Privacy Policy

1. Introduction

Relaro ("we", "us", "our") operates the relaro.io platform. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service.

2. Information We Collect

Account Information: When you register, we collect your name, email address, and password (stored hashed). You may optionally provide a profile photo.

Workspace Data: Data you create within workspaces — entities, records, fields, files, comments, and any information you enter into forms and records.

Usage Data: We automatically collect information about how you interact with the platform, including IP addresses, browser type, pages visited, and timestamps. This data is used for security (audit logging) and product improvement.

Cookies: We use essential cookies to maintain your session. We do not use third-party tracking cookies.

3. How We Use Your Information

• To provide and maintain the service
• To authenticate your identity and secure your account
• To send transactional emails (verification, password reset, notifications)
• To detect and prevent fraud, abuse, and security incidents
• To improve the platform based on aggregated usage patterns

4. Data Storage and Security

Your data is stored on secure servers with encryption at rest and in transit. We use industry-standard security measures including TLS encryption, hashed passwords (bcrypt), and role-based access controls.

Workspace data is logically isolated. Members of one workspace cannot access data from another unless explicitly granted access.

5. Data Sharing

We do not sell your personal data. We may share information only in the following cases:

• With your workspace members — other users in your workspace can see data you create within it
• Service providers — we use third-party services for email delivery (Mailgun), file storage (S3-compatible), and hosting
• Legal requirements — if required by law or to protect our rights

6. Your Rights

You have the right to:

• Access your personal data
• Correct inaccurate data
• Delete your account and associated data
• Export your data
• Object to processing of your data

To exercise these rights, contact us at hello@relaro.io.

7. Data Retention

We retain your data for as long as your account is active. Deleted records are kept in trash for 30 days before permanent deletion. After account deletion, we remove your personal data within 30 days, except where retention is required by law.

8. Changes to This Policy

We may update this policy from time to time. We will notify you of significant changes via email or an in-app notification.

9. Contact Us

If you have questions about this Privacy Policy, contact us at hello@relaro.io.