Privacy Policy

This Privacy Policy explains how [Relay — your registered legal entity] (“Relay,” “we,” “us”) collects, uses, shares, and protects information when you use the Relay application and related services (the “Service”). Relay is a WhatsApp CRM that uses AI to help businesses reply to their customers.

Information we collect

• Account information. Your name and email address, provided through Firebase Authentication when you register or sign in with Google.
• Workspace & billing data. Your workspace settings, subscription tier, and payment status. Payments are processed by our payment provider (iPaymu); we do not store your card or bank details.
• WhatsApp conversation data. When you connect a WhatsApp number, we process the messages, contact names, and phone numbers exchanged through that number so the Service can display conversations and generate AI replies.
• Knowledge base content. Documents and text you upload to train your AI agent.
• Google Workspace data (optional). If you connect Google tools (Gmail, Sheets, Docs, Drive), we access only the data covered by the scopes you approve, and only to perform actions you or your AI agent request.
• Usage & technical data. Log data such as timestamps, IP addresses, and error diagnostics needed to operate and secure the Service.

How we use information

• To provide, operate, and maintain the Service, including generating AI replies and routing conversations.
• To authenticate you and secure your workspace.
• To process subscriptions and enforce plan limits.
• To communicate with you about your account and important changes.
• To detect, prevent, and address abuse, security incidents, and technical issues.

Google user data

Relay's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We only request the scopes needed for features you enable, we do not use Google Workspace data for advertising, and we do not sell it or transfer it to third parties except as needed to provide the Service, comply with law, or with your consent. You can revoke Relay's access at any time from your Google Account permissions.

Sub-processors & sharing

We share data with service providers who process it on our behalf, under contract, solely to run the Service:

• Google Firebase — authentication.
• OpenRouter / OpenAI — generating AI replies and embeddings from your conversation and knowledge-base content.
• LlamaCloud — parsing documents you upload.
• iPaymu — payment processing.
• Amazon Web Services — cloud hosting and storage.

Connecting WhatsApp relies on an unofficial WhatsApp gateway; message data necessarily transits WhatsApp's systems, which are governed by WhatsApp's own policies. We do not sell your personal data.

Data retention & deletion

We retain your data for as long as your workspace is active. Deleting your workspace from Settings removes your tenant data, including conversations and knowledge base content, and deletes your authentication record. Backups and logs may persist for a limited period before being overwritten.

Security

We use industry-standard measures to protect your data, including encryption in transit and encryption of stored OAuth tokens. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Your rights

Depending on your location, you may have rights to access, correct, export, or delete your personal data. You can exercise many of these directly in the app, or by contacting us.

Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be reflected by the “Last updated” date above.

Contact

Questions about this policy or your data? Contact us at [privacy@yourdomain.com]. This Service is operated from [Indonesia].