Privacy

Relay’s companion stores conversations and transfer archives on your Mac. Paired browsers receive task history and questions over your private connection. Continuing with another assistant sends its context to that assistant’s provider under your account.

The public website and billing service are separate. They receive no project files, prompts or conversations. Cloudflare D1 stores billing identifiers, licenses, retrieval-token hashes, refund state and delivery status. Before sending a license email, it also stores the verified Paddle billing address and exact message, including sender, support/download links and license attachment. It records the first-send time and Resend’s accepted message ID when returned. Paddle handles payment details; Resend delivers license emails. An accepted message is not proof of inbox delivery.

Support emails are stored by Resend and may be processed by OpenAI to prepare replies. Replies are reviewed before sending. Share redacted diagnostics, and keep passwords, API keys, card details and conversation archives out of support email.

Marketing measurement is disabled by default. If you choose to share usage counts and the server feature is enabled, the site records UTC-day counts of predefined page/demo actions and an allowlisted campaign label. These are event counts, not unique visitors or verified purchases. Consent resets on navigation or reload; Do Not Track overrides it. Measurement stores no visitor identifier, prompt, full URL or checkout analytics. The site uses no advertising pixels. Purchase recovery separately uses this tab’s session storage for a random retrieval token and transaction ID.

Local device sessions expire or can be revoked. Revoke a lost phone from your Mac. Remove local data only after backing up conversations you need. Provider copies remain subject to the providers’ policies.

The billing service removes frozen email bodies, recipients and attachments 30 days after delivery or cancellation is resolved. It removes accepted message identifiers after 90 days. Pending deliveries, unknown outcomes and unreviewed support exceptions remain available for recovery. Minimal unlinked webhook records remain to prevent duplicates. Order and license records remain to support activation, recovery and refunds. Hosting backups follow the hosting provider’s retention; they are not included in this timed deletion.