Privacy Policy

Last updated: 2026-10-09

1. Scope

This notice explains what Relayo LLC ("Relayo") collects when you visit this website or use the Relayo service, and how it is used. For event data you route through Relayo, we act as a processor on your instructions; you remain the controller of that data.

2. What we collect

Website. Waitlist signups: email, and optionally name, company, role and stack. Standard server logs: IP address and request metadata, kept briefly for security and rate limiting.

Service. Workspace and account details, receiver endpoint URLs and delivery results, and the webhook event payloads Meta sends to your callback (which can include lead form answers and WhatsApp message metadata of your customers). Credentials you store (app secrets, tokens, signing secrets) are encrypted at rest and are never written to logs; phone numbers are masked in logs and diagnostics.

Billing. Payments are processed by our merchant of record, Paddle. We do not receive or store your card details; Paddle's privacy policy applies to the checkout.

3. How we use it

To provide the service (receive, verify, route, deliver, retry and replay events), to secure it (abuse and fraud prevention, rate limiting), to bill subscriptions, and to contact the waitlist about availability. We do not sell personal data and do not use event payloads for advertising or to train models.

4. Retention

Event payloads are kept for the retention window of your plan and then deleted by a scheduled job. Encrypted credentials are deleted when you remove them or close your workspace. Waitlist entries are kept until launch contact or on request.

5. Sharing and subprocessors

We share data only with the subprocessors needed to run the service: our hosting provider (servers and backups), Paddle (billing), and Meta Platforms (we call the Graph API on your instruction). Each receiver endpoint you configure receives exactly the events your routes send it — that sharing is under your control.

6. Your rights

Depending on where you live (including under GDPR), you may have rights to access, correct, export or delete your personal data, and to object to or restrict processing. Write to support@tryrelayo.com and we will respond within 30 days. If your data is in a customer's workspace, we will refer the request to that customer as controller.

7. International transfers and security

Data is processed on servers we operate and may be transferred internationally with appropriate safeguards. All traffic is encrypted in transit (HTTPS only, including to your receivers); secrets are encrypted at rest with authenticated encryption.

8. Contact

Relayo LLC — support@tryrelayo.com