1. Who We Are
Relayion is operated by Sibilis Inc. In this policy, “we”, “us”, and “our” mean Sibilis Inc., the company that provides the Service and handles your data.
2. What We Collect
We collect the following categories of data:
- Account information: Your name, email address, password hash, and optionally your company name and country when you register.
- Usage data: API request logs capturing request metadata only (method, endpoint, HTTP status, IP address, and timestamp). Message content and recipient numbers are never logged. Usage data also includes message status events and device activity used for billing, debugging, and service delivery.
- Device metadata: Android ID, device name, SIM slot index, and SIM phone numbers for paired Android devices. This data is used solely for device identification and message routing.
- Message records: Outbound message body and recipient number are stored to support delivery, status tracking, and webhook notification. Inbound message body and sender number are stored for retrieval via the inbound API and webhook delivery. Message records are retained until you configure an automatic deletion window in account settings, or until your account is closed.
- Billing information: Billing and subscription data for paid plans is collected and processed by our payment processor, who acts as Merchant of Record. We receive and store subscription status and plan information only. We do not receive or store payment card details.
3. What Relayion Does Not Do
Relayion does not:
- Sell, share, or use message content for advertising, analytics monetisation, or unrelated commercial purposes.
- Profile users for advertising.
- Track browsing behaviour across websites or build behavioural datasets.
- Use message content for advertising, profiling, or purposes unrelated to delivering and operating the Service.
- Write message content or recipient phone numbers to logs or monitoring systems.
Message delivery data stays within service infrastructure used to operate Relayion except where necessary to provide the Service or comply with legal obligations.
4. How We Use Your Data
We use the data we collect to:
- Deliver the Service: route messages, dispatch to devices, and deliver webhook events.
- Provide account management and the Relayion Console at app.relayion.com.
- Process billing and enforce plan limits.
- Diagnose issues and respond to support requests.
- Send transactional emails (email verification, password reset, account notifications).
- Improve the Service based on aggregated, non-identifiable usage patterns.
We process your data as necessary to deliver the Service you have agreed to use, to fulfil legitimate operational interests such as security and debugging, and to comply with applicable legal obligations.
We do not sell your data or message content to third parties.
5. Third-Party Processors
We use carefully selected third-party service providers to operate the Service. These include providers for transactional email delivery, infrastructure hosting and database storage, website and console hosting, and content delivery and reverse proxy services. For paid plans, billing and subscription management is handled by a payment processor acting as Merchant of Record. That processor handles payment information directly. We receive only subscription status and plan information.
Each provider accesses only the data necessary to perform their specific function and is bound by appropriate data protection obligations. We do not sell or share your data with third parties for advertising or unrelated commercial purposes.
6. Data Retention
Message records (outbound and inbound) are retained until you configure an automatic deletion window in account settings, or until your account is closed. You may set a retention window of your choosing in account settings at any time. API request and application logs are retained for 30 days. Account data is retained for the life of your account plus 30 days after closure. Billing records are retained as required by applicable law.
7. Your Rights
You have the right to access, correct, delete, export, and object to the processing of your personal data. To exercise these rights, contact us at hello@relayion.com. We will respond within 30 days.
Depending on your jurisdiction, you may have additional rights under applicable law. We will honor them.
8. Cookies
The website (relayion.com) uses strictly functional cookies required for the site to operate. The Relayion Console (app.relayion.com) uses session cookies for authentication. We do not use cookies for advertising or behavioural tracking. If this changes, this policy will be updated.
9. Cross-Border Data Transfers
Our primary infrastructure is currently hosted in Singapore. We may also process or store data in other jurisdictions as necessary to operate the Service. When this occurs, we take reasonable technical, contractual, and organisational measures to protect personal data consistent with this Privacy Policy and applicable legal requirements.
10. Controller and Processor Roles
For your account and usage data, Sibilis Inc. acts as the data controller and this Privacy Policy applies.
For personal data belonging to your end users (phone numbers and message content submitted through the API), we act as a data processor on your behalf. Processing of that data is governed by our Data Processing Agreement, not this Privacy Policy.
11. Security
All data is transmitted over TLS. We apply encryption at rest, access controls, monitoring, and logging practices designed to protect your data. For details, see our Security page.
12. Changes to This Policy
We may update this policy from time to time. We will notify registered users of material changes via email before they take effect. Material changes will also require acknowledgement on your next login. Continued use of the Service after the effective date of non-material changes constitutes acceptance.
13. Contact
For privacy-related requests or questions, contact us at hello@relayion.com.