Privacy policy

Rellay is responsible for the personal information collected through rellay.africa, app.rellay.africa and admin.rellay.africa. This notice covers website enquiries, account registration, sign-in and the onboarding features currently available. Contact the Rellay team at hello@rellay.africa with privacy questions or requests.

Additional services may require a separate notice before collecting new categories of information. A demo workspace contains sample records; those records are separate from information you submit through your own account.

Account information: your name, email address, account identifiers, sign-in provider and authentication records. If you register with email, Supabase Auth manages your password. If you choose Google, we receive the basic profile and email information needed to identify your account.

Onboarding information: the interests you select and, if you create an investor profile, your individual or organization capacity, residence, organization details and stated authority, goals, sectors, budget range, timing and investment experience.

Website enquiries: the contact details, project description, location, budget range, timing and other information you choose to submit in our enquiry, assessment, network application or call forms.

Technical information: our authentication and hosting providers process connection and security information, which may include IP address, browser or device information, request logs and session identifiers. Please do not send passwords, financial account credentials or identity documents through general enquiry forms.

We use information to create and secure accounts, maintain sessions, save onboarding progress, provide your workspace, respond to requests, deliver account emails and protect the service against misuse. We use the preferences you provide to tailor your experience.

Where data protection law requires a lawful basis, account and requested-service processing supports providing the service you ask for; security and service administration support our legitimate interests, balanced against your rights. We rely on consent where it is required and comply with legal obligations that apply to us. You can withdraw consent for optional processing without changing the lawfulness of earlier processing.

Your account details and onboarding answers do not automatically become a public profile. Creating an account or selecting an interest does not approve an investment, verify a business or grant staff access.

Google sign-in requests basic profile and email access. It does not request access to your Gmail messages, Google Drive files or contacts. We use the information supplied by Google for account identification and authentication.

You can revoke Rellay’s Google access in your Google Account settings. Revoking access does not automatically delete an existing Rellay account or information already stored. Contact us to request account deletion.

Supabase provides authentication and database services. Vercel hosts the website and app. Resend delivers account emails and service notifications. Google provides the optional Google sign-in service. Relevant information is processed by these providers to perform those functions.

Rellay team members may access information needed to handle your enquiry or administer the service. If you choose to contact us through WhatsApp, your message and contact information are also handled by WhatsApp under its own privacy terms. We do not make your account information available to other users merely because you sign up.

We may disclose information when required by applicable law or when necessary to investigate misuse, protect people or establish, exercise or defend legal claims.

The configured Rellay account database projects are in the Paris region. Hosting, email, authentication and support providers may also process information in other countries. Database location does not mean every copy or service is confined to one country. Contact us for information about the providers and transfer arrangements relevant to your request.

We retain information according to the purpose for which it was collected: providing an active account or requested service, responding to an enquiry, protecting accounts, meeting applicable legal obligations and resolving disputes. The relevant period depends on the account or request status, the information involved, security needs and any applicable legal requirements.

You can request deletion by contacting us. We assess whether information is still needed for those purposes and explain any retention exception that applies. Deletion from active systems does not necessarily remove information immediately from provider backups; backup copies remain subject to the provider’s retention cycle.

The app uses session cookies and related authentication storage to keep you signed in and protect authentication flows. Blocking these essential cookies can prevent sign-in from working. Third-party pages you choose to visit, including Google sign-in and WhatsApp, operate under their own cookie and privacy policies.

We use HTTPS, access controls and database policies to protect account information. Staff access is separately restricted. No internet service can guarantee absolute security; keep your credentials private and contact us if you suspect account misuse.

Depending on the law that applies to you, you may request access, correction, deletion, restriction of processing or a portable copy of your personal information. You may object to processing based on legitimate interests and withdraw consent where consent is the basis for processing.

Email hello@rellay.africa to make a request. We may ask for information proportionate to verifying that the request concerns your account. Do not email us your password. We respond in accordance with applicable requirements and explain any lawful restriction on a request. You may also complain to the data protection authority responsible for your location.

We update this notice when our actual features, data practices or applicable requirements change. The date below identifies the current version. Material changes affecting your information will be communicated where required.