Privacy notice.

1. Information we process

Content. When you use Relay, you and the people you correspond with submit content to the Services, including messages, context prepared for a recipient’s agent, and attachments (“Content”). Content is encrypted in transit and at rest and is processed solely to deliver it to the recipients you choose and to keep it available to you and to them. We do not access Content except where necessary to operate the Services, to respond to a request from you, or as required by law.

Account information. When you create an account, we process the information you provide, including your name, email address, account settings, and contacts.

Service information. To operate the Services, we process information generated by their use, including delivery and read status, the devices and AI products connected to your account and the permissions you have granted them, and technical information such as browser type, network information, and diagnostic logs.

Shared-link activity. Shared Relay pages measure visits, button attempts, clipboard results and agent document fetches. Short-lived browser identifiers estimate browsers, not people. A seven-day attribution cookie can associate a visit with signup and initial Relay use on the same browser. Server-side browser, session and visit identifiers and account attribution are removed by a daily cleanup after 90 days; de-identified event counts are retained. Aggregate reports are available to the link owner and authorized Relay staff.

2. How we use information

We use the information described above to provide, maintain, and secure the Services; to deliver and organise your relays; to connect the AI products you have approved; to respond to support requests; to detect and prevent abuse; to improve the Services; and to comply with our legal obligations.

We do not sell personal information. Content is never used for advertising or to train artificial intelligence models.

3. How we share information

We disclose Content only to the recipients you designate, to their agents where you have indicated, and to any person to whom you grant access through a shared link.

We engage service providers to support the Services, including providers of hosting, storage, authentication, email delivery, security, and customer support. These providers are permitted to process information only on our instructions and for the purposes described in this notice.

We may also disclose information where required by law or legal process, where necessary to protect the rights, safety, or property of any person or of the Services, or in connection with a merger, acquisition, financing, or sale of assets, subject to protections equivalent to those in this notice.

4. Security

We protect information using safeguards appropriate to its sensitivity. Content is encrypted in transit using industry-standard transport encryption (TLS) and is encrypted at rest. Access to production systems is restricted to personnel who require it to operate the Services and is logged. We review our security practices on an ongoing basis.

5. Connected AI products

The Services allow you to connect AI products, such as Claude Code or Codex, to your Relay account. When you do so, the product’s provider receives the requests and Content necessary to carry out your instructions. Each connection requires your approval and is limited to the access of your own account. You may disconnect a product at any time from that product’s connection settings. Information received by a provider is handled under the provider’s own terms and privacy policy.

Google Contacts

If you choose to connect Google Contacts, Relay requests read-only access to your contacts. It imports names and email addresses from saved Google Contacts and Other contacts (people Google remembers from your interactions) into your Relay contact book so you can find people and choose recipients. This permission does not let Relay read Gmail messages, change your Google contacts, or send invitations automatically.

Relay stores imported contact details, Google contact identifiers, and sync status in its service database, and uses Google authorization managed by its identity provider to refresh the contact book. Your paired devices and AI connections you authorize can access these contacts to provide Relay features. Importing your contacts does not publish your contact book to other Relay users.

You can stop future Google access by removing Relay from your Google Account connections. Revoking access does not by itself delete previously imported contacts. You can remove those contacts in Relay, delete your Relay account, or contact privacy@sendrelays.com for help. If access remains enabled, a later sync may import a contact again.

6. Retention and deletion

We retain information for as long as necessary to provide the Services and to fulfil the purposes described in this notice. Items placed in Recently Deleted may be restored for 30 days, after which they are permanently deleted. You may delete individual items at any time using the controls in the Services, and you may delete your account at sendrelays.com/account/delete. Limited information may be retained thereafter where required for security, backup, transactional, or legal purposes, and is deleted in accordance with our retention schedules.

7. Your rights

You may access, correct, export, or delete your account information and Content through the Services. Depending on your place of residence, you may have additional rights under applicable data protection law, including the rights to access, rectify, erase, restrict, or object to the processing of your personal information, and to data portability. Requests may be made using the contact details below. We may need to verify your identity before acting on a request.

8. International transfers

The Services are operated from the United States, and our service providers may process information in other countries. Where personal information is transferred across borders, we rely on safeguards recognised under applicable law, including standard contractual clauses where required.

9. Changes to this notice

We may update this notice from time to time. Where a change is material, we will provide notice through the Services or by email before it takes effect. The date at the top of this notice indicates when it was last revised.

10. Contact

Questions and requests concerning this notice may be directed to privacy@sendrelays.com, or in writing to:

Granular Technology Inc.
[registered address]