Privacy Policy

RelayIt is operated by Ecrof Media Co. We build a voice to CRM tool that captures conversations from a mobile app and a Chrome extension, transcribes them, extracts structured information, and routes the result to the customer relationship management system you choose.

This page explains what we collect, how we use it, who else processes it on our behalf, and the choices you have.

We collect three categories of information.

Account information

Email address, password hash, and any profile fields you choose to provide (name, business name, role). When you connect a CRM, we store the credentials or tokens needed to write to it.

Voice and content you submit

Audio recordings you choose to capture, the resulting transcripts, and the structured data we extract from them (decisions, commitments, action items, contact mentions, deal context). We also store any text notes or fields you submit through the app.

Device and usage data

Basic technical data needed to operate the service: device type, operating system, app version, IP address at request time, and timestamps. We use a small amount of error and performance telemetry to keep the service running. We do not run advertising trackers.

• To deliver the core service: capture, transcribe, extract, and route to your CRM.
• To authenticate you and keep your account secure.
• To respond to support requests.
• To send service messages (account, security, billing, important changes).
• To improve product quality and reliability through aggregated, de-identified usage analysis.

We do not sell your data. We do not use the content of your recordings or transcripts to train third party AI models. We do not use your data for advertising.

We share data only with the subprocessors that operate parts of the RelayIt service on our behalf. They are bound by data processing terms and cannot use your data for their own purposes.

• Supabase for authentication, database storage, and file storage.
• Vercel for marketing site hosting.
• Stripe for payment processing if you subscribe to a paid plan. Card data is handled directly by Stripe and not stored on our systems.
• Apple App Store and Google Play for mobile app distribution and crash diagnostics.
• Your CRM provider (Salesforce, HubSpot, GoHighLevel, Pipedrive, or any other connected destination) when we write extracted data to it on your instruction.
• A large language model provider for structured extraction of decisions, commitments, and contextual fields from transcripts. The provider does not train on customer data sent through their API.
• A speech recognition provider for transcribing voice recordings.
• An application backend hosting provider for the RelayIt API.
• An error monitoring service for application reliability and performance, configured with PII scrubbing.

The specific identities of the four uncategorized subprocessors above are available to enterprise customers under a non-disclosure agreement. Write to privacy@relayitiq.com to request the list.

We may also disclose data when required by law, to protect rights, safety, or to investigate fraud or abuse.

• Voice recordings: kept for up to 90 days, then deleted from our storage. You can delete a recording at any time.
• Transcripts and extracted fields: retained while your account is active. They form your conversation history and can be exported or deleted on request.
• Account data: retained while your account is active. Deleted within 30 days of account closure, except where law requires longer retention.
• CRM tokens: retained while the integration is connected. Revoked and deleted when you disconnect.

You can request access to your personal data, correction, export, or deletion by writing to us at the contact below. If you are in the European Economic Area, the United Kingdom, or California, you have additional rights under the GDPR, UK GDPR, and the California Consumer Privacy Act (CCPA), including the right to object to processing and to lodge a complaint with your local supervisory authority.

We respond to verified requests within 30 days. For California residents, we do not sell personal information and do not share it for cross context behavioral advertising.

You are responsible for following the call recording laws of the jurisdictions you operate in. RelayIt provides a consent mode and a visible recording indicator. You should disclose that a conversation is being recorded when the law of your location, or the location of any other participant, requires it. Two party consent jurisdictions (including California, Florida, Illinois, Pennsylvania, Massachusetts, Maryland, Montana, New Hampshire, Washington, and Connecticut) require all parties to consent to recording.

We use industry standard practices: TLS in transit, encryption at rest for stored audio and database records, role based access controls, and least privilege defaults for staff. No system is perfectly secure. We will notify you and applicable regulators of a breach affecting your data within the timelines required by law.

RelayIt is operated from the United States. If you access the service from outside the United States, your data will be transferred to and processed in the United States. Where required, we rely on standard contractual clauses or other lawful transfer mechanisms.

RelayIt is a business tool. It is not intended for anyone under 16. We do not knowingly collect personal information from children. If you believe a child has provided data to us, contact us and we will delete it.

We may update this policy as the product evolves. Material changes will be communicated through the app or by email at least 14 days before they take effect. The effective date at the top of this page reflects the current version.

Questions, requests, or complaints: write to privacy@relayitiq.com.

Mailing address available on request. RelayIt is a product of Ecrof Media Co.