Relay Privacy Policy

Information Relay receives

• Account and sign-in information: your email address, account identifier, sign-in method, and profile details that you provide or that a sign-in provider shares, such as a name or profile image.
• Customer activity: information you submit through account features, inquiries, feedback, or requests, where those features are offered.
• Business and Vendor information: contact and business details, profile content, links, images, products or services, applications, invitations, event participation, documents, messages, and related status or decisions.
• Organizer, venue, and event information: administrator memberships, venue and event details, published listings, participation records, and changes made in management tools.
• Technical and security information: session information, basic browser and device details, request and error records, and activity needed to operate and protect the service. Some public features record aggregate interactions without attaching them to an account.

Information in public listings, including business names, descriptions, links, images, venue details, and event information, may be visible to anyone. Application and account information is handled in the relevant account or organizer workflow rather than automatically becoming public.

Google sign-in

If you choose Google sign-in, Google and Relay's authentication provider, Supabase, exchange information needed to verify your identity. Relay uses the Google account identifier, email address, and basic profile information made available through the sign-in flow to create or connect your account, recognize you on later visits, and secure access. The sign-in configuration uses the OpenID Connect, email, and basic profile scopes. Relay does not request access to your Gmail, Google Drive, contacts, or calendar through this sign-in flow.

Google sign-in information is used for authentication and account support. Relay does not sell it or use it for advertising. Your Google account identifier is not a public listing field. An account email may be visible to an authorized Organizer when needed for an application, invitation, or membership workflow. Signing in creates or identifies a Customer account; Vendor and Organizer permissions require a separate accepted application, authorized invitation, or organizer membership. You can manage third-party access in your Google Account, and you may contact us to request deletion of your Relay account. Revoking Google access alone may not remove information already stored in Relay.

How information is used

Relay uses information to provide accounts and sign-in, show and manage listings and events, route applications and invitations, support organizer decisions and Vendor participation, respond to requests, send service-related messages, maintain records of actions, troubleshoot problems, and protect the service against misuse. Relay may use information to comply with legal obligations or resolve disputes.

Who can receive information

Relevant Organizers can receive application, participation, and business information needed to review and run their activities. Vendors and other users can see information made available to them through the service, and the public can see published listings. Relay uses Supabase for authentication, database, and related storage functions, Vercel to host and deliver site pages, and Resend to send applicable service email. These providers receive information needed for their roles. Information may also be disclosed when required by law or to protect rights or safety, subject to applicable law.

When you follow a link to a business, organizer, venue, or other third-party site, that site's privacy practices apply to your activity there.

Sessions and security

Relay uses browser storage and authentication session data to keep you signed in and support the account features you choose. We use access controls and other reasonable measures to protect information, but no online service can guarantee absolute security. Please protect your sign-in credentials and report suspected misuse to us.

Retention, access, and deletion

Relay keeps information while it is needed to operate an account or activity and for legitimate operational, security, legal, and dispute-resolution purposes. Retention depends on the kind of record and context; this policy does not promise a single deletion period. Public content may remain until it is unpublished or removed. Records associated with an Organizer's event or a completed application may need to be retained even after an individual account is closed.

To request access, correction, or deletion of your Relay account or personal information, email jason@jasonpeltier.com. Include the email address associated with your account and enough detail to identify the request; please do not send passwords. We may verify your identity before acting. We will review the request, explain any information we must retain, and remove or de-identify information where appropriate and feasible. You can also ask an Organizer to correct information it controls. Removing a Relay account does not automatically remove information held independently by a business or Organizer.

Updates and contact

We may update this policy as Relay changes. The effective date above shows the latest published version. Material changes will be communicated through the service or another appropriate channel. For privacy questions, contact jason@jasonpeltier.com. See the Terms of Service for the rules governing use of Relay.