Terms of Service

1. The Service

Relay is a database control plane and security layer. It provides identity-aware access to databases through self-hosted agents that speak the database wire protocol, apply column-level masking and query-firewall policies, and emit an identity-tied audit trail. Relay also provisions and operates managed database clusters on cloud infrastructure and exposes short-lived tunnels initiated from the Relay CLI.

We may update, improve, or change the Service over time. We may add or remove features, and we will use reasonable efforts to avoid materially degrading the core Service during a paid subscription term.

2. Accounts, Organizations, and Seats

You sign in through a supported identity provider (for example, Google). You are responsible for maintaining the confidentiality of your credentials and for all activity under your account. You must provide accurate information and keep it current.

The Service is organized around organizations. Each organization has members who occupy seats and are governed by role-based access controls. The organization is responsible for its members' use of the Service and for configuring roles, policies, and grants appropriately.

3. Plans, Fees, and Billing

The Service is offered across plans (for example, Free, Team, Business, and Enterprise). Free-plan organizations are subject to hard limits, including a maximum of one node and one seat. Paid plans unlock higher limits and additional features.

3.1 Platform fee (prepaid)

Paid self-serve plans carry a fixed monthly platform fee, billed in advance through our payment processor at the start of each billing cycle. The platform fee is a single recurring subscription charge.

3.2 Usage charges (billed in arrears)

In addition to the platform fee, we meter your usage of the Service and bill it in arrears. Usage is calculated from metrics reported during each billing period, including machine node-hours by tier (each node in a cluster, including replicas in a high-availability configuration, is metered), activated seats above the included amount, storage overage, and network egress. At the close of each period we compute your usage charges, apply your prepaid platform fee as a credit against those charges (up to the amount of the fee), and issue an invoice for any remaining balance, which is charged automatically to your payment method on file.

The prepaid platform fee is a floor, not a wallet: if your metered usage for a period is less than the fee, the difference is not refunded or carried forward. All prices are stated and charged in United States Dollars (USD).

3.3 Plan changes

Where your rolling usage crosses a defined threshold, your plan may automatically upgrade to the next band, changing your recurring platform fee prospectively. You may also change plans through the Service or by contacting us.

3.4 Taxes, late payment, and non-refundability

Fees are exclusive of taxes; you are responsible for all applicable taxes other than taxes on our income. Except as expressly stated in these Terms or required by law, all fees are non-refundable. Overdue amounts may accrue interest and may lead to suspension as described below.

4. Acceptable Use

You agree not to, and not to permit anyone to:

• Use the Service in violation of any applicable law or regulation, or to store or transmit unlawful, infringing, or harmful content.
• Upload or transmit malware, or use the Service to attack, disrupt, or gain unauthorized access to any system or network.
• Conduct penetration testing, load testing, or vulnerability scanning against the Service without our prior written consent.
• Reverse engineer, resell, sublicense, or use the Service to build a competing product, or run competitive benchmarking without consent.
• Circumvent usage metering, seat limits, plan gates, or other technical or contractual restrictions.
• Submit categories of highly sensitive regulated data (for example, payment card data, government identifiers, or special categories of personal data) except through features expressly designed and agreed for that purpose.

We may investigate suspected violations and cooperate with legal authorities. Serious or repeated violations may result in suspension or termination.

5. Self-Hosted Agent Software

Relay makes the Relay agent available as software that you run on your own infrastructure, as a container image, binary, chart, or other package, together with its updates and documentation (the "Agent Software"). The Agent Software is part of the Service. It is licensed, not sold, and Relay and its licensors retain all right, title, and interest in it. Open-source components included in the Agent Software are licensed under their own terms, which govern those components.

5.1 License

Subject to these Terms and payment of the applicable fees, Relay grants you a limited, non-exclusive, non-transferable, non-sublicensable, revocable license, for the term of your subscription, to install and run the Agent Software on infrastructure you control, solely to connect your databases to the Service for your organization's internal business purposes. Each running instance of the Agent Software must be enrolled with your Relay organization using an enrollment token issued to that organization, and must remain connected to the Service as designed.

5.2 No use without a Relay account

The license in Section 5.1 is the only right you have to use the Agent Software, and it does not permit any use outside the Service. You agree not to, and not to permit anyone to:

• Run the Agent Software without enrolling it with an active Relay organization, or keep running it after your organization, subscription, or enrollment has ended, been suspended, or been revoked.
• Use the Agent Software, in whole or in part, as a standalone database proxy, masking, policy, or audit tool, or with any control plane other than the Service.
• Copy, mirror, publish, redistribute, sell, rent, lend, or otherwise make the Agent Software, its images, or its registry or download credentials available to anyone other than your organization's authorized personnel and contractors acting on your behalf.
• Share enrollment tokens or registry credentials with another organization, or use one organization's tokens or credentials to serve another.
• Decompile, disassemble, reverse engineer, or otherwise attempt to derive the source code, algorithms, or internal structure of the Agent Software, except to the extent applicable law expressly permits it despite this restriction.
• Modify or create derivative works of the Agent Software, or remove or alter any license, copyright, watermark, or other proprietary notice or identifier in it.
• Disable, bypass, or interfere with the enrollment, heartbeat, licensing, metering, audit reporting, or other controls of the Agent Software.
• Use the Agent Software to build, train, or benchmark a competing product.

5.3 Enforcement

Any use of the Agent Software outside the license in Section 5.1 is unlicensed use of Relay's software and infringes Relay's intellectual property rights, including under Brazilian Law No. 9,609/1998 (the Software Law), Law No. 9,610/1998 (the Copyright Law), and equivalent laws in other countries. If you, or anyone using your tokens, credentials, or copies, breaches this Section 5, Relay may, in addition to any other right or remedy: suspend or terminate your access to the Service and revoke your enrollment tokens and registry credentials immediately, without a cure period; seek injunctive or other urgent relief, which you agree is appropriate because damages alone would not adequately compensate Relay; and pursue the civil and criminal remedies available under applicable law, including damages that include the fees Relay would have charged for the use, together with costs and attorneys' fees to the extent the law allows. You are responsible for any breach by your personnel, contractors, and anyone who obtains the Agent Software or its credentials from you.

5.4 Verification

The Agent Software reports its enrollment, version, and operating status to the Service, and Relay may use this information to verify compliance with this Section 5. On Relay's written request, you will confirm in writing, within ten (10) business days, where you run the Agent Software and that every running instance is enrolled with your organization.

5.5 End of the license

The license ends automatically when your subscription or organization ends, or when Relay terminates it under these Terms. You must then, within ten (10) days, stop every instance of the Agent Software, delete all copies and images of it, and remove its registry credentials from your systems, and confirm this in writing on request.

5.6 Your environment

You are responsible for the infrastructure, network, configuration, access controls, and secrets of the systems where you run the Agent Software, including keeping enrollment tokens and registry credentials confidential and running a version Relay supports. Relay is not responsible for failures caused by your environment or by versions it no longer supports.

6. Your Data and Ownership

As between you and Relay, you retain all right, title, and interest in the data you and your users submit to or access through the Service, including the contents of your databases, your queries, and your configuration ("Customer Data"). You grant us a limited license to host, process, and transmit Customer Data solely to provide and support the Service and as you instruct through the Service.

With respect to the contents of your databases, Relay acts on your instructions as a processor; we do not access database row contents except as necessary to deliver features you enable (such as masking or auditing) or as required to operate the Service. We do not sell Customer Data, and we do not use it to train machine-learning models without your prior written consent.

We may generate and use aggregated, de-identified operational and usage data to operate, secure, and improve the Service, provided it does not identify you or any individual.

7. Security and Privacy

We maintain administrative, technical, and organizational measures designed to protect the Service. Our handling of personal data is described in our Privacy Policy, which is incorporated into these Terms by reference. Where we process personal data on your behalf as a processor, that processing is governed by a data processing agreement made available on request at legal@userelay.sh.

8. Suspension and Termination

We may suspend or limit your access to the Service if: your payment is overdue after notice; your use poses a security, legal, or operational risk to the Service or others; or you materially breach these Terms. Where practical, we will give notice and an opportunity to cure.

Either party may terminate for the other's uncured material breach after a reasonable cure period, or on the other's insolvency. On termination, your right to use the Service ends, including your license to the Agent Software as described in Section 5.5. We will make Customer Data available for export for a limited period following termination, after which we may delete it in the ordinary course.

9. Disclaimer of Warranties

Except as expressly stated in these Terms, the Service is provided "as is" and "as available", without warranties of any kind, whether express, implied, or statutory, including implied warranties of merchantability, fitness for a particular purpose, non-infringement, and any warranty that the Service will be uninterrupted or error-free. Beta, preview, and free-tier features are provided without any warranty and may be changed or withdrawn at any time.

10. Limitation of Liability

To the maximum extent permitted by law, neither party will be liable for any indirect, incidental, special, consequential, or punitive damages, or for lost profits, revenue, or data, arising out of or related to these Terms or the Service.

Except for the excluded claims below, each party's total aggregate liability arising out of or related to these Terms will not exceed the total fees you paid or owed to Relay for the Service in the twelve (12) months preceding the event giving rise to the claim. For claims arising from a party's breach of its confidentiality obligations or from a security incident caused by a party's breach of these Terms, that cap is two (2) times the same twelve-month amount.

The limitations above do not apply to: your payment obligations; either party's indemnification obligations; your breach of Section 5 or other infringement or misappropriation of Relay's intellectual property; or liability that cannot be limited under applicable law (including fraud, gross negligence, or willful misconduct).

11. Indemnification

You will defend and indemnify Relay against third-party claims arising from your Customer Data, your use of the Service in violation of these Terms, or your violation of law or the rights of a third party. We will defend and indemnify you against third-party claims that the Service, as provided by us and used in accordance with these Terms, infringes that third party's intellectual property rights. The indemnifying party's obligations are conditioned on prompt notice, reasonable cooperation, and sole control of the defense and settlement.

12. Changes and General Terms

We may update these Terms from time to time. If we make material changes, we will provide notice through the Service or by email. Your continued use of the Service after the changes take effect constitutes acceptance.

These Terms are governed by the laws of the Federative Republic of Brazil, without regard to conflict-of-laws rules. The courts of Joinville, State of Santa Catarina, Brazil, will have exclusive jurisdiction over disputes, except where mandatory consumer law provides otherwise. These Terms, together with any order and the policies referenced here, are the entire agreement between the parties regarding the Service. If any provision is held unenforceable, the remaining provisions remain in effect.

Questions about these Terms may be sent to legal@userelay.sh. Our registered address is Rua Ituporanga, 210, Bom Retiro, Joinville - SC, 89222-430, Brazil.