Privacy Policy
Last reviewed alongside this release.
This page describes what information Relac processes and why, based on how the product actually works today.
Account and organization information
When you sign up, we store your name, work email, and password (hashed, never in plain text), along with the name of the organization workspace you create or join.
Business relationship data
Companies, Relationships, Engagements, Bilateral Agreements, events, and documents you record are stored to provide the product itself. This data is isolated to your organization at the database level, and is visible to a counterparty only when a Bilateral Agreement or explicitly shared evidence makes it so.
Authentication and session data
We store session tokens to keep you signed in, and use them to verify each request belongs to an authenticated member of your organization.
Uploaded documents
Documents you attach as evidence are stored with our file storage provider and are only ever accessible to your own organization, or to a counterparty you have explicitly shared a specific document with.
Payment information
Billing is processed by Stripe. Relac does not store your card details — they are handled directly by Stripe’s own hosted checkout and billing portal.
Transactional email
Account verification, password reset, and invitation emails are delivered through Resend, a transactional email provider. These emails contain only what is necessary to complete the relevant action.
What we do not do
We do not sell personal data. We do not use your business relationship data to train models or share it with unrelated third parties. We make no claim to any specific certification or compliance framework at this time.