Privacy Policy

RelayWorks is operated by Sisters Branding Co ("RelayWorks," "we," "us"). This Privacy Policy covers two groups: makers (the trade-business owners and teammates who create RelayWorks accounts) and their customers (the homeowners/clients whose information a maker enters into RelayWorks — leads, quotes, jobs). RelayWorks' direct customer is the maker's company; we act as that company's data processor for its own customers' information.

From makers directly: name, email, password (hashed by Supabase, never stored in plain text), company name, and payment details (handled entirely by Stripe — we never see or store your card number).

Entered by makers about their own customers: names, phone numbers, addresses, job/quote details, photos uploaded from job sites, and signed contracts (including the signer's IP address and a hash of the signed terms).

Generated by using the product: AI-drafted message logs, crew schedule-access logs (an anonymous session per crew login, not tied to a name beyond whatever they self-select), and, if you turn it on, a push-notification subscription tied to your browser/device so we can alert you about a new lead or flagged chat.

To run the Service: authenticate you, schedule and display jobs, draft AI replies to your leads, process your subscription payment, and — if you've connected it — send text messages through your own Twilio account.

We don't sell your data or your customers' data, and we don't use it to train third-party AI models beyond what's needed to generate the reply/draft you asked for in the moment.

Only the third parties needed to provide the Service: Supabase (our database, authentication, and file-storage provider — everything you enter into RelayWorks is stored there), Vercel (hosting for the app and its serverless functions), Stripe (payment processing), Anthropic (AI-drafted replies — sees the message content needed to draft a response, not your full account), Sentry (error/crash reporting, so we can find and fix bugs — can include the page or request a bug happened on, not your data itself), and, only if you set it up yourself, your own Twilio account (SMS/voice). If you paste a calendar link into "Avoid double-booking," we fetch that read-only link from your calendar provider (Google, Outlook, or Apple) server-side to check for existing events — nothing is shared back to them. Each of those providers has its own privacy policy governing what they do with data that passes through them.

We may disclose information if required by law, or to protect the security of the Service or other customers.

Passwords are hashed, never stored or transmitted in plain text. Two-factor authentication is available, and can be required company-wide by an account owner. Crew schedule access uses a separately hashed shared password with rate-limited login attempts and 18-hour access windows that get revoked immediately if the password is rotated. Row-level security in our database restricts every company's data to that company's own makers — no company can see another's leads, jobs, or crew.

No system is perfectly secure, and we can't guarantee absolute security, but this isn't boilerplate — it reflects real, specific controls built into the product.

We retain your data for as long as your account is active. You can delete your own company's account at any time from Settings (Payments & Billing → Delete company) — doing so cancels your subscription immediately and schedules your leads, quotes, jobs, photos, and chats for permanent deletion 30 days later, giving you a window to change your mind by resubscribing. Signed contracts and payment records are kept longer as legal/financial history even after everything else is gone.

You can also contact us to request deletion instead of using the in-app flow, including for a company you no longer have access to.

RelayWorks is a business tool, not directed at children, and we don't knowingly collect information from anyone under 18.

We may update this Privacy Policy as the product changes. Material changes will be communicated before they take effect.

Questions about this policy, or to request data deletion: contact@relayworksusa.com or (508) 343-0050.