Privacy Policy

1. Introduction

Kinetic Studio, Inc. d/b/a Relay ("Relay", "we", "our", or "us") provides a creator platform that connects creators with brand campaigns, content opportunities, payouts, and optional paid survey or market research opportunities. This Privacy Policy explains how we collect, use, disclose, and protect personal information when you use the Relay website, dashboard, mobile application, and related services.

2. Information We Collect

We collect personal information directly from you, automatically when you use Relay, and from third-party services that you connect to Relay or that help us operate our services.

Information you provide

• Account information, such as your name, email address, phone number, username, profile information, and authentication details.
• Creator profile information, such as social media handles, account links, audience information, interests, onboarding answers, content preferences, and campaign eligibility information.
• Content and campaign information, such as posts, videos, captions, campaign submissions, performance metrics, and communications with Relay or brands.
• Payment and payout information, such as payout account details, payment identifiers, tax or verification information provided to payment processors, payout history, and incentive information.
• Survey and market research information, such as survey opt-in records, eligibility data, provider identifiers, completion or disqualification status, transaction identifiers, reward amounts, quality flags, and other information needed to route survey opportunities and process incentives.
• Support and communications information, such as messages, support requests, feedback, and responses to optional product surveys or creator experience surveys.

Information collected automatically

• Device and usage information, such as IP address, device type, operating system, browser type, app version, language, country, time zone, pages or screens viewed, clicks, interactions, diagnostics, crash logs, and similar technical data.
• Analytics and attribution information, such as app lifecycle events, feature flag data, referral identifiers, advertising or attribution identifiers where available, and information about how you discovered or use Relay.
• Local device storage information, such as authentication tokens, installation identifiers, device or referral identifiers, push notification tokens, feature flag state, preferences, and app settings stored through mobile device storage or browser storage.

Information from connected services

If you connect a social media account, Gmail account, payment account, or other third-party service, we collect information permitted by that service and your authorization. This may include profile information, verification information, account metadata, follower or engagement metrics, post performance data, OAuth tokens, and other information needed to provide the connected feature.

3. How We Use Information

We use personal information to:

• Provide, operate, secure, and improve Relay.
• Create and manage accounts and creator profiles.
• Match creators with campaigns, verify campaign participation, track content performance, and calculate payouts.
• Offer optional paid surveys or market research opportunities, determine eligibility, route survey traffic, prevent fraud, confirm survey outcomes, and process survey-related incentives.
• Process transactions, subscriptions, payouts, refunds, and related financial or tax obligations.
• Send transactional messages, support responses, push notifications, product updates, and marketing communications where permitted.
• Analyze usage, measure performance, test features, troubleshoot issues, detect abuse, and prevent fraud.
• Comply with legal obligations and enforce our terms.

4. Surveys and Market Research

Survey participation is optional. If you choose to participate in a survey or market research opportunity, Relay may share limited information with the applicable survey provider to determine eligibility, route you to a survey, validate quality, confirm completion or disqualification, and process rewards. This may include a Relay or provider user identifier, general eligibility information, country or region, device or session metadata, survey identifier, transaction identifier, reward amount, completion timestamp, and fraud or quality signals.

In many cases, survey responses are collected directly by the survey provider and are governed by that provider's privacy notice and survey terms. Relay does not require you to participate in surveys to use the core Relay creator app.

5. How We Share Information

We may disclose personal information to:

• Brands and campaign partners: We share creator content, campaign participation information, performance metrics, and related reporting needed to operate campaigns.
• Survey and market research providers: We share limited information needed to offer optional survey opportunities, validate survey outcomes, prevent fraud, and process incentives.
• Service providers: We use vendors for hosting, authentication, analytics, attribution, error monitoring, data storage, customer support, communications, payment processing, fraud prevention, and similar operational services.
• Payment processors and payout providers: We share information needed to process payments, verify accounts, prevent fraud, and comply with financial obligations.
• Connected third-party services: We share or receive information when you connect services such as social media accounts, Gmail, app stores, or payment accounts.
• Legal, safety, and business purposes: We may disclose information when required by law, to protect rights and safety, to enforce our terms, or in connection with a merger, financing, acquisition, reorganization, or sale of assets.

We do not sell personal information for money. Some analytics, attribution, advertising, or survey-related disclosures may be considered a "sale", "sharing", or "targeted advertising" under certain U.S. state privacy laws. You may opt out as described in the U.S. State Privacy Notice below.

6. Cookies, SDKs, and Similar Technologies

Relay's primary creator and respondent experience is a native mobile application, so the app does not rely on browser cookies to operate the mobile signup or survey offer flow. Relay's website, dashboards, and web-based flows may use cookies, local storage, session storage, pixels, SDKs, and similar technologies.

We use these technologies for:

• Authentication, session management, account security, and access control.
• OAuth and anti-fraud protections, including temporary security and verification cookies.
• Product preferences, feature settings, saved filters, dashboard state, and similar convenience features.
• Analytics, diagnostics, feature flags, session replay, crash reporting, attribution, and measurement of how Relay is used.
• Marketing attribution and referral measurement, including mobile SDKs and device-level settings where permitted.

If you open a third-party survey or partner link, that third party may set its own cookies or use similar technologies under its own privacy notice. You can control browser cookies through your browser settings. On mobile devices, you can use operating system settings to limit app tracking, advertising identifiers, push notifications, and certain device permissions.

7. Social Media Integrations

When you connect your social media accounts to Relay, we collect information needed to verify account ownership, confirm campaign compliance, track performance, and calculate incentives. This may include public profile information, account identifiers, follower counts, engagement metrics, content URLs, post performance data, OAuth tokens, and related account metadata. We do not post on your behalf without your explicit action.

8. Google API Services

Relay's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Data we access from Google

When you authorize Relay to access your Gmail account, we access Gmail messages and message metadata only as needed to identify verification emails from social media platforms and extract verification codes for account linking.

How we use Google user data

• Extract verification codes to help complete social media account authentication.
• Enable secure account linking without requiring manual code entry.

We do not use Gmail data for advertising, share Gmail data with brands or analytics providers, use Gmail data to train AI or machine learning models, or read emails beyond verification code messages needed for the feature.

Google data retention and deletion

Verification codes are processed in real time and are not permanently stored. OAuth tokens are stored securely until you disconnect your Gmail account, revoke access, or delete your Relay account. You can revoke Relay's access through your Google Account Permissions.

9. Data Retention and Account Deletion

We retain personal information for as long as needed to provide Relay, operate campaigns, process payouts and incentives, maintain security, resolve disputes, comply with legal obligations, and enforce our agreements. Retention periods vary depending on the type of information and the purpose for which it is used.

When you delete your account or ask us to delete personal information, we delete or de-identify information where required, subject to legal, security, fraud prevention, financial, accounting, dispute, and backup retention requirements. We may retain aggregated or de-identified information that does not identify you.

10. Data Security

We use administrative, technical, and organizational safeguards designed to protect personal information. These safeguards include access controls, authentication, encryption in transit where appropriate, vendor security controls, and monitoring for abuse or fraud. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

11. U.S. State Privacy Notice

Depending on your state of residence, you may have privacy rights under laws such as the California Consumer Privacy Act, the Virginia Consumer Data Protection Act, the Colorado Privacy Act, the Connecticut Data Privacy Act, the Utah Consumer Privacy Act, and other similar U.S. state privacy laws. We provide the rights described below to eligible U.S. users, subject to applicable law and verification.

Categories of personal information

The categories of personal information we collect may include identifiers, contact information, account credentials, commercial and transaction information, internet or electronic activity information, device information, geolocation information derived from IP address or device settings, audio or visual content you submit, professional or creator profile information, inferences used for product improvement or campaign eligibility, payment and payout information, and sensitive personal information when needed for account security, payment processing, or other permitted purposes.

Your privacy rights

• Access or confirm whether we process your information.
• Request a copy of personal information we maintain about you.
• Correct inaccurate personal information.
• Delete personal information, subject to exceptions.
• Request portability of certain personal information.
• Opt out of sale, sharing, targeted advertising, or certain profiling where those rights apply.
• Limit the use or disclosure of sensitive personal information where that right applies.
• Appeal a denied privacy request where applicable.

How to exercise your rights

You may submit a privacy request through Relay support or through the platform. We may need to verify your identity before completing a request. You may use an authorized agent where permitted by law, but we may require proof of authorization and verification of your identity. We will not discriminate against you for exercising privacy rights.

12. Marketing Communications and Notifications

We may send account, transactional, campaign, payout, support, survey, product, and promotional communications. You can opt out of promotional communications where required by law. Transactional and service-related messages may still be sent when needed to operate Relay. You can manage push notifications through your device settings.

13. International Data Transfers

Relay is based in the United States. We and our service providers may process and store information in the United States and other countries where we or our providers operate. Those countries may have data protection laws that differ from the laws where you live.

14. Children's Privacy

Relay is not intended for children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided personal information to Relay, contact us so we can take appropriate action.

15. Third-Party Links and Services

Relay may link to or integrate with third-party websites, apps, survey providers, social media platforms, payment processors, and other services. Their privacy practices are governed by their own notices and policies. Review those notices before providing information to third parties.

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make changes, we will update the "Last updated" date above. If changes are material, we may provide additional notice through Relay or by other appropriate means.

17. Contact Us

If you have questions about this Privacy Policy or want to submit a privacy request, contact Relay through the platform.