Privacy Policy

Effective Date: June 6, 2025
Last Updated: June 6, 2025

1. Introduction

TED TOO (ABN 24 340 674 495) ("we," "our," or "us") operates RelayIt, a notification relay service that helps developers send messages across multiple channels. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service.

This policy applies to both our cloud-hosted service (RelayIt Cloud) and our open-source self-hosted solution.

2. Information We Collect

2.1 Information You Provide

• Account Information: Email address, organization name, and any profile information you choose to provide
• Payment Information: Billing details processed through Stripe (we do not store credit card information)
• API Credentials: Third-party service credentials you provide to enable message delivery (encrypted and securely stored)
• Configuration Data: Webhook URLs, notification preferences, and service settings

2.2 Message Data

• Message Content: Content of notifications you send through our service
• Metadata: Recipient information, delivery status, timestamps, and routing information
• Usage Data: API usage statistics, error logs, and performance metrics

2.3 Automatically Collected Information

• Usage Analytics: Service usage patterns and feature utilization (collected via PostHog)
• Technical Data: IP addresses, browser type, device information, and access logs
• Cookies: Essential cookies for authentication and session management

3. How We Use Your Information

We use your information to:

• Provide and maintain our notification relay service
• Process and route your messages to designated recipients
• Authenticate your account and secure your data
• Process payments and manage your subscription
• Provide customer support and respond to inquiries
• Improve our service through usage analytics
• Comply with legal obligations and enforce our terms

4. Data Retention

4.1 Account Data

We retain your account information for as long as your account is active or as needed to provide services.

4.2 Message Data

• Message Content: Retained for a maximum of 24 hours by default (configurable, can be set to no retention)
• Message Metadata: Retained for the duration of your subscription for analytics and support purposes
• Usage Logs: Retained for up to 12 months for service improvement and compliance

4.3 After Account Termination

We delete or anonymize your personal data within 30 days of account termination, except where retention is required by law.

5. Data Sharing and Disclosure

5.1 Third-Party Service Providers

We share data with:

• Payment Processors: Stripe for payment processing
• Analytics Providers: PostHog for usage analytics
• Notification Providers: Your configured providers (AWS SES, SNS, etc.) to deliver messages
• Infrastructure Providers: Hosting and security service providers

5.2 Legal Requirements

We may disclose information when required by law, court order, or to protect our rights and safety.

5.3 No Sale of Data

We do not sell, trade, or rent your personal information to third parties.

6. Data Security

We implement industry-standard security measures:

• Encryption of data in transit and at rest
• Regular security audits and monitoring
• Access controls and authentication systems
• Secure data centers and infrastructure

7. International Data Transfers

Our cloud service operates in multiple regions (Singapore, US East). By using our service, you consent to the transfer of your data to these regions. We ensure appropriate safeguards are in place for international transfers.

8. Your Rights and Choices

8.1 Access and Control

You can:

• Access and update your account information
• Export your data before account termination
• Configure message retention settings
• Delete your account and associated data

8.2 Communication Preferences

You can opt out of non-essential communications while maintaining service-related notifications.

8.3 Cookie Controls

You can manage cookie preferences through your browser settings, though some functionality may be limited.

9. Children's Privacy

Our service is not intended for individuals under 13 years of age. We do not knowingly collect personal information from children under 13.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on our website and updating the "Last Updated" date. Continued use of our service after changes constitutes acceptance of the updated policy.

11. Contact Information

For questions about this Privacy Policy or our data practices, contact us at:

Email: [email protected]
Address: Sydney, NSW, Australia

12. Jurisdiction

This Privacy Policy is governed by Australian privacy law, including the Privacy Act 1988 (Cth). For users in the European Union, we also comply with applicable GDPR requirements. For California residents, we comply with applicable CCPA requirements.

---

This policy is part of our Terms of Service and should be read in conjunction with our Acceptable Use Policy.