Privacy Policy

Last updated: February 14, 2026

1. Overview

Reley ("we", "us", "our") is a secure terminal remote access service. This Privacy Policy explains how we collect, use, and protect your personal information when you use our website and services at reley.sh.

Operator: Reley
Contact: support@reley.sh

2. Information We Collect

We collect the following categories of personal information:

• Account information: Email address, name, and profile picture from your Google account when you sign in.
• Device information: Device name and public key when you register a device via the CLI.
• Session metadata: Session creation time, connection status, and session duration.
• Payment information: Processed by our payment partner Polar. We do not store your credit card details.

Important: We do NOT collect, store, or have access to your terminal content. All terminal data is end-to-end encrypted and only decryptable on your devices.

3. How We Use Your Information

We use your information for the following purposes:

• Authentication and account management
• Providing the terminal remote access service
• Processing payments and managing subscriptions
• Service improvement and troubleshooting
• Communicating service updates and important notices

4. Third-Party Services

We share information with the following third-party services as necessary to operate:

• Supabase: Authentication and database hosting
• Polar: Payment processing and subscription management
• Google: OAuth authentication provider

We do not sell your personal information to any third party.

5. Data Retention

• Account data: Retained while your account is active. Deleted upon account deletion request.
• Session metadata: Retained for up to 90 days after session close.
• Terminal content: Never stored on our servers. All terminal data is end-to-end encrypted and only exists in transit.

6. Your Rights

Under applicable data protection laws (including the Korean Personal Information Protection Act and GDPR for EU residents), you have the right to:

• Access your personal information
• Correct inaccurate information
• Request deletion of your data
• Data portability
• Withdraw consent at any time

7. Account Deletion

You can delete your account at any time from the Settings page in your dashboard. Upon deletion, we will remove all your personal data, device registrations, session history, and cancel any active subscriptions.

8. Security Measures

We implement industry-standard security measures to protect your data:

• End-to-end encryption for all terminal data (X25519 ECDH + XChaCha20-Poly1305)
• Zero-knowledge architecture — server cannot decrypt terminal content
• Forward secrecy via double ratchet key derivation
• HTTPS/TLS for all communications
• Secure authentication via Google OAuth

9. Children's Privacy

Reley is not intended for use by individuals under the age of 14. We do not knowingly collect personal information from children under 14. If you believe a child has provided us with personal information, please contact us immediately.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or a notice on our website. Continued use of the service after changes constitutes acceptance of the updated policy.

11. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us at:

Email: support@reley.sh