Privacy Policy

We collect the information you provide directly — your email address, account details, and the content you publish — plus limited usage data (such as pages visited and actions taken) that helps us understand how Relay is used and keep it reliable.

When you connect a social account, we receive from that platform only what you authorize on its consent screen:

• TikTok: your TikTok user ID (open_id), username, display name and profile picture, follower and video counts, the permissions you granted, and an access token and refresh token that let Relay post for you. When you post, we also read your account's current posting options (privacy levels, whether comments, duets and stitches are enabled, maximum video length) and each post's processing status.
• Instagram: your Instagram user ID, username, name and profile picture, follower and media counts, account type, the permissions you granted, and an access token.

We use this data only to show your connected accounts in Relay, to publish the posts you schedule to them, and to report back whether each post succeeded. We do not use it for advertising, do not sell it, and do not share it with anyone except the hosting providers that run Relay. The media and captions you publish are sent to the platform you chose, at the time you chose.

We use your information to operate and improve Relay: authenticating you, delivering and scheduling your content, providing support, and analyzing aggregate product usage. We do not sell your personal information.

We use essential cookies to keep you signed in, and privacy-conscious product analytics to measure feature usage. Analytics data is tied to your account identifier and is used only to improve the product.

We share data only with service providers that help us run Relay (such as hosting, authentication, and analytics providers), under contracts that restrict how they may use it, or when required by law.

We keep your data for as long as your account is active. When you delete your account, we delete or anonymize your personal information within 30 days, except where we must retain it to comply with legal obligations.

When you disconnect an Instagram or TikTok account — in Relay, or by removing Relay in the platform's own settings — we immediately delete its access and refresh tokens, and we revoke Relay's TikTok authorization on TikTok's side. Profile details kept for your post history are deleted with your Relay account, or on request.

You may access, correct, export, or delete your personal information at any time from your account settings, or by contacting us. Depending on where you live, you may have additional rights under local data-protection law.

We protect your data with industry-standard measures, including encryption in transit and at rest, and we limit internal access to those who need it to operate the service. Instagram and TikTok tokens are additionally encrypted with AES-256-GCM before they are stored, and are never returned by any Relay API.

We may update this policy from time to time. If we make material changes, we will notify you by email or in the app before they take effect.