Privacy Policy

What we collect

• Account: email, password hash, KYC fields and document URLs
• Wallets and transactions: amounts, currencies, memos, timestamps
• Support: ticket subject/body and uploaded proofs

Processors

We share data only with these processors to run Relay:

• Supabase — database, auth, storage, realtime (EU/US per your project)
• Stripe — card/bank deposits in test then live mode, webhooks
• Resend — transactional email (verify, 2FA, ticket updates) from noreply@yourdomain
• Twilio — SMS for 2FA and ticket updates where enabled
• Vercel — hosting, logs, analytics
• Sentry / PostHog — error tracking and privacy-friendly analytics (if enabled, no non-essential cookies without consent)

Retention and deletion

You can delete your account in Settings — Delete my account — permanently, with a receipt. We soft-delete users.deleted_at and anonymize ledger where audit requires retention; files are purged from storage and referral tree anonymized. See Settings for one-click flow.

Cookies

Essential cookies for auth (http-only) only. Non-essential analytics cookies only with consent (EU/UK) — banner shown if enabled.