Privacy Policy

1. Introduction

RelayHQ ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service.

By using RelayHQ, you consent to the data practices described in this policy.

2. Information We Collect

2.1 Information You Provide

When you register and use RelayHQ, we collect:

• Account Information: Name, email address, company name, password
• Profile Information: Avatar/profile picture (optional)
• Operational Data: Driver information, vehicle details, route data, compliance documents
• Billing Information: Payment method details (processed securely by Stripe)

2.2 Automatically Collected Information

When you access RelayHQ, we automatically collect:

• Usage Data: Pages viewed, features used, time spent, click patterns
• Device Information: IP address, browser type, operating system, device identifiers
• Log Data: Access times, error logs, performance metrics
• Cookies: Session cookies, authentication tokens, preferences

3. How We Use Your Information

We use the collected information to:

• Provide, operate, and maintain the RelayHQ service
• Process your transactions and manage subscriptions
• Send you operational notifications, updates, and security alerts
• Respond to your support requests and communications
• Analyze usage patterns and improve our service
• Detect, prevent, and address technical issues or security threats
• Comply with legal obligations and enforce our Terms of Service

We do not sell your personal information to third parties.

4. Data Sharing and Disclosure

4.1 Service Providers

We share data with trusted third-party service providers who assist us in operating our service:

• Hosting: Vercel (application hosting)
• Database: Supabase (data storage)
• Payment Processing: Stripe (billing and subscriptions)
• File Storage: Supabase Storage (documents and avatars)

4.2 Legal Requirements

We may disclose your information if required by law, court order, or government regulation, or if we believe disclosure is necessary to:

• Comply with legal processes
• Enforce our Terms of Service
• Protect our rights, property, or safety
• Protect users from fraud or security threats

4.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity. We will notify you of any such change.

5. Data Security

We implement industry-standard security measures to protect your data:

• Encryption in transit (HTTPS/TLS) and at rest
• Secure password hashing (bcrypt)
• Role-based access controls
• Regular security audits and updates
• Multi-tenant data isolation

However, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security but will notify you promptly of any known data breaches.

6. Data Retention

We retain your information for as long as your account is active or as needed to provide services. When you cancel your subscription:

• You have 30 days to export your data
• We retain audit logs for 90 days for security purposes
• After the retention period, we securely delete your data
• Some information may be retained longer if required by law

7. Your Rights and Choices

Depending on your location, you may have the following rights:

7.1 Access and Portability

You can access and export your data at any time through your account settings.

7.2 Correction and Deletion

You can update or delete your information through your account settings, or contact us for assistance.

7.3 Opt-Out

You can opt out of marketing communications at any time. However, we will still send operational emails necessary for the service (e.g., billing notifications, security alerts).

7.4 Do Not Track

We do not currently respond to "Do Not Track" browser signals, as there is no industry standard.

8. International Data Transfers

RelayHQ is operated in the United States. If you access our service from outside the U.S., your information may be transferred to, stored, and processed in the U.S.

We comply with applicable data protection laws and use standard contractual clauses for international transfers where required.

9. Children's Privacy

RelayHQ is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

10. Cookies and Tracking

We use cookies and similar technologies to:

• Maintain your session and keep you logged in
• Remember your preferences and settings
• Analyze usage patterns and improve performance
• Provide security features

You can control cookies through your browser settings, but disabling them may affect functionality.

11. Third-Party Links

RelayHQ may contain links to third-party websites or services. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or in-app notification at least 30 days before taking effect. The "Last updated" date at the top will reflect the most recent revision.

13. Contact Us

If you have questions about this Privacy Policy or your data, please contact us:

Email: privacy@relayhq.com
Address: [Your Company Address - Update This]
Data Protection Officer: [DPO Contact - If Required]

14. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information we collect and how it's used
• Right to delete your personal information
• Right to opt-out of the sale of personal information (we do not sell data)
• Right to non-discrimination for exercising your rights

To exercise these rights, contact us at privacy@relayhq.com.

15. GDPR Compliance (European Users)

If you are located in the European Economic Area (EEA), you have rights under the General Data Protection Regulation (GDPR):

• Right to access your personal data
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Right to withdraw consent

Our legal basis for processing your data is typically contractual necessity (to provide the service) or legitimate interests (to improve and secure the service).