Privacy Policy

Three different people interact with Relay, and this policy covers all of them: account owners (the business that signs up and connects Meta ad accounts), notify contacts (whoever's phone number is set to receive lead alerts for a given Page (often the account owner themselves, sometimes a teammate or client)), and leads (people who fill out a Meta Lead Ads form; their information passes through our systems so the relevant notify contact can be notified, but they never log in or interact with Relay directly).

Account information: business name, owner name, owner email and phone number, password (stored as a one-way hash; we never store or have access to the plain-text password), default country, and time zone.

Billing information: if you're on a paid subscription, our payment processor, Stripe, collects and holds your name, billing address, and payment method details in order to charge your subscription. We never see or store your full card number. Only Stripe does, under its own PCI-compliant systems. On our side, we keep only your subscription plan and billing status.

Notify contact information: the business/Page name for each connected Meta ad account, and the phone number designated to receive lead alerts for that Page.

Lead information: when someone submits a Meta Lead Ads form, we receive whatever fields that form collects (typically name, phone number, and email) directly from Meta, using the account owner's own connected access token. We use this only to notify the relevant notify contact; the lead is never texted or contacted by Relay itself.

Message content: the text of SMS messages we send (lead alerts, reminders) and the inbound messages we receive on that same number (including STOP/HELP replies), along with delivery status and timestamps.

Website visits: we count visits to our public pages (which page, the site or ad that sent the visit, and whether it was on a phone or a computer) to see how people find us. These counts use a random code that lasts only while that browser tab is open, and don't include your name, email, or IP address.

Consent and technical records: to comply with Canada's Anti-Spam Legislation (CASL), we keep a record of consent for every phone number we send to, including the IP address the number was registered from. Since that number is usually entered by someone else (a business owner adding a client or team member's number), we also text the number itself a one-time confirmation request before sending anything further. Reminders and lead alerts only begin once that number's own owner confirms it.

• To deliver lead-alert text messages the moment a connected form gets a submission.
• To register and maintain CASL consent records for every number we message.
• To operate account login, the dashboard, and customer support.
• To detect, prevent, and investigate fraud, abuse, or security issues.

Each notify contact's leads and message history are scoped strictly to their own registered phone number. One notify contact's data is never visible to another's, and this is enforced in how our system queries data, not left to chance.

• Our SMS provider, to deliver text messages and honor STOP opt-outs. They receive the phone number and message content necessary to send each text.
• Our payment processor (Stripe), for paid subscriptions. They receive your name, email, billing address, and payment method details necessary to process your subscription.
• Meta, to measure our own advertising. Our ad landing page and signup pages use the Meta Pixel, and when you create an account or start a trial we send Meta that event from our server too, with your email address and user ID in hashed (scrambled) form plus your IP address and browser details, so Meta can tell which ad brought you. We don't use this tracking for visitors in Quebec. The leads and data inside your Relay account are never shared with Meta for this.
• Infrastructure providers that host our application and database, under standard hosting agreements.
• We do not sell personal information, and we do not share it with anyone for their own marketing purposes.
• Mobile phone numbers and text-message opt-in data and consent are never shared with third parties or affiliates for marketing or promotional purposes.

We keep account, lead, and message data for as long as the account is active, so the dashboard's lead log and message history stay useful. Records of individual delivery and billing events from our SMS and payment providers are automatically deleted after 30 days. They're used to process messages and subscription changes as they happen, and only need to be kept briefly afterward for troubleshooting. If you want your account or data deleted, contact us at info@relaylead.ca and we'll take care of it.

Sensitive credentials (Meta access tokens) are encrypted at rest. Passwords are hashed, never stored in plain text. All traffic to Relay is encrypted in transit. No system is perfectly secure, but we design with the assumption that a breach anywhere shouldn't expose more than it has to, including scoping every notify contact's data so it can never leak sideways to another one.

• Any phone number can opt out of receiving texts at any time by replying STOP, as required under CASL.
• Account owners can access or correct their information from the Settings page at any time.
• You can block the Meta Pixel with your browser's tracking protection or an ad blocker, and manage how Meta uses this data in your Facebook or Instagram ad settings.
• To request access to, correction of, or deletion of your information (including if you're a lead whose information passed through Relay), contact the business that used Relay to reach you, or email us directly at info@relaylead.ca.

Relay is intended for business use and is not directed at children. We don't knowingly collect information from anyone under 16.

If we make material changes to this policy, we'll update the date at the top of this page. Continued use of Relay after a change means you accept the updated policy.

Questions about this policy or how your information is handled? Email us at info@relaylead.ca.