Privacy Policy
Last updated: 8 August 2026
This policy explains what Relayrix ("we", "us") collects when you buy and manage a Relayrix subscription on this website, and what we do with it.
The most important point
Relayrix is self-hosted software. It runs on infrastructure you control.
The files, messages and records that the Software processes never reach us. We do not receive them, store them, or have any means of accessing them. That includes any health, financial or personal data you move with the Software.
What follows is only about the small amount of information involved in buying and managing your subscription on this website.
What we collect
When you create an account : Your name, email address, and — if you provide it — your company name. Your password is stored only as a bcrypt hash; we never see or store the password itself.
When you subscribe : Billing records: subscription status, amounts, invoice dates and invoice numbers, plus the identifiers our payment processor gives us for your customer and subscription records.
When you use your account : Sign-in times, the IP address a request came from, and a record of each installer download (who, which version, when). We keep these for security and support.
When you contact us : Whatever you choose to include in a refund request or support email.
When you visit the website : Counts of page views, and the country, browser type, device type and referring site they came from, collected by our analytics provider. This is counted in aggregate and is not linked to your account. It sets no cookies and does not track you across other websites.
What we do not collect
- We do not store card details. Card numbers are entered directly into fields hosted by our payment processor and are transmitted straight to them. Card data never reaches our servers, is never written to our database, and never appears in our logs. We can see only the brand, last four digits and expiry date, which we read from the processor when you view your account — we do not store even that.
- We do not collect the data the Software processes. See above.
- We do not use advertising or cross-site tracking cookies. The only cookies we set are the session cookie that keeps you signed in and a CSRF-protection cookie.
Why we hold it, and on what basis
| Purpose | Information used |
|---|---|
| Provide your license and download | Account details, subscription status |
| Take payment and renew | Billing records, processor identifiers |
| Keep the account secure | Password hash, sign-in times, IP address |
| Support and refunds | Account details, your messages |
| Meet legal and accounting duties | Invoice and payment records |
| Understand which pages are useful | Aggregate page-view counts |
Where a legal basis is required, we rely on performance of our contract with you, our legitimate interest in operating and securing the service, and compliance with legal obligations.
Who we share it with
We share the minimum necessary with service providers who help us operate:
- Our payment processor — to take payment, renew subscriptions and issue receipts.
- Our email provider — to send verification, license, billing and support email.
- Our hosting provider — which stores this website and its database.
- Our analytics provider — which counts page views so we can see which pages are useful.
We do not sell your information, and we do not share it for anyone else's marketing.
We may disclose information where legally required, or to protect our rights or the safety of others.
How long we keep it
- Account details — while your account exists, then up to 12 months.
- Billing and invoice records — as long as tax and accounting law requires (commonly 7 years).
- Sign-in and download records — up to 24 months.
- Email logs — up to 12 months.
- Website visit counts — retained by us indefinitely. These are aggregate daily totals only (page views, visits, the most-requested pages and referring sites); they contain nothing that identifies a visitor. Our analytics provider discards its own copy after 21 days.
Security
Traffic to this site is encrypted with TLS 1.2/1.3. Passwords are bcrypt-hashed. Access to billing functions is restricted to the account owner. Administrative access to our systems is limited to people who need it.
No system is perfectly secure, but card data specifically is outside our reach by design rather than by policy.
Your rights
Depending on where you live, you may have the right to access, correct, delete, or receive a copy of your information, to object to or restrict certain processing, and to complain to a data-protection authority.
You can view and edit your name, company and password directly in My Account. For anything else, contact us at the address below and we will respond within the period the applicable law requires.
HIPAA and Business Associate Agreements
Because Relayrix is self-hosted and no data the Software processes ever reaches us, we do not receive, maintain or transmit protected health information on your behalf through the Software, and we are therefore not acting as a Business Associate in respect of it.
If your compliance program nonetheless calls for a Business Associate Agreement, tell us and we will review the request with you.
International transfers
Our service providers may process information in countries other than yours. Where required, we rely on appropriate safeguards for those transfers.
Children
This service is sold to organizations and is not directed to children. We do not knowingly collect information from anyone under 16.
Changes
We may update this policy. Material changes will be notified to the email on your account. The "last updated" date above always reflects the current version.
Contact
Privacy questions or requests: [email protected]