Account
Your name and email address. If you sign in with Google, Microsoft or LinkedIn, RELAY requests only the standard openid, email and profile permissions and keeps your verified email address and name. If Google or LinkedIn shares your profile photo, RELAY keeps a private copy, shows it only to you as your account picture when you haven’t chosen your own, and deletes it with your account. So that any sign-in method you add opens the same account, RELAY records each linked provider’s account identifier and the email it verified; you can remove a method in Settings, and they are deleted with your account. If you create a RELAY password, RELAY stores only a salted hash of it (PBKDF2-SHA256), never the password. RELAY also stores when your email address was confirmed, by a Google, Microsoft or LinkedIn sign-in or by the confirmation link RELAY emails you, because RELAY sends requests to search firms or other members for you only after it is. RELAY also keeps your sign-in dates and, if RELAY is at capacity, your waitlist place.
Workspace content
What you enter or save: your career profile, goals and preferences, opportunities and their status, notes, contacts and relationships, interview and outreach drafts, and other workspace records. RELAY stores this in your private account so it is available on your devices, and keeps a working copy in your browser. RELAY can open your own email app (Gmail, Outlook or your device’s mail app) with an outreach message filled in; it goes straight from your browser to that app, and RELAY doesn’t send or see the email.
Uploaded documents
Files you choose to upload, such as a résumé or proof of work, with their names, types and sizes, and text RELAY extracts from them when you ask. File contents are stored privately in Cloudflare R2 storage under your account and are served only to you.
LinkedIn connections export
If you import the Connections.csv file from your LinkedIn data export, RELAY saves up to 30,000 connections (your most recent, by the date you connected) in private, encrypted storage that only your signed-in account can reach: name, company, position, profile URL, the date you connected and the email address when LinkedIn includes it. You can remove them at any time in My Data, and they are included in your data export and deleted with your account. If you drop the whole export ZIP instead, RELAY reads only Connections.csv from it, in your browser, and does not upload or keep the other files. RELAY uses your connections to show who you already know at an employer.
If you separately connect your LinkedIn account, RELAY shows your LinkedIn name and profile photo. That connection is kept in an encrypted cookie in your browser, not in RELAY’s database, and it cannot post to LinkedIn.
Imported contacts
If you import your contacts, as a vCard (.vcf) from Mac Contacts or iCloud.com or a CSV file from Google Contacts or Outlook, RELAY reads the file in your browser and keeps only each person’s name, company, job title, email addresses, phone numbers and LinkedIn profile link, and, for people with a company, a small copy (at most 128 by 128 pixels) of the photo already on their contact card. Notes, addresses, birthdays and every other field are dropped in your browser, the file itself is never uploaded, and RELAY never downloads a photo from a link in the file. “Import from Contacts” in the RELAY iPhone and Android apps sends the same fields from your device’s contacts, only when you choose it. RELAY keeps up to 30,000 contacts for each kind of import in private, encrypted storage that only your signed-in account can reach. No other member sees them, and their emails and phone numbers are never sent to FullEnrich, an AI provider or a search service. As with your LinkedIn connections, RELAY may look for a public photo of someone you know at a company with an open role (their name, employer and LinkedIn link only), and a note you ask RELAY to write names the person and how you know them. A newer import of the same kind replaces the last one.
RELAY uses them to show who you already know at an employer, with their face from your own contacts so no photo search is needed, to add the email and phone number you already have when you save someone as a contact, and to skip paid contact-detail lookups for details you already have. The photos are encrypted, kept apart from everything else, and shown only to you. Remove each import in My Data at any time, which removes its photos too; contacts you already saved keep what was added to them. Imported contacts are included in your data export and deleted with your account.
RELAY Network (only if you opt in)
If you list yourself in the RELAY Network directory (Settings → Account), other signed-in RELAY members with an active trial or plan can see your name, your sign-in photo if you choose to show it, your headline, the employers you choose, your industries and what you've said you can help with. Your email address and phone number are never listed. A member can send you an intro request with a short note; RELAY emails you about it. Only if you accept does RELAY share your sign-in email with that member, and theirs with you. You can decline, block or report any request; a report is kept for RELAY to review. Leaving the directory deletes your listing at once and declines requests still waiting on you. Your listing, the requests you sent and received, and the blocks you made are included in your data export and deleted with your account; blocks other members made against your account are kept so they cannot be undone by re-creating it. RELAY does not use your imported contacts or address books for the directory.
Which link brought you (only from tagged links)
If you arrive at RELAY from a link carrying a campaign tag, such as one in a RELAY post on LinkedIn, RELAY keeps that tag (the source, medium, campaign and post names, never anything about you) in a first-party cookie for 30 days. If you sign up within that time, RELAY saves the tag with your new account and deletes the cookie, so we can count which posts bring members. There are no advertising pixels or third-party trackers. The tag is in your data export and deleted with your account.
RELAY Exclusives (only when you ask)
Search firms give RELAY confidential searches to show members. Seeing them shares nothing about you. Asking to be considered and match alerts are part of RELAY Executive, and of the free week. If you ask to be considered for one, you first review exactly what that firm receives: your note, your name, headline, current role, location and LinkedIn profile link if you add one, all editable, plus your sign-in email so the firm can reply to you. Only after you confirm does RELAY email it to that one firm, once. Nothing else from your workspace is shared, and the firm can't search or browse RELAY members. RELAY keeps a copy of each request so it shows as requested; it is in your data export and deleted with your account. What a firm has already received is held by that firm under its own privacy policy. If you turn on match alerts, RELAY compares each new search with your target roles and emails you when one matches; firms never learn who receives alerts, and RELAY may tell a firm how many members match a search, never who. Turning alerts off deletes that setting and the record of alerts sent. Firms pay RELAY to list searches; members never pay to be considered, and what a firm pays never changes what RELAY shows or ranks for you.
Roles employers post on RELAY
RELAY also lists roles that employers post on RELAY directly, marked “Posted on RELAY”. You apply on the employer’s own site; RELAY doesn’t send the employer anything about you. For the employer, RELAY records counts of views and apply clicks on its role, and how many members it was matched to, never who.
RELAY Brain
RELAY learns about the job market from public job postings: the titles employers use, how many are hiring and the pay they publish. It also learns from corrections that hold nothing personal, such as replacing a target title with the one the market uses. Each correction is stored with a one-way code instead of your account, so RELAY can count how many different members made it without knowing who they are. A pattern is used only once 10 or more members agree and RELAY’s owner approves it. Your contacts and address books, Google or Microsoft data, LinkedIn exports, résumé text, notes, messages and interview answers are never used. Your corrections are included in your data export and deleted with your account.
Share anonymous progress (only if you turn it on)
When this switch is offered in Settings → Privacy & data, it is off until you turn it on. If you do, RELAY records how your pursuits move: stage changes, replies, interviews, offers and outcomes, with only the role’s family (such as finance or data), its level, its role type, a range of days, your offer’s pay as a band compared with the posting’s published range, and its state. It never records your name, the employer, the title as written, notes, messages, contacts or anything that points to a specific posting, and each entry has only the day, not the time. Entries are stored with the same one-way code instead of your account; RELAY keeps your choice itself with your account. RELAY uses them only as patterns that 10 or more members stand behind, such as how soon members at your level hear back, and never shows one member’s progress. Entries are deleted after 13 months. Turning the switch off stops collection at once and lets you delete what you shared. Your choice and entries are included in your data export and deleted with your account; patterns already computed from 10 or more members hold no one’s data and stay.
Connected Microsoft 365 and Google accounts
Only if you connect them, and only the permissions you choose on the connection screen. For Microsoft 365 these can include Outlook email, calendar, contacts, and OneDrive or SharePoint files. RELAY reads email sender, subject, date and the short preview Microsoft supplies (not full message bodies or attachments); the titles and start times of upcoming events; contact names, employers, job titles and email addresses; and the files you open. Imported items arrive as suggestions you review before RELAY uses them, except Outlook contacts: if you allow Contacts, RELAY keeps an encrypted copy of up to 5,000 of them (name, employer, job title and one email address) in your account to show which people you know work at an employer, and, for contacts with an employer, the photo on their contact card, a few at each refresh, encrypted and shown only to you. It refreshes that copy at most once a day or when you ask, and deletes it, with those photos, when you disconnect Microsoft 365, remove the Contacts permission or delete your account. If you turn on mail monitoring, RELAY checks recent mail about every five minutes and keeps only messages that match your pursuits or target roles.
For Google, RELAY reads only the Drive files you pick. See Google user data.
Usage and diagnostics
Product activity: session start and last-activity times, feature names and action types, with timestamps. It does not include message contents, searches, opportunity details or private career data. RELAY also records each AI action’s feature, token counts and cost to enforce your monthly AI allowance.
Your privacy choices: “Help improve RELAY” is off by default and allows only de-identified, product-level patterns. “Feedback diagnostics” adds limited device and section context to feedback you choose to send. Feedback includes your rating, category, message and any screenshot you attach. A report you send on an Ask RELAY answer from the RELAY apps includes the reason, your note, your question and the answer you reported.
Billing
If you subscribe, Stripe handles payment on its own checkout page. RELAY sends Stripe your email address and plan, and stores your plan, billing status and Stripe customer, checkout and subscription references. RELAY never receives or stores your card number.
Cookies and browser storage
RELAY uses only essential cookies: your signed sign-in session (30 days), your privacy choices (30 days), an encrypted LinkedIn connection if you add one, and short-lived cookies that protect sign-in and connection flows. Your browser also stores a working copy of your workspace and your appearance setting. RELAY uses no advertising or third-party analytics cookies.
The RELAY iPhone and Android apps
The apps sign in to your RELAY account and show the same workspace. The iPhone app keeps your sign-in in the iPhone’s Keychain on that device only; it isn’t synced or backed up to another device. The Android app keeps your sign-in sealed with a key in the Android Keystore. Each app keeps an encrypted copy of your last update on the device so it can open offline, protected by the device and excluded from backups. Signing out or deleting your account removes the sign-in and that copy from the device. The apps contain no advertising or analytics code. What they send to RELAY, such as pursuit stage changes, opportunity searches, Ask RELAY questions after you agree, answer reports and, only if you choose Import from Contacts, your contacts, is handled as this policy describes.
RELAY· Powered by Sideways8Sign in