Privacy Policy

1.1 Account Information

When you create a RelayKit account, we collect:

• Email address — used for magic link authentication, account communications, and registration status notifications
• Full name — submitted as part of your 10DLC registration
• Phone number — used for carrier OTP verification during the registration process
• Business information — business name, type (LLC, corporation, sole proprietor, etc.), EIN (if applicable), street address, city, state, and ZIP code, as required for 10DLC brand registration

1.2 Registration and Use Case Information

When you go through the registration process, we collect:

• Use case selection — the type of SMS messaging you intend to send (e.g., appointment reminders, order updates, verification codes)
• Business description — a brief description of your application or service
• Service-specific details — depending on your use case, additional context such as service type, product type, community name, or venue type
• Website URL — if you have an existing website for your application
• Message plan selections — the message templates you choose and configure through the dashboard

1.3 Payment Information

We use Stripe to process payments. RelayKit does not directly collect, store, or have access to your full credit card number, expiration date, or CVV. Stripe collects and processes payment information in accordance with their privacy policy. We receive from Stripe: a tokenized payment method identifier, billing email, payment status, and transaction history.

1.4 Usage Data

We automatically collect:

• API usage — request timestamps, endpoints called, response codes, message counts, and error rates
• Dashboard activity — pages visited, features used, and session duration (collected via standard web analytics)
• Message metadata — timestamps, recipient phone numbers, delivery status, and compliance check results for messages sent through RelayKit
• Message content — the text content of outbound SMS messages routed through RelayKit (see Section 4 for retention details)

1.5 Technical Data

We collect standard technical data including IP address, browser type, operating system, device type, and referring URL. This is used for security, fraud prevention, and service improvement.

3.1 Service Providers

We share information with third-party service providers who help us operate the Service:

These providers process your information only as necessary to provide their services to us and are contractually obligated to protect it.

3.2 Carrier Registration

When you register for 10DLC, your business information (name, EIN, address, use case, campaign description, and sample messages) is submitted to The Campaign Registry (TCR) and shared with US mobile carriers (AT&T, T-Mobile, Verizon, and others) as part of the brand and campaign registration process. This sharing is required for the Service to function — without it, your messages cannot be delivered. Carrier data handling is governed by each carrier's own privacy policies.

3.3 Legal Requirements

We may disclose your information if required by law, legal process, or governmental request, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others, investigate fraud, or respond to a government request.

3.4 Business Transfer

If RelayKit LLC is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you via email before your information becomes subject to a different privacy policy.

3.5 No Sale of Personal Information

We do not sell, rent, lease, or trade your personal information to third parties for their marketing or commercial purposes. We do not share your information with data brokers.

6.1 Access and Portability

You may request a copy of the personal information we hold about you by contacting support@relaykit.ai. We will provide the information in a structured, commonly used format within 30 days.

6.2 Correction

You may update your account information through the dashboard at any time. For corrections to registration data that has already been submitted to carriers, contact support@relaykit.ai.

6.3 Deletion

You may request deletion of your account and associated data by contacting support@relaykit.ai. Upon receiving a verified deletion request:

• Your account will be deactivated and messaging services suspended
• Personal information will be deleted within 30 days, except where retention is required by law or for legitimate business purposes (e.g., tax records, fraud prevention)
• Message content and metadata will be deleted according to the retention schedule in Section 4

6.4 Opt-Out of Communications

You may opt out of non-essential email communications (such as product updates or feature announcements) at any time. You cannot opt out of transactional emails related to your account, registration status, compliance alerts, or payment notifications, as these are necessary to provide the Service.

6.5 California Residents

If you are a California resident, you may have additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA), including the right to know what personal information we collect and how it is used, the right to delete personal information, the right to opt out of the sale of personal information (we do not sell personal information), and the right to non-discrimination for exercising your privacy rights. To exercise these rights, contact support@relaykit.ai.

7.1 Your End Users' Information

When you send SMS messages through RelayKit, we process your End Users' phone numbers and the content of messages sent to them. We process this information on your behalf as a service provider — you are the controller of your End Users' data.

7.2 Our Use of End User Data

We use End User data only to:

• Route messages through carrier infrastructure
• Enforce the compliance rules described in our Terms of Service and Acceptable Use Policy
• Generate aggregate, anonymized analytics (message volumes, delivery rates)

We do not use End User phone numbers or message content for our own marketing purposes, build profiles of End Users, sell End User data, or contact End Users directly (except to confirm opt-out requests as required by carrier policy).

7.3 Your Obligations

You are responsible for providing appropriate privacy disclosures to your End Users, obtaining valid consent before sending messages, honoring opt-out requests, and complying with all applicable privacy laws regarding your End Users' data. You are responsible for ensuring your privacy policy and opt-in flow meet the requirements of applicable law for your specific use case and jurisdiction.