RELAY· Powered by Sideways8
PUBLIC DATA STANDARD · VERSION 2026-10-15

Data Governance, Retention & AI Disclosures

RELAY collects the minimum data needed to operate a private career and opportunity workspace. Personal data, private workspace content, uploaded materials and contact data are not sold.

Minimum necessaryMember-controlledNo personal-data resaleHuman-confirmed writes
01 · COLLECTION SOP

Collect only what creates member value.

RELAY may collect

  • Information required to create, authenticate and protect an account.
  • Career evidence, goals, work preferences and constraints supplied by the member.
  • Opportunities, sources, dates, status, provenance and user corrections needed to operate the intelligence engine.
  • Relationship information deliberately imported or entered by the member.
  • Usage totals and limited product telemetry needed for cost, reliability and product operations.
  • Billing status and processor references needed to administer a subscription.

RELAY will not intentionally collect

  • Third-party passwords, session cookies or authentication secrets for scraping protected services.
  • Social Security numbers, government identification, bank credentials or full payment-card numbers.
  • Medical records, diagnoses, biometric templates or precise continuous location.
  • Protected-trait profiles or inferences for ranking employment or contract opportunities.
  • Bulk private messages, email archives or address books without a specific user-selected import and purpose.
  • Paywalled or subscription content through access circumvention or terms-of-service bypass.
  • Data collected merely because it may become useful later.
02 · RETENTION SOP

Every retained category needs a purpose and an exit.

CategoryExamplesPurposeRetention rule
Account and authenticationEmail, display name, password hash or connected sign-in identifier, and the profile photo a Google or LinkedIn sign-in sharesProvide and secure the accountFor the active account; deleted when the account is deleted, except a minimal pseudonymous trial-abuse record
Private workspaceProfile, goals, preferences, opportunities, pursuit status, notes and relationshipsPersonalize RELAY and preserve progressUntil the member deletes the record or account
Uploaded materialsFiles, extracted text and file metadata the member selectsEvidence, tailoring and requested analysisUntil the member deletes the material or account
Source recordsOpportunity URLs, public descriptions, dates, confidence and provenanceVerify, rank, deduplicate and refresh opportunitiesWhile relevant to the workspace; removed with account deletion
AI requests and resultsThe minimum workspace context needed for the initiated actionReturn the requested analysis or proposed workspace actionRELAY does not create a separate prompt-history archive; approved results saved to the workspace follow workspace retention
Product telemetryAccount-scoped feature name, action type and timestamps; optional device/section context with submitted feedbackReliability, capacity and product improvementReview every 90 days; remove or aggregate when no longer needed
Member feedbackRating, category, message and optional screenshotDiagnose and improve RELAYUntil resolved or the member deletes the account; reviewed at least every 180 days
Billing recordsPlan, billing status and processor references; payment-card data stays with the processorSubscriptions, accounting, disputes and legal obligationsAccording to processor and applicable accounting/legal requirements
Security and audit recordsConsent version, approved write, provenance and limited security eventsAccountability, fraud prevention and incident responseOnly as long as reasonably necessary; reviewed annually
03 · AI DISCLOSURES

AI supports decisions; it does not make them for the member.

Who processes AI requests

RELAY’s AI features are processed by Anthropic, PBC, using its Claude models, through RELAY’s servers. If RELAY changes AI providers, we will update this page before or when that happens.

What is sent

Only the information needed for the action you take: your question or request, relevant details from your RELAY workspace (such as opportunities, your career profile and notes you choose to include), and profile signals you have accepted from connected sources. Passwords, account tokens and payment details are never sent. From a connected mailbox or calendar, RELAY sends only the signals you accept: an email’s subject line, sender and date, or a meeting’s title and date. Email bodies and attachments are never sent. When you practice for an interview, RELAY sends the role and its description, the company, the interview’s stage, format and goal, the interviewers’ titles (never their names), your Strategy Brief and proof stories if you have them, and the answers you type; your answers are processed by RELAY’s AI provider only to give you feedback, are saved with that interview in your workspace (the last three sessions) and are not used to train AI models.

Research about other people

When you research a contact or a hiring team, RELAY sends that person’s name, title and employer to the AI provider, which searches public sources. Results are labeled with their sources and confidence, unverified details wait for your review, and nothing is published or shared with other members.

Accuracy

AI output can be incomplete, stale, biased or wrong. Members must verify source status, requirements, dates, eligibility, contacts and material decisions.

Human approval

RELAY may propose saved changes. It does not apply, submit, send, purchase, sign or make an external commitment without an explicit member action.

No professional advice

RELAY is not legal, tax, financial, medical, immigration or employment counsel. Members should use qualified professionals for high-stakes decisions.

No guaranteed outcome

Scores, rankings and recommendations do not guarantee an interview, contract, compensation level, response or business result.

Cost controls

AI and live research use metered capacity. Manual scans display their action count or estimate before they run. If a member separately enables Daily smart refresh, RELAY may run one Lean research action on the first eligible visit after 7:00 a.m., no more than once per day; the member may disable it at any time.

Fairness

Opportunity ranking must not intentionally use protected traits. Members should review outputs for bias and correct unsupported assumptions.

04 · THIRD-PARTY SOURCES

Access must be authorized, attributable and reversible.

  1. Public sourcesUse public pages and direct employer, buyer, ATS or procurement records; preserve the URL and collection date.
  2. Subscribed sourcesUse an approved vendor API/OAuth flow, a user-controlled browser connector or a user-selected link/document. RELAY does not request or retain the member’s source password.
  3. VerificationAn index or search snippet is discovery evidence, not proof. Current status must be checked against the direct record whenever possible.
  4. RevocationA member must be able to disconnect a source and stop future access without losing unrelated workspace records.
  5. Contact details on request.When you ask RELAY for a contact’s email or phone, RELAY sends that person’s name, employer and public profile link to FullEnrich, a contact-data provider, which returns details only when it can verify them. RELAY does this only when you ask.
  6. Emails you ask for.When you ask RELAY to email you a link, RELAY sends your email address and that message to Resend, its email provider. RELAY sends no marketing email.

Third-party names and trademarks belong to their owners. Listing a source does not imply partnership, endorsement or guaranteed access. Provider terms, licensing, subscription fees and usage limits continue to apply.

05 · DATA BUSINESS POLICY

Build revenue from the product—not from selling the member.

PRIMARY REVENUE

Subscription and metered value

Charge for workflow capacity, verified research actions, storage tiers, premium connectors and human strategy—not access to personal data.

PERMITTED ANALYTICS

Product operations

Use minimum account-level usage and cost data to operate, secure, support and improve RELAY according to the member’s choices.

FUTURE OPTION · NOT ACTIVE

Aggregate market benchmarks

Consider only after separate explicit opt-in, documented de-identification, a minimum cohort of 25, contractual re-identification prohibition, privacy review and a member opt-out. Never expose a person, employer, client, contact or confidential pursuit.

PROHIBITED

Personal-data resale

Do not sell or license personal profiles, workspace content, uploaded evidence, contacts, messages, source credentials or individual behavioral histories.

06 · ACCOUNTABILITY SOP

Make the policy operational.

  1. Quarterly inventoryConfirm every collected field still has an owner, purpose, retention rule and deletion path.
  2. Monthly access reviewReview administrative access, connected services, secrets, data exports and failed deletion requests.
  3. Incident containmentStop affected processing, preserve necessary evidence, rotate compromised access, assess scope and document decisions.
  4. NotificationNotify affected people and regulators when required by applicable law; provide plain facts, impact and protective steps.
  5. Change controlMaterial policy changes require a new notice version and renewed member acknowledgement before continued personalized processing.

Scope and review

This is RELAY’s published operating standard and product commitment. It is not a substitute for legal advice, a jurisdiction-specific privacy notice, vendor data-processing agreements, a security audit or counsel review. Sideways8 should have privacy counsel validate the final retention periods, consumer-rights process, subprocessors, cross-border obligations and any future aggregate-data offering before general availability.

RELAY Privacy PolicyRELAY Terms of ServiceFTC: Protecting Personal Information ↗California Privacy Protection Agency FAQ ↗NIST Privacy Framework ↗ICO Storage Limitation ↗