Privacy Policy

1. Introduction

Relai, Inc. ("the Company," "we," "us," or "our") operates getrelai.org (the "Service"). Relai is a developer tool for replay-testing AI agents: customers submit agent execution traces and failure contexts captured from their own production systems, and the Company runs replay tests in CI environments to verify that proposed fixes actually hold under the original failure conditions.

This Privacy Policy explains what information the Company collects through the Service, how we use it, and the choices you have. It applies to information collected through getrelai.org and through direct communications with us. Because Relai processes two distinct categories of data - information about visitors and prospective customers who use the website, and agent execution trace data submitted by engineering teams using the product - this Policy addresses each category separately.

The Company is based at 660 Fourth Street, Suite 210, San Francisco, CA 94107 and can be reached at [email protected].

2. Information We Collect

2.1 Website Visitor and Prospect Data

When you visit getrelai.org, interact with our marketing pages, or reach out to the Company, we collect:

• Contact details (name, email, phone) when you fill out a form, request a demo, or subscribe to updates;
• Company information you choose to share (employer, role, project context, the type of AI agents you operate);
• The content of any messages you send us;
• IP address and approximate location (city/region level), browser type, operating system, and device class when you visit the site;
• Pages visited, referring URLs, time on page, and cookie identifiers (see Section 5).

2.2 Agent Trace and Execution Data (Product Data)

Customers who use Relai's capture SDK and CI integrations submit agent execution traces, failure bundles, and associated metadata (tool call sequences, environment state snapshots, LLM inputs and outputs at the point of failure) to the Company's infrastructure for replay and fix-verification purposes. This data belongs to the customer. The Company processes it solely to run replay tests, surface a proposed fix, and verify that the fix passes replay before it is merged.

Trace bundles may incidentally contain personal information about the customer's own end users (for example, if an agent under test was processing a document that referenced an individual). The customer is responsible for ensuring they have the right to submit such data and for any applicable notice obligations toward their own end users. The Company acts as a processor with respect to personal information embedded in trace data, and the customer acts as the controller.

The Company does not use trace data to train models, build user profiles, or for any purpose other than operating the replay and fix-verification service.

2.3 We Do Not Knowingly Collect Children's Data

getrelai.org is not directed to children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us information, contact [email protected] and we will delete it.

3. How We Use Information

We use website visitor and prospect data to:

• Respond to inquiries and provide requested information about the Relai platform;
• Operate, maintain, and improve the Service and its documentation;
• Send service updates and (with your consent where required) communications about product releases, engineering content, and early-access invitations;
• Detect, investigate, and prevent fraud or abuse;
• Comply with legal obligations.

We use agent trace and execution data solely to run the replay test pipeline, propose a fix, verify that fix against replay, and return results to the customer. We do not use it for any secondary purpose. We do not sell personal information for monetary value. Where applicable state law treats certain advertising arrangements as a "sale" or "share," see your state's section below.

4. Sharing of Information

We share personal information only with:

• Service providers acting on our behalf (hosting infrastructure, email delivery, product analytics tools, CI compute providers) under contractual confidentiality terms that restrict their use to the purposes for which data is shared;
• Authorities, when required by law or to protect rights, safety, or property;
• A successor entity in the event of a merger, acquisition, or asset sale, subject to this Policy.

We do not sell personal information to third parties. Agent trace data submitted by customers is never shared with other customers or with third parties except the infrastructure providers that run the replay pipeline under confidentiality obligations.

5. Cookies and Tracking

We use cookies and similar technologies to operate the site, remember preferences, and measure usage. For details and choices, see our Cookie Policy.

6. Data Retention

We retain website visitor and prospect data only as long as needed for the purposes described, to comply with legal or accounting obligations, and to resolve disputes. Inactive marketing-list contacts are purged after 24 months. Server access logs are retained 90 days, then aggregated.

Agent trace bundles submitted to the replay service are retained for 90 days from submission by default, after which they are deleted from the Company's systems. Customers may request earlier deletion by contacting [email protected]. Retention periods for paid-tier customers are governed by the applicable service agreement.

7. Security

We use administrative, technical, and physical safeguards designed to protect personal information, including TLS encryption in transit, restricted-access databases, and least-privilege access controls. No system is perfectly secure; we cannot guarantee absolute security.

8. Your General Rights

Depending on your jurisdiction, you may have rights including access, correction, deletion, and the ability to limit certain processing. To make a request, email [email protected]. We will respond within the timeframe required by applicable law.

9. California Residents (CCPA / CPRA)

Under the California Consumer Privacy Act ("CCPA") and the California Privacy Rights Act ("CPRA"), California residents have specific rights regarding personal information collected about them. This section supplements the rest of the Policy.

9.1 Categories We Collect

In the past 12 months, the Company has collected the following categories of personal information defined under Cal. Civ. Code §1798.140 from website visitors and prospects: identifiers (name, email, IP); commercial information (service inquiries, product interest); internet activity (browsing on getrelai.org); and inferences drawn from the above for service-improvement purposes. Agent execution traces submitted by engineering teams who are customers may additionally contain identifiers embedded in the trace data by the customer's own systems; the Company processes that data as a processor, not a controller, and it is not used for the purposes described in this section.

9.2 Sources, Purposes, Disclosure

We obtain this information from you directly and through automatic site instrumentation. We use it to operate and improve the Service, communicate with you, and meet legal obligations. We disclose it only to service providers under written contract and to legal authorities where required.

9.3 Your CCPA / CPRA Rights

• Right to Know: request the categories and specific pieces of personal information we have collected about you in the past 12 months.
• Right to Delete: request deletion of personal information we collected from you, subject to legal exceptions.
• Right to Correct: request correction of inaccurate personal information.
• Right to Opt Out of Sale or Sharing: we do not sell personal information; we do not "share" it for cross-context behavioral advertising as defined under CPRA.
• Right to Limit Use of Sensitive PI: we do not use sensitive personal information for purposes beyond those permitted without authorization.
• Right to Non-Discrimination: we will not deny services, charge different prices, or provide a different level of service because you exercised a right.

9.4 How to Exercise

Submit a verifiable request by emailing [email protected] with the subject line "California Privacy Request." Include enough detail for us to verify you are the person whose information is the subject of the request. We respond within 45 days, with a possible 45-day extension for which we will notify you.

9.5 Authorized Agents

You may designate an authorized agent to make a request on your behalf. The agent must provide proof of authorization; we may also require you to verify your identity directly.

9.6 "Shine the Light"

California Civil Code §1798.83 entitles California residents to request information regarding our disclosure of personal information to third parties for direct marketing. We do not disclose personal information for third-party direct marketing.

9.7 Do Not Track and Global Privacy Control

Under the California Online Privacy Protection Act (Cal. Bus. & Prof. Code §22575), we disclose how we respond to "Do Not Track" (DNT) browser signals. Because there is no common industry standard for interpreting DNT signals, we do not currently respond differently to them. We do not authorize third parties to collect personally identifiable information about your activity across different websites when you use the Service. We honor an opt-out preference signal sent by a platform or browser that complies with the CPRA, such as the Global Privacy Control (GPC); when we detect a GPC signal, we treat it as a valid request to opt out of the sale or sharing of personal information for that browser or device.

10. Changes to This Policy

We may update this Policy from time to time. Material changes will be reflected by a new "Last updated" date and, where appropriate, a notice on the Service.

11. Contact

Questions, requests, or complaints can be sent to: