Privacy Policy
What RelayLine collects, why, and what you can do about it. Last updated October 3, 2026.
Draft for legal review. Not yet in effect.
Two kinds of data
- Customer Data is what firms send to RelayLine: emails they CC or forward, calendar invites, and call transcripts or recaps, including information about their clients. We process it only on the firm’s behalf and under its instructions (we’re the firm’s “processor”). The firm decides what to send and how long to keep it. Questions about it are best sent to the firm; we’ll help them answer.
- Account and website data is information about people who use RelayLine or visit relayline.io: names, work emails, sign-in and security events, billing contacts, and what you send through our contact form. For this we’re responsible (the “controller”).
How we use it
- Customer Data: to score relationship health, find promises and signals, and produce the reports, alerts, and emails a firm turns on. Nothing else.
- Account data: to sign people in and keep accounts secure, bill firms, provide support, and send service and security notices.
- Website data: to answer inquiries and understand how the site is used (Google Analytics through Google Tag Manager on public pages only; never on sign-in or the dashboard).
- We don’t sell personal information, use Customer Data for advertising, or use it to train AI models.
Who processes it for us
- Railway (hosting and databases), Cloudflare (website delivery and protection), Postmark (receiving captured email and sending ours), Anthropic (AI analysis; its commercial terms prohibit training on customer content), Stripe (payments), and, if you configure it, your chosen backup storage provider (backups are encrypted before upload). HubSpot and Slack receive data only if your firm connects them.
- We’ll give advance notice of new subprocessors that handle Customer Data, as described in our DPA.
How long we keep it
- Customer Data: until the firm deletes it, its retention settings remove it, or 30 days after the account closes. Encrypted backups age out within 35 days.
- Security logs: up to one year. Billing records: as long as tax law requires.
Your choices and rights
- You can ask to access, correct, export, or delete your personal information, or object to its use, by writing to [email protected]. If your information is in a firm’s Customer Data, we’ll pass the request to that firm and help them respond.
- Depending on where you live (for example California or the EU/UK), you may have additional rights and can complain to your local data protection authority.
Security and transfers
- See our Security page for how data is protected. Data is stored in the United States; where required, transfers are covered by the safeguards in our DPA.