Privacy

Privacy policy

This policy explains what information Relai collects, why we collect it, who processes it on our behalf, and the rights you have over it. The short version: we store what you give us to run the product, we don't sell it, and we don't run advertising or cross-site tracking. For the plain-English overview, see Your data.

Last updated: 21 September 2026

Who we are

Who we are and how to reach us

Relai ("we", "us") provides a client-management product for football agents: the web application at relai.football, the Relai iOS app and the Relai Clipper Chrome extension. For anything in this policy — questions, requests, complaints — email andy@relai.football.

For your account details, Relai decides how and why data is processed (we act as the data controller). For the content you put into your workspace — your clients, contacts and deals — you are the controller and we process it only to provide the service to you (see "Your clients' information" below).

What we collect

Information we collect

  • Account details. Your name, email address and password. Passwords are stored only in hashed form — we cannot read them.
  • Workspace content. Everything you and the members you invite add to your workspace: players, contacts, clubs, contracts, deals, commission setups, tasks, notes, documents and other attachments. This can include personal information about other people, such as your clients.
  • Captured content. Content you deliberately send to Relai to be filed: selected webpage text, page URLs, titles, source details and cropped screenshots sent with the Relai Clipper; screenshots, links and messages shared from another connected device; voice notes you record; and emails you forward to your workspace's capture address.
  • Billing information. Subscriptions are handled by Stripe. Your card details go directly to Stripe and are never stored on our servers; we keep your plan and subscription status.
  • Device and technical data. A sign-in session cookie (we set no advertising or analytics cookies), the name of any connected phone or browser, a revocable workspace capture credential and basic connection details stored by the Chrome extension, a push notification token if you turn notifications on, and routine server logs.
  • Product usage. Which features get used and which actions succeed — for example that a task was created or a contract clause fired — recorded against your user and workspace identifiers. See "How we measure product usage" below for exactly what this does and does not include.

Chrome extension

How the Relai Clipper handles data

The Relai Clipper runs only when you choose its toolbar button. After you select an area of the current webpage, it reads that area's text and source details, captures the visible tab, and crops the image to the area you selected. You see the result before choosing whether to send it to your Relai Inbox. It does not read your browsing history, monitor pages in the background, or capture anything merely because you visited a page.

Chrome stores a revocable capture credential and the connected workspace's basic connection details on your device. The credential can send captured sources into that workspace but cannot read its records. Disconnecting the browser in Relai revokes the credential; removing the extension removes its local copy.

Information received through Chrome APIs is used only to provide the Clipper's user-facing capture function and is handled in accordance with the Chrome Web Store User Data Policy, including its Limited Use requirements. We do not use it for advertising, credit decisions, or sale to third parties.

Why we use it

How we use your information

  • To provide and operate Relai: your workspace, sync, storage and search.
  • To power capture: our AI reads the content you send in (a forwarded email, a voice note, a screenshot) and drafts structured suggestions. Nothing changes your records until you approve it.
  • To send transactional email — verification links, password resets, workspace invitations and, if you enable them, briefing notifications. We do not send marketing email to product accounts without consent.
  • To take payment and manage your subscription.
  • To understand which parts of Relai are actually used, so we can fix what is confusing and build what is missing.
  • To respond when you contact us, and to keep the service secure and working.

What we don't do: we don't sell or rent your data, we don't share it with advertisers or data brokers, we don't track you across other websites, and we never use the contents of your workspace to measure anything.

AI processing

How AI processing works

When you send content to Relai to be filed — or use features that summarise or check your records — that content is processed by our AI provider, Anthropic, under terms that do not allow it to be used to train their models. The output comes back to your workspace as a proposal for you to accept or reject; your records are never changed without your approval.

Product analytics

How we measure product usage

We use PostHog, hosted in the European Union, to see which features are used and where people get stuck. We have set it up to collect as little as we can while still answering that question, so it works differently from most analytics you will have met:

  • No cookies, no storage. Nothing analytics-related is stored on your device — no cookie, no local storage. That is also why we don't show you a cookie banner. The trade-off is ours to bear: it makes our own numbers less precise.
  • No session recording, no click tracking. We do not record your screen, replay your sessions, build heatmaps, or capture the text of what you click. We could not watch you work even if we wanted to.
  • Shape, not content. An event says what kind of thing happened and to what kind of record — "a task was created", "a clause fired" — with identifiers, counts and yes/no flags. It never carries a player's name, a club, a fee, a contract value or anything you typed.
  • Nothing in the player portal or on shared links. Analytics is switched off entirely for players, guardians and anyone opening a pack, recap or introduction you have shared. They never agreed to it, so they are not measured.
  • Served from our domain. Analytics requests go to relai.football and we pass them on. We do not forward your IP address, so PostHog never receives it.

Our lawful basis is legitimate interests — running and improving a product we are responsible for — balanced against the limits above. If you would rather not be included at all, email us and we will exclude your account; it costs you no functionality.

Who processes it

Service providers we rely on

We don't share your data with anyone except the infrastructure providers who run parts of the service on our behalf, each only for the purpose described:

  • Application hosting (Fly.io)
  • Database hosting (Neon)
  • File storage for documents, attachments and voice notes (Cloudflare R2, in a private bucket served only through authenticated access)
  • Payments and subscription billing (Stripe)
  • Transactional email delivery (Postmark)
  • AI processing (Anthropic)
  • Product analytics (PostHog, EU region — see above for what it receives)
  • Push notification delivery for the iOS app (Apple)

Your clients

Your clients' information

Relai exists to hold an agent's book, so your workspace will contain personal information about people other than you — players, club contacts, guardians and counterparties. For that content you are the data controller: you decide what goes in, and you're responsible for having a lawful basis to hold it. We act as your processor: we store and process it only to provide the service to you, we don't use it for our own purposes, and it is never visible to other workspaces or to anyone you haven't added to yours.

Storage & security

Where your data lives and how it's protected

Connections to Relai are encrypted in transit with HTTPS/TLS. Each workspace's data is isolated from every other workspace at the database level. Files are kept in private storage and served only through authenticated access, never from an open public URL.

Our providers may store and process data in the United Kingdom, the European Economic Area and the United States. Where data leaves the UK or EEA, we rely on our providers' standard safeguards for international transfers.

Retention

How long we keep it, and deleting it

We keep your data for as long as your account is active. You can delete individual records, documents and captures inside the product at any time, and disconnecting a connected device immediately stops it sending anything more to your workspace. To close your account and have its data deleted, email andy@relai.football — we'll action it promptly, subject to anything we're legally required to retain (such as billing records).

Your rights

Your rights

Under UK and EU data protection law you can ask us for a copy of the personal data we hold about you, ask us to correct it, delete it, restrict or object to how we use it, or provide it in a portable format. Email us and we'll respond. If you're unhappy with how we've handled your data, you can complain to your supervisory authority — in the UK, the Information Commissioner's Office (ico.org.uk).

Who it's for

Not a consumer product

Relai is a business tool for football agents and agencies, and accounts are for adults (18+). We don't knowingly collect information from children through account sign-up. Information about minors that agents lawfully hold as part of their work (such as a young player's details) is workspace content, controlled by the agent as described above.

Changes

Changes to this policy

If we change this policy in a way that matters, we'll update this page and the date at the top, and for significant changes we'll tell account holders by email. The current version always lives at relai.football/privacy.