Privacy Policy

Relay is operated from Montreal, Quebec. The person in charge of the protection of personal information is Mathieu Simard, founder of Relay. For any request about your data: support@yesrelay.com.

Site analytics use Rybbit, without cookies: nothing is stored in your browser, no cross-site tracking, no advertising profile. The site uses no advertising pixels.

If you sign up for the newsletter, we keep your email address to write to you, nothing else. Sign-up requires a confirmation, and every email contains a one-click unsubscribe link.

Account: email, name, password (hashed). Organization: workspaces, members, roles. Usage: call and SMS logs, contacts, notes — stored to provide the service.

Telecom credentials: your Auth Token is encrypted at rest (AES-256-GCM) and is never exposed to the browser nor stored in clear.

AI keys (BYOK): if you enable AI, your OpenAI/Claude key is encrypted. Content sent to the AI goes through YOUR provider; Relay does not retain it nor use it to train any model.

Your data is used solely to provide the service (calls, SMS, AI, billing) and to ensure its security. No data resale.

Relay relies on these providers: Vercel (website hosting), Railway (application hosting), MongoDB Atlas (database), Emailit (email and newsletter), Sentry (technical error log), Stripe (payment), Rybbit (cookieless analytics), your telecom provider (Twilio or Telnyx, as you choose), and your AI provider if enabled. Each processes data on Relay’s behalf, solely for its own service.

Some of these providers host data outside Quebec, notably in the United States. Your information may therefore be communicated outside Quebec, solely to provide the service, and only to providers bound to protect it.

Data is kept while your account is active. Deleting your account triggers a full purge (workspaces, calls, SMS, contacts, organization, user).

Only invoices escape this purge: Stripe keeps them, as the law requires for tax records.

You have the right to access your information, have it corrected or deleted, obtain a copy in a common format, and withdraw your consent. Exercise these rights from your workspace or by writing to support@yesrelay.com. We reply within 30 days.

If our answer does not satisfy you, you can file a complaint with the Commission d’accès à l’information du Québec.

Encryption at rest of secrets (AES-256-GCM), short-lived access tokens, signed webhooks, HTTPS everywhere, payments via Stripe (the card is never stored by Relay).

If an incident poses a risk of serious harm, we notify the Commission d’accès à l’information and the people concerned, as the law requires.

For any question about this policy or your data: support@yesrelay.com.