Relay Logics — Privacy Policy

What we collect

• Account information — your name, email address, timezone, role, and organization. Passwords are stored only as Argon2id hashes.
• Contact methods you add — email addresses and phone numbers you register to receive alerts, together with the date and time you consented to automated messages and whether the destination was verified.
• Device push tokens — registered by the mobile app so incident alerts can reach your device.
• Incident and alert data — the content your team's monitoring systems send to Relay Logics (summaries, technical metadata, timelines, notes).
• Operational logs — IP addresses and request metadata used for security and rate limiting.

How we use it

Solely to operate the service: authenticate you, deliver incident notifications according to your own notification rules, keep an incident timeline for your team, secure the platform, and comply with carrier messaging requirements. We do not use your data for advertising, and we do not sell it — to anyone, ever.

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text-messaging originator opt-in data and consent are never shared with any third party.

Service providers

We use a small set of infrastructure providers, acting on our instructions, to deliver the service: hosting (Hostinger), transactional email (Postmark), SMS and voice calls (Twilio), mobile push delivery (Expo), and — for the optional voice/text assistant — natural-language processing (Anthropic; only the text of your typed or transcribed commands is processed, and audio never leaves your device). Each receives only what it needs to deliver its function.

Text messaging

SMS and voice alerts are governed by our SMS Notification Policy: numbers are added only by their owners, require an explicit consent checkbox and a verification code, and can be stopped at any time by replying STOP or removing the number in the dashboard.

Retention & security

Alert and notification delivery records are pruned after 180 days. Account and configuration data is kept until you delete it or your organization is closed; consent records are retained as compliance evidence. All traffic is TLS-encrypted; passwords, API keys, and session tokens are stored only as cryptographic hashes; every query is isolated to your organization.

Cookies

The dashboard uses a single httpOnly session-refresh cookie required for sign-in. There are no advertising or cross-site tracking cookies.

Your choices

You can view, edit, or remove contact methods and notification rules in the dashboard at any time. For access, correction, or deletion requests — or any privacy question — contact alerts@relaylogics.com. We will update this page when our practices change and revise the effective date above.