and assistant conversations are not stored after your session ends. If you would rather not send content to an AI provider, simply do not use these features; the rest of Relay is unaffected.

5. Data separation and sharing between users

Each account has its own private records. Database-level security rules restrict every record to its owner, so other users cannot see your contacts, companies, tasks, or correspondence by default.

You may deliberately share your records with another person by inviting their email address in Settings and granting either view-only or edit access. You can review or revoke that access at any time, which immediately removes their ability to see your records. Connected email accounts are never shared — each person connects their own.

6. Service providers

We rely on a small number of providers to run Relay, including hosting and application infrastructure, our managed database and authentication provider, our AI provider for the assistant and drafting features, and Google for optional Gmail access. These providers process data only to deliver their part of the service.

7. Data retention and deletion

We keep your data for as long as your account is active. You can delete individual contacts, companies, notes, and tasks at any time from within the app. If you ask us to close your account, we delete your workspace data, including stored correspondence and any connected-account credentials, other than limited records we are required to keep for legal or security reasons.

8. Security

Data is transmitted over encrypted connections and stored with encryption at rest. Access credentials for connected email accounts are stored encrypted. Access to production systems is limited. No system can be guaranteed perfectly secure, so please use a strong, unique password and tell us promptly if you suspect unauthorized access.

9. Your rights

Depending on where you live, you may have the right to access, correct, export, or delete your personal information, to object to or restrict certain processing, and to withdraw consent for optional features such as Gmail access. Contact us using the details below and we will respond within a reasonable time.

10. Children

Relay is a business tool and is not intended for anyone under 16. We do not knowingly collect information from children.

11. Changes to this policy

We may update this policy as Relay evolves. Material changes will be reflected in the "Last updated" date above, and significant changes will be communicated in the app.

12. Contact

Questions about this policy or about your data can be sent to privacy@relay-crm.app.