RELAY
Privacy Policy
How Relay collects, uses, and protects personal data.
Este texto legal está disponível apenas em inglês. A versão em inglês é a que prevalece.
This Privacy Policy explains how Relay Tecnologia LTDA ("Relay", "we", "us") processes personal data in connection with the Relay platform, command-line interface, agents, dashboards, managed database clusters, and website (together, the "Service"). Relay is the controller of the personal data described here. This policy does not cover the contents of your databases, which Relay processes on your instruction as a processor under our Terms of Service and data processing agreement; for that data your organization is the controller.
1. Personal Data We Collect
1.1 Account and profile
When you sign in through a supported identity provider such as Google, we receive your basic profile information: your name, email address, a stable account identifier, and, if available, your profile picture. We use this to create and secure your account.
1.2 Billing
When you subscribe to a paid plan, our payment processor collects and processes your payment details. We do not receive or store full payment card numbers; we retain limited billing metadata such as your plan, billing status, and the last four digits or brand of your card as provided by the processor.
1.3 Usage and device data
We collect operational and usage data generated as you use the Service, such as log records, IP address, actions taken, feature usage, and metering data (for example, node-hours, seats, storage, and egress). This is used to operate, secure, meter, and improve the Service.
1.4 Agents
When an agent connected to the Service brokers database access, whether Relay runs it or your organization runs it on its own infrastructure, it reports to Relay the identity (email address) and client IP address of the user, the connection used, and session timing and volume, so we can authenticate, audit, and meter access. Where you enable auditing or approvals, it also reports the statements run, which Relay processes as a processor under our Terms of Service and data processing agreement. Agents do not send the rows your databases return. Agent Edition deployments report to your own control plane and send none of this data to Relay.
1.5 Communications
If you contact us, join a waitlist, or receive transactional email, we process the contact details and content of those communications.
2. Google Sign-In and Limited Use
We offer Google as a sign-in provider. When you choose it, we request only the basic sign-in scopes (openid, email, and profile). We do not request access to your Gmail, Drive, Calendar, Contacts, or any other Google service.
Relay's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. We use the Google account data we receive solely to authenticate you and to create and operate your Relay account. We do not sell this data, do not use it for advertising, and do not transfer it to others except as needed to provide the Service, comply with law, or as part of a merger or acquisition with equivalent protections.
3. How We Use Personal Data
- To provide, maintain, secure, and support the Service.
- To authenticate you and manage your account, organization, and seats.
- To meter usage and bill fees, and to detect and prevent fraud or abuse.
- To verify that self-hosted agents are enrolled with a Relay organization and used as our Terms allow.
- To communicate with you about the Service, including transactional and service messages.
- To improve and develop the Service using operational and aggregated data.
- To comply with legal obligations and enforce our Terms.
4. Legal Bases (GDPR / LGPD)
Where the GDPR (EU/UK) or the LGPD (Brazil) applies, we rely on the following legal bases: performance of a contract (to provide the Service you request); our legitimate interests (to secure, operate, and improve the Service and prevent abuse), balanced against your rights; compliance with a legal obligation (for example, tax and accounting); and your consent where required (for example, certain communications). You may withdraw consent at any time without affecting prior processing.
6. International Data Transfers
Relay is based in Brazil and operates infrastructure with providers that may process data in other countries, including the United States. Where we transfer personal data across borders, we rely on appropriate safeguards, such as the European Commission's Standard Contractual Clauses and equivalent mechanisms recognized under the LGPD and UK law, together with technical and organizational measures.
7. Data Retention
We retain personal data for as long as your account is active and as needed to provide the Service, then for the period required to meet our legal, tax, accounting, and dispute-resolution obligations, after which we delete or de-identify it. Metering and billing records are retained for the periods required by applicable financial-record laws.
8. Your Rights
Depending on where you live, you may have rights over your personal data. Under the GDPR and LGPD these include the rights to access, correct, delete, port, restrict, or object to processing, and to withdraw consent. Under the California CCPA/CPRA these include the rights to know, delete, correct, and opt out of the sale or sharing of personal information; we do not sell or share personal information as those terms are defined, and we do not discriminate against you for exercising your rights.
To exercise any right, contact us at privacy@userelay.sh. We will verify your request and respond within the time required by applicable law. You also have the right to lodge a complaint with your supervisory authority (in Brazil, the ANPD).
10. Children
The Service is not directed to children and is intended for use by organizations and their authorized personnel. We do not knowingly collect personal data from children.
11. Changes and Contact
We may update this Privacy Policy from time to time. If we make material changes, we will provide notice through the Service or by email. Changes take effect when the updated policy is published.
For privacy questions or to reach our data protection contact (encarregado/DPO), email privacy@userelay.sh. Our registered address is Rua Ituporanga, 210, Bom Retiro, Joinville - SC, 89222-430, Brazil.