Privacy, plainly.

What we collect and why.

Google sign-in provides your name, verified email address and Google account identifier so we can create your account and sign you in. SmallRelay requests only basic identity permissions. It does not request access to your Gmail, contacts, calendar or Drive, and does not store Google access tokens.

You can also sign up with email and a password. We verify your email address first and store a one-way password hash, never your password. Verification, password reset and account deletion links expire after 30 minutes. Resetting your password signs out your other sessions.

We store the clients, contact details, deals, tasks, notes, preferences, memberships and activity you enter into a workspace to provide its shared workflow. Workspace members can see information shared in that workspace. Please only enter information you have permission to use.

Cookies and technical information.

We use essential cookies to complete Google sign-in and keep you signed in. Login sessions last up to seven days; signing out revokes the current session. Your browser also remembers the selected workspace. We do not use advertising cookies or website analytics in this release.

Our infrastructure providers process technical information such as IP addresses and operational logs to deliver and protect the service. We keep application error logs for troubleshooting and limit their storage.

Where information goes.

The application and database run on AWS in Frankfurt, Germany. Google handles sign-in. Cloudflare provides domain services and routes support emails; AWS SES provides outgoing email infrastructure. Support messages sent to support@smallrelay.com are forwarded to GLOBINARY’s contact inbox. These providers may process service information in other countries under their own terms.

We send account verification, password reset, deletion confirmation and team invitation emails. Email addresses and the message content are processed by AWS SES. Pending messages are encrypted in our database; their contents are removed after sending, cancellation or a final send failure. We keep basic sending records to handle errors and show invitation status. Invitations expire after seven days.

If you enable daily reminders, we also send an email containing the titles and due dates of tasks assigned to you that are due or overdue. Your workspace’s time zone determines the day and delivery schedule. You can turn these emails off in workspace Settings. They are off by default, and leaving a workspace stops its reminders.

We do not sell personal information or publish workspace content in our open startup reports. Those reports contain deliberately selected business information, such as progress and operating cost estimates.

Retention and your choices.

Workspace owners and admins can download a complete JSON copy from Your team → Download workspace. It includes workspace settings, deals, clients, tasks, all notes and activity, team members and invitation records. Sign-in credentials and invitation tokens are excluded.

Account and workspace information is kept while the workspace is in use, until it is deleted or a deletion request is completed. Archiving a client hides it from active views; it does not erase its data. This early preview has no automated backups.

Accounts with no workspace history can be deleted from Your account after email confirmation. If your account has workspace history, contact support so we can handle your request without unexpectedly removing information your team relies on.

To ask about your information, request a copy or correction, or request account and workspace deletion, email support@smallrelay.com. We may verify your identity and authority over a shared workspace before acting. You can also revoke SmallRelay’s access in your Google account; this does not by itself delete information already saved in SmallRelay.

As SmallRelay grows.

We will update this page as the service changes and communicate material changes to affected users. Contact support@smallrelay.com with privacy or support questions.