Privacy

What we hold about you

Your name, email address, and which business you belong to. If you sign in with Google or Microsoft we receive your name and email address from them, plus a token that keeps you signed in. We never receive your password.

What we hold about your business

The messages, contacts and money documents that reach the system — because you connected an account, or because a customer wrote to you. This is your business's own record. It is kept so the software can show you what is waiting on a reply and what is owed.

Google user data

Signing in. We ask Google only for openid, email and profile — enough to know who you are and to keep you signed in. Nothing else.

Connecting a mailbox or calendar is a separate, later choice, and asks separately. If you make it, we read your calendar and mail in order to show you clashes in your diary and messages waiting on a reply. We do not send mail as you unless you approve a specific message first.

We do not sell Google user data, do not use it for advertising, do not transfer it to third parties except as needed to run the service, and do not use it to train models — ours or anyone else's.

Connected accounts

A connection is stored as a token, encrypted with a key held outside the database. There is no way to read that token back out — not through the app, not through the API, and not by us. It is decrypted only at the moment of a call, and every such decryption is recorded.

You can disconnect at any time from the Accounts screen. That stops us using it; you should also remove our access in your Google or Microsoft account settings, because revoking there is the only thing that takes the permission away at their end.

Who can see it

People in your own business. If you came through a consultant or partner, they can see your workspace too — that is what they are for, and why you were set up under them. Nobody in another business can see your data: the software separates workspaces at the point every request is authorised, not in the screens.

What is recorded

Anything that changes something is written to an audit log with who did it and when — including attempts that were refused. That log exists so that "who read this credential, and when" has an answer.

Where it is kept

On servers we operate. Messages to and from your customers are also carried by the platform you use — WhatsApp, or your email provider — and by the conversation service that connects to it; their handling is governed by their own terms. Where we hold a copy, this page covers it.

Asking for your data, or its deletion

Write to privacy@relw.ai. ⚠ There is no self-service export or deletion button yet — saying otherwise would be untrue.

Verixiom Pte Ltd · Singapore · privacy@relw.ai