Privacy Policy

Beta version 0.2Last updated October 12, 2026

1. Who we are

RelayReply is operated by TooAvid Technologies LLC, 5500 Sunrise Highway, Unit 50 #1108, Massapequa, NY 11758 ("we", "us"). This policy explains what we collect when you use the RelayReply website, web app and mobile apps (the "Service"), why, who we share it with, how long we keep it, and your choices.

2. Who this policy covers

• Users: people with a RelayReply account.
• People our users call or who call a user's RelayReply number ("other parties"): businesses, their staff, and individuals. See section 7.
• Visitors to our website.

3. What we collect, and why

3.1 Your account

Google sign-in. If you sign in with Google, we ask Google only for basic sign-in information: your email address, your name, a link to your profile picture, and your Google account ID. We don't ask for access to anything else in your Google account, such as Gmail, contacts, calendar or files. We use your email and Google account ID only to create your account and sign you in. Our sign-in provider, Supabase, stores what Google sends with your account record. RelayReply doesn't show your Google name or picture or use them for anything else; the name the AI says is the one you set in RelayReply. We don't sell Google user data, use it for advertising, or share it with anyone except the service providers that run sign-in for us (section 8) or when the law requires it. Deleting your account deletes it (section 11), and you can remove RelayReply's access at any time in your Google Account settings. RelayReply's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

3.2 Your calls

The plan, cards, answers and outcome are kept whether or not you keep transcripts, and can contain personal details (for example a pharmacy or a date of birth you approved). They are protected by the same access rules as the rest of your account (section 10).

3.3 About me (optional)

Facts you choose to save (for example your date of birth, address, callback number, insurance member ID, pharmacy or doctor) so the AI can use them on calls. Facts marked "Ask me first" are kept from the AI until you approve sharing them on a card. About me refuses full card numbers, Social Security numbers (or their last four digits), bank account numbers, passwords and security answers. This doesn't stop such details from being said on a call or left in a voicemail; please don't share them on calls unless you have to. You can Forget a fact at any time.

After a call, the app may suggest facts to save ("Save to About me?"). A suggestion you don't save or skip is deleted after 30 days. Once you save or skip it, the suggestion's own copy of the value is cleared; a saved fact lives in About me until you Forget it.

3.4 Chats about your calls

Your follow-up questions about a call, and the AI's answers, saved encrypted like transcripts. To answer, we send the relevant transcript, mission and outcome to our AI provider.

3.5 Your RelayReply number (subscribers)

If voicemail emails are on, we email you the transcript.

3.6 Billing

Your plan, invoices, minutes used, spending warning and cap, and referral status. Stripe collects and holds your card details; we never see your full card number. We receive limited card details (such as brand, last four digits and expiry) and your billing address if Stripe collects it for tax.

3.7 Technical information

IP address, browser and device type, your time zone and local time (so the AI knows your local time), and error logs. Our server logs record ids, kinds and counts (a phone number only by its last four digits), not the words of your calls, and are kept about 7 days by our hosting provider. We use cookies and local storage only to sign you in and remember settings. We don't use advertising trackers.

3.8 Analytics (optional)

• Off unless you turn it on. You can tick "Share usage analytics" when you sign up, or turn it on or off in Settings > Privacy. The choice is saved on your account, so it follows you on every device.
• What it collects: which screens you open and which buttons you press, with a random id. Never your name, phone numbers, call text, missions, About me, or contacts.
• What it doesn't do: no session recording, no automatic capture of what you type or click, no advertising. IP addresses are discarded before events are stored.
• Who: PostHog, in the United States (section 8).
• Turning it off stops sending at once, including anything waiting to be retried.

Our websites. relayreply.com and its subdomains are served through Cloudflare, which counts page views for us without cookies or tracking identifiers; we see only aggregate counts. This is separate from the product analytics above: PostHog stays off unless you turn it on.

3.9 Sensitive information

Some of what you give us can be sensitive: information suggesting a disability (your reason for using RelayReply, or an announcement preset such as "someone who is Deaf"), your date of birth, health-related details in your missions or calls (for example a pharmacy call), and the contents of your calls. We use sensitive information only to provide the Service you ask for, not to profile you or for advertising, and we don't sell or share it. The announcement's default names you and no condition; a preset that names one is your choice.

4. Transcripts: how they're kept

• On by default. A one-time screen explains this choice: "Keep my transcripts" is on unless you switch it off. You can change it later in Settings > Privacy.
• Why we keep them: so you can read past calls, and so the AI can answer questions about them in your chat.
• Turning it off stops saving transcripts of new calls. It doesn't turn off live AI processing or captions, and we still save each call's plan, question cards, answers and outcome. At the end of each call you can download its transcript for 30 minutes; after that it's gone from our side. Transcripts saved before you switched off stay until you delete them.
• "Delete all my transcripts" (Settings > Privacy, after you confirm) deletes every transcript we've saved for you, and your saved questions and answers about past calls. Calls' plans, cards and outcomes stay until you delete those chats. New calls are still saved if "Keep my transcripts" is on.
• Encrypted per user. Each user's transcripts are encrypted with that user's own data key, which is itself encrypted with a master key kept outside the database. A copy of the database alone can't be read.
• Honest limit: our server holds the keys so it can show you your transcripts and answer your questions. This is not "end-to-end" encryption; a version where only you hold the key may come later.
• Who can access them. Transcripts are encrypted at rest and are not displayed in our admin tools. Our staff see a transcript only: (a) when you share a copy with support, for a limited time you can revoke; or (b) when the law requires it (for example a valid court order), approved in writing by our founder and logged. We don't read transcripts to investigate misuse reports; we use call details and the records in section 6 (see the Acceptable Use Policy).
• Deleting. Deleting a chat deletes its transcripts. "Delete all my transcripts" or deleting your account destroys your data key, so your transcripts can't be read from our live database again. Backups follow section 9.

5. Call audio and recordings

RelayReply does not save audio recordings of your calls. We process call audio live to provide the Service: it passes through our servers and our providers and is not stored by us. Voicemail recordings (section 3.5) are stored separately, because someone chose to leave you a message. Our providers process, and may keep, some data as described in section 8.

Internal test accounts. Accounts our own team uses for development are flagged as test accounts and keep call audio, full transcripts and logs, to test and improve the Service, for 90 days. Customer accounts are never flagged as test accounts. Calls from test accounts go only to our own numbers or to people who have agreed.

6. Announcement and acknowledgment records

For each call we record what the call was to announce when you pressed Call, and then what the AI actually said of it (whether it said it was an AI and that the call was transcribed, the wording version), and the location information we used. When you call a mobile number, we record your acknowledgment: its wording version and a fingerprint of the text you saw, the number, the time, and your choice.

These records show your statements and what the AI said. They are not a record of the other party's consent.

They're written by our server, can't be edited, and are kept for 5 years (a call's from the call; an acknowledgment's from when it stops covering calls), then deleted, even if you delete the chat or your account, because we may need them to answer legal claims. We may keep a specific record longer under a legal hold. They hold the number called and its line type, the announcement's words (with your name), and the AI's own sentences of the announcement as it said them. They don't include your transcript or anything the other side said.

7. People our users call

If a RelayReply user calls you, or you call a user's RelayReply number:

• What we process: your voice, live, so the AI can understand you and caption the call; what you say, as text; your phone number; and the call's time and length. If you leave a voicemail, your recording.
• Announcement: on every call the AI tells you at the start that it is an AI assistant calling for our user and that the call is transcribed. If you object to the AI, it pauses and our user decides what to do. If you object to the transcription, the call ends.
• What we keep: your words may be saved in our user's encrypted transcript (if they keep transcripts) and summarized in their outcome. We don't keep recordings of your voice, except voicemails you leave.
• What we don't do: we don't build profiles of you, contact you for marketing, or sell or share your information.
• Your choices: email support@relayreply.com with the date and time of the call and the number involved. We'll find the call, tell you what we hold about you, and handle your request to access or delete it as the law requires. We may tell our user that a request was made about their call.

8. Who we share information with

We don't sell personal information and don't share it for cross-context behavioral advertising. We share it only:

• With our service providers, who run the Service for us under contracts that limit their use. The full list, with what each gets, is in the Subprocessors list. In short: OpenAI (AI voice, decisions, transcription), Twilio (phone calls, numbers, text codes, number lookups), Stripe (payments and tax), Supabase (database, sign-in and file storage), Fly.io (our servers), Cloudflare (our website and email forwarding), Resend (email), PostHog (analytics, only if you turn it on), and Google (if you sign in with Google, and our support mailbox).
• With the other party on your call: what the AI says on your behalf, including facts you approve.
• When the law requires it, or to protect people's safety, our rights, or the Service. We'll tell you about a legal demand for your data unless we're not allowed to.
• In a business transfer, such as a merger or sale, under this policy.
• With your permission, for example when you share a call with support.

AI providers

• We send call audio, captions, missions, cards and About me facts (those you allow) to OpenAI's API, which provides the AI voice, the decisions, transcription, summaries and chat answers.
• OpenAI doesn't use API data to train its models. We tell OpenAI not to store responses (store: false), which is not the same as Zero Data Retention.
• OpenAI may keep API data for up to 30 days to detect abuse, unless the law requires longer.

9. How long we keep information

In short:

Backups. When you delete something, it's deleted from our live systems right away. Our database provider keeps backup copies, which are overwritten within 7 days. If we ever restore a backup, we re-apply every deletion made since that backup before the data is used again. Each such deletion is recorded outside our database provider (in a private Cloudflare R2 bucket: an id, what was deleted and when, nothing else), so a restore can't erase the record of it.

10. Security

We use encryption in transit (TLS) and at rest, per-user encryption for transcripts, private storage for voicemails, row-level access rules so each user reads only their own data, multi-factor sign-in for our admin tools, and an audit log of admin actions. No system is perfectly secure; if a breach affects you, we'll tell you as the law requires.

11. Your choices and rights

Everyone, wherever you live, can:

• See and download your information: your chats and transcripts are in the app; for a full copy, ask at support@relayreply.com.
• Correct it: edit your profile and About me in the app.
• Delete it: delete a chat, Forget a fact, delete a voicemail, "Delete all my transcripts", or delete your account in Settings.
• Stop keeping transcripts: Settings > Privacy.
• Turn analytics on or off: Settings > Privacy.
• Stop emails: untick product news; switch off voicemail emails. Service, billing, security and legal emails still come.

Deleting your account. In Settings, after you confirm, we cancel any plan at once, release your number, and delete your account, chats, transcripts (by destroying your key), About me, voicemails, texts and settings from our live systems right away. What we keep, and why: announcement and acknowledgment records (section 6, to answer legal claims); billing and tax records (the law); a record that you agreed to our terms, kept with the compliance records; a record that the account was deleted (its id and the time, nothing else), kept outside our database so a restored backup can't bring the account back (section 9); a number's history without your name (to show it was released); a contentless note that a voicemail was deleted (so it isn't recreated); the admin audit log; and anything under a legal hold. We keep these only for those purposes. Backups follow section 9. Minutes you used past your plan before deleting are billed, as they would have been at the end of the period. A suspended account can't be deleted in the app while we review it: write to support@relayreply.com and we'll handle the request once the review allows, keeping what the review needs. The other party's copy of anything (for example a business's notes of your call) is theirs.

We respond to requests within 45 days. We'll verify your identity using your signed-in account or your email. You won't be treated differently for using your rights.

12. US state privacy disclosures

This section gives the disclosures required by the California Consumer Privacy Act (CCPA) and similar state laws.

12.1 Categories we collect (last 12 months)

12.2 Selling, sharing and sensitive information

We don't sell personal information, don't share it for cross-context behavioral advertising, and have not done so in the last 12 months. We use sensitive personal information only for purposes the CCPA allows (providing the Service you asked for), so we don't offer a "limit" link.

12.3 Your rights (California and similar states)

You can ask to know what we collected and why, to delete it, to correct it, and to opt out of sale or sharing (which we don't do). You can use an authorized agent; we'll ask the agent for proof and may ask you to verify. If we refuse a request, you can appeal by replying to our answer; we'll respond within 45 days. We won't discriminate against you for using these rights.

13. Children

RelayReply accounts are for adults 18 and over; we don't knowingly let a child have an account. If you think a child has one, tell us and we'll delete it. Your calls may still involve information about other people, including your own children (for example, booking their doctor's appointment); that is part of your content and is handled under this policy.

14. Where data is processed

We and our providers store and process data mainly in the United States: our servers in Virginia (Fly.io), our database (Supabase), analytics in Virginia (PostHog US). Our website is delivered by Cloudflare's global network, and some providers may process data in other countries under their own terms (see the Subprocessors list).

15. Changes

We'll post any change here with a new effective date, and tell you in the app or by email before a material change takes effect.

16. Contact

support@relayreply.com · TooAvid Technologies LLC, 5500 Sunrise Highway, Unit 50 #1108, Massapequa, NY 11758.