What Relay Panel holds, where it is, who else sees it, and how long it stays. Specific rather than general, because a policy you cannot check is not one.
Last updated 15 October 2026.
Relay Panel handles personal information in two quite different positions, and the rules differ:
This policy covers both, and says which is which where it matters. It also covers visitors to relaypanel.io.
From your customers, on your behalf: their name, email address, phone number and postal addresses; the full text of emails, chat messages and contact form submissions, with attachments; order and quote history synced from WooCommerce; call records, and call recordings and voicemail where your telephony provider is set to record them; and for website chat, the visitor's IP address, the country it resolves to, their browser's user-agent string and the pages they visited on your site before writing in.
That last group is worth naming plainly because it is the part merchants are most often surprised by. It exists so you can tell a real customer from the eleventh message that morning from the same address, and it is visible to you on the customer's record.
From you: your name, work email, a hashed password, your company name and domain, your team's names and roles, and records of what staff did in the product. Payment card details go directly to Stripe and never reach our servers; we hold only the last four digits, the card brand, and Stripe's own identifiers.
From visitors to relaypanel.io: nothing, unless analytics is switched on — see below.
Relay Panel is operated from Canada and the servers are in the United States, in Washington State. Your data, and your customers' data, is stored and processed there.
This matters if your customers are in Canada or the EU, because it is a transfer across a border. If that is a problem for your business, tell us before you sign up rather than after — we would rather say no than have you find out later.
Data is encrypted in transit. Credentials and API keys you give us — your Stripe keys, WooCommerce keys, telephony passwords — are encrypted at rest and are never shown back to you in full.
We pass data to these companies, for these reasons, and no others:
| Who | What they get | Why |
|---|---|---|
| Anthropic | The conversation and the pages of yours it is answering from | To draft a reply. Anthropic does not train on this data. |
| Stripe | Your billing contact and card details | To take payment. Cards go to them directly. |
| VoIP.ms | Call records, recordings and voicemail | Telephony, where you have connected a phone line. |
| Apple | A notification title and preview line | Push notifications to the iOS and Mac apps. |
| Akamai (Linode) | Everything, as the host | The servers this runs on. |
The receiving mail servers of anyone you email also see what you send them, which is what email is.
We do not sell personal information, we do not share it for advertising, and we do not use your data or your customers' data to train any model.
relaypanel.io is static pages. It sets no cookies of its own and there is no tracking on it by default.
If we switch on Google Analytics, pages load Google's tag and Google receives the usual measurement data, including your IP address, and sets its own cookies. We honour the Do Not Track browser setting: with it on, the tag is not loaded and nothing is sent. You can check which is true right now by viewing the page source — the tag is only there when analytics is on.
The contact form sends what you type into our own inbox, which is Relay Panel. It is answered by a person.
Your customers' data: for as long as your account is open, because a support history with the last two years missing is not a support history. You can delete any customer, conversation or recording at any time, and deletion is immediate.
Unsent drafts: removed when sent or cleared, and in any case not kept beyond 30 days.
Your account: deleted within 30 days of the account being closed, and purged from backups within 90.
Billing records: kept for 7 years after that, because tax law requires it. These are invoices and amounts, not conversations.
If you are one of our customers, you can see, correct, export or delete your own information from inside the product, or by writing to us.
If you are a customer of a business using Relay Panel, your relationship is with that business, and we hold your information on their behalf. Ask them — they can see, correct, export and delete everything, immediately, without involving us. If you cannot reach them, write to hello@relaypanel.io and we will put you in touch.
Under Canadian privacy law, and under the GDPR where it applies, you also have the right to complain to a regulator. In Canada that is the Office of the Privacy Commissioner.
If personal information in our care is exposed, we will tell affected customers without undue delay and within 72 hours of establishing what happened, with what we know at that point rather than waiting until we know everything. We will tell you what was exposed, what we have done, and what you may need to do.
Security concerns, including anything you have found: hello@relaypanel.io. We would much rather hear it from you.
Relay Panel, [registered address].
Privacy questions, access requests and anything else about this policy: hello@relaypanel.io. We answer these ourselves, in the same inbox as everything else.
We will post changes to this policy here, and email you about any that affect how your data or your customers' data is used.