Privacy and Data Retention
This policy explains what information Relay collects, what stays with you or Plex, how long we keep information, and how to ask us to delete it.
Privacy at Relay
Relay is a music application built around your own Plex music library. Relay’s backend is used primarily for accounts and licensing, payments, transactional email, and optional feedback, beta, and research participation.
Ordinary music-library and listening information is not uploaded to Relay’s servers. That information stays with you, your devices, and the Plex services you choose to use.
What Relay does not collect
As part of ordinary playback and library use, Relay does not upload the following to Relay’s own backend:
- Library or catalog contents such as artists, albums, and tracks
- Listening, playback, or search history
- Queues, playlists, downloads, pins, or discovery activity
- Artwork or cache data
- Podcast playback progress
- Plex credentials or authentication tokens
Some of this information may travel directly between Relay and your Plex server or Plex’s infrastructure. That is different from sending it to Relay’s servers. Plex is a separate service with its own privacy practices.
Information Relay collects
Account and licensing
To operate a Relay account and license, we may store email and account information, authentication information (including a password hash when password sign-in is used; Relay does not store plaintext passwords), information needed to operate your license, and limited technical information about an app installation.
Relay uses a pseudonymous installation identifier to manage software licensing. That is not the same as anonymous use. Relay does not need your friendly computer or device name as its licensing identity. Temporary sign-in, verification, reset, and invitation credentials are removed after they expire or are used.
Payments
Payments are processed by Stripe. Relay does not receive or store your full payment-card number and keeps only limited transaction information needed for licensing, support, reconciliation, and necessary business or legal records. Stripe may retain payment information independently under its own legal and regulatory obligations.
Feedback and diagnostics
Feedback is optional and user-initiated. When you send feedback, you may submit a message, technical information, a diagnostic report, and optional screenshots or video.
Relay minimizes diagnostic information before upload and applies automated redaction intended to remove unnecessary media information and recognizable sensitive credentials. Automated redaction cannot guarantee that every sensitive value a user manually submits will be detected. Please avoid including passwords or other secrets in feedback.
Beta and research
If you apply to the beta, Relay may collect your email address, application answers, platform information, and enrollment status. If you voluntarily join a product research study, Relay may store your participation and responses while the study is active.
Service providers and technical data
Relay relies on these providers to operate the website, accounts, and related services:
- Supabase: database and file storage
- Vercel: website and backend hosting
- Stripe: payments
- Resend: transactional email (account, licensing, beta, family, and research messages)
These providers may process technical information necessary to provide their services. Hosting infrastructure may receive ordinary request information such as IP address, browser or app information, requested pages, timestamps, and basic request or error information. Relay may use privacy-oriented website analytics (currently Plausible) to understand aggregate site usage.
Transactional email providers may temporarily retain delivery and operational information under their own privacy and retention practices.
Software update checks may send ordinary network information, such as an IP address and app or device information, to Relay’s hosting infrastructure. Relay does not attach your Relay account, license, or music-library identity to ordinary update checks.
Data retention
Relay applies the retention periods below to information it controls. Some information may need to be retained longer when required for security, fraud prevention, legal obligations, payment records, or dispute resolution. Deleted information may also remain temporarily in routine backups before those backups expire.
| Data | Retention |
|---|---|
| Account and active license information | While needed to provide the account or license |
| Revoked device activation information | 90 days after revocation |
| Diagnostic attachments | 30 days |
| Screenshots or video submitted with feedback | 90 days |
| Feedback message text | 90 days after completion or archive |
| Feedback metadata | Up to 1 year after completion or archive |
| Enrolled or rejected beta applications | 90 days after enrollment or rejection |
| Pending beta applications | 180 days |
| Research participation data | 90 days after the study closes |
| Removed family or invitation information | Generally 30–90 days depending on status |
| Temporary authentication information | Removed after expiration or use |
| Purchase and business records | As needed for legitimate business or legal requirements |
Your choices and deletion
- Feedback and diagnostics are optional and user-initiated.
- Research participation is voluntary.
- Screenshots and video attachments are optional.
- Ordinary Plex library use does not upload your music library to Relay’s backend.
Relay does not currently offer self-service account deletion. To request account or personal-data deletion, contact support@relay-music.app. Relay will remove or de-identify information it no longer needs, subject to legitimate business, security, payment, and legal retention requirements. Provider-held records such as Stripe payment records may remain subject to separate legal or provider retention.
Security
Relay uses reasonable technical and organizational safeguards appropriate to the information it handles, including encryption where appropriate, credential hashing, access controls, data minimization, and limited retention. No online service can guarantee absolute security.
Changes to this policy
We may update this policy from time to time. When we do, we will revise the Last updated date on this page. Material changes may also appear in an updated in-app agreement or acknowledgement where Relay provides one.
Contact
Privacy and deletion requests: support@relay-music.app