Privacy Policy

1. Introduction

Relay ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform.

2. Information We Collect

Personal Information

We may collect personal information that you voluntarily provide to us when you:

• Register for an account
• Connect your social media accounts
• Submit payment information
• Contact our support team
• Participate in campaigns

This information may include: name, email address, phone number, payment information, social media handles, and profile information.

Usage Data

We automatically collect certain information when you use Relay, including:

• Device information (IP address, browser type, operating system)
• Usage patterns and interactions with the platform
• Campaign performance metrics
• Social media post performance data

3. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain our platform
• Process your transactions and send related information
• Connect creators with brand campaigns
• Track campaign performance and calculate payments
• Communicate with you about updates, offers, and account information
• Detect and prevent fraud
• Improve our services and develop new features
• Comply with legal obligations

4. Sharing Your Information

We may share your information with:

• Brands: We share creator performance metrics and content with brands running campaigns
• Service Providers: Third-party vendors who perform services on our behalf (payment processing, analytics, hosting)
• Legal Requirements: When required by law or to protect our rights
• Business Transfers: In connection with a merger, sale, or acquisition

We do not sell your personal information to third parties.

5. Social Media Integration

When you connect your social media accounts to Relay, we collect:

• Public profile information
• Follower counts and engagement metrics
• Post performance data

We only access information necessary to verify campaign compliance and track performance. We do not post on your behalf without your explicit action.

6. Google API Services

Relay's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Data We Access from Google

When you authorize Relay to access your Gmail account, we access:

• Gmail Messages: We read email messages sent to your Gmail account, specifically those containing verification codes from social media platforms (e.g., Instagram, TikTok)
• Message Metadata: Sender information, subject lines, and timestamps to identify verification emails

How We Use Google User Data

We use the Gmail data we access solely for the following purposes:

• Automated Verification: Extract 6-digit verification codes from emails to automatically complete social media account authentication
• Account Linking: Enable secure connection of your social media accounts to Relay without manual code entry

We do NOT:

• Read, access, or store any emails beyond verification code messages
• Use Gmail data for advertising or marketing purposes
• Share Gmail data with third parties except as required by law
• Use Gmail data to train AI or machine learning models

Data Sharing

Gmail data accessed by Relay is NOT shared with any third parties, including:

• Brands running campaigns on our platform
• Analytics or advertising services
• Other creators or users

We may share Gmail data only when:

• Required by law or legal process
• Necessary to protect our rights or prevent fraud
• You have given explicit consent

Data Storage and Protection

Verification codes extracted from Gmail are:

• Temporarily Processed: Codes are extracted in memory and used immediately for authentication
• Not Permanently Stored: We do not store email content or verification codes in our database after authentication is complete
• Encrypted in Transit: All communication with Gmail API uses TLS/SSL encryption
• Access Controlled: Only authorized server processes can access Gmail API credentials

Data Retention and Deletion

Gmail data is retained as follows:

• Verification Codes: Processed in real-time and immediately discarded after use (not stored)
• OAuth Tokens: Access and refresh tokens are stored securely until you disconnect your Gmail account or delete your Relay account
• Account Deletion: When you delete your Relay account, all Gmail OAuth tokens are immediately revoked and deleted

You can revoke Relay's access to your Gmail account at any time by:

• Visiting your Google Account Permissions page and removing Relay
• Disconnecting your Gmail integration in Relay account settings

7. Data Security

We implement appropriate technical and organizational security measures to protect your personal information. However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

8. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. When we no longer need your information, we will securely delete or anonymize it.

9. Your Rights

Depending on your location, you may have the following rights regarding your personal information:

• Access: Request a copy of your personal information
• Correction: Request correction of inaccurate information
• Deletion: Request deletion of your personal information
• Opt-out: Unsubscribe from marketing communications
• Data Portability: Request transfer of your data

To exercise these rights, please contact us through the platform.

10. Cookies and Tracking

We use cookies and similar tracking technologies to track activity on our platform and store certain information. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our Service.

11. Children's Privacy

Our Service is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us.

12. International Data Transfers

Your information may be transferred to and maintained on computers located outside of your state, province, country, or other governmental jurisdiction where data protection laws may differ. By using Relay, you consent to such transfers.

13. Third-Party Links

Our platform may contain links to third-party websites. We are not responsible for the privacy practices or content of these third-party sites. We encourage you to review the privacy policies of any third-party sites you visit.

14. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. You are advised to review this Privacy Policy periodically for any changes.

15. Contact Us

If you have any questions about this Privacy Policy, please contact us through our platform.