RelayMail

Privacy Policy

Last updated: December 10, 2025

Overview

RelayMail ("we", "our", or "us") operates a service that connects your email to Slack. This Privacy Policy explains what data we collect, how we use it, and your rights regarding your information.

Key Point: No Email Credentials Stored

RelayMail uses email forwarding - we never store your Gmail password, IMAP credentials, OAuth tokens, or any other email provider credentials. You set up forwarding in your own email provider, and we only receive emails you choose to forward to us.

How RelayMail Works

Understanding our architecture helps explain what data we handle:

  1. You set up forwarding from your email provider (Gmail, Outlook, etc.) to a unique RelayMail address we provide (e.g., inbox-abc123@relay.relaymail.app)
  2. Forwarded emails arrive at our servers via Resend (our email infrastructure provider)
  3. We post the email to your connected Slack channel
  4. You reply in Slack, and we send your response as an email via Resend

This forwarding-based model means we never access your email account directly - we only receive the specific emails you forward to us.

Information We Collect

Account Information

When you sign in with Slack, we receive and store:

  • Your Slack user ID and workspace ID
  • Your name and email address (from Slack profile)
  • Your profile picture URL

Slack Workspace Access

When you connect your Slack workspace, we store:

  • Slack bot token (allows us to post messages to your selected channel)
  • Channel ID where emails should be posted
  • Workspace ID for routing

We only request permissions needed to post messages and read replies. We cannot access your private messages, other channels, or workspace data beyond what's required for the service.

Email Data

When emails are forwarded to us:

  • We process: Sender address, subject line, and message body to display in Slack
  • We store: Email message IDs and subject lines for thread matching (so replies go to the correct conversation)
  • We do NOT permanently store: Full email bodies - these are processed and forwarded to Slack, then discarded

Thread Mappings

To maintain conversation threads between email and Slack, we store:

  • Email message ID (unique identifier from the email)
  • Original sender's email address
  • Email subject line
  • Corresponding Slack channel ID and thread timestamp

This mapping data allows us to route email replies to the correct Slack thread and vice versa.

Billing Information

Payments are processed by Stripe. We store:

  • Stripe customer ID (links your account to your Stripe subscription)
  • Subscription ID and plan type
  • Thread usage counts (for billing limits)

We do NOT store credit card numbers, bank details, or other payment credentials. All payment processing happens directly through Stripe's secure systems.

Usage Data

We track basic usage metrics including thread counts per month (for billing), forwarded email counts (for verification), and general service health metrics.

What We Do NOT Collect or Store

  • Email passwords - We never ask for or store your email password
  • OAuth tokens for email - No Gmail or Outlook OAuth tokens
  • IMAP/SMTP credentials - We don't use direct email server access
  • Access to your full inbox - We only receive emails you explicitly forward
  • Credit card numbers - All payment data is handled by Stripe

How We Use Your Information

  • Provide the service: Process forwarded emails and post them to Slack, send your Slack replies as emails
  • Maintain thread continuity: Match email replies to the correct Slack thread
  • Manage your account: Authenticate you, manage your subscription, enforce usage limits
  • Communicate with you: Send important service updates, billing notifications
  • Improve the service: Analyze usage patterns to fix bugs and improve features

Third-Party Services

We use the following third-party services to operate RelayMail:

  • Resend (resend.com) - Receives forwarded emails on our behalf and sends outgoing emails. Resend processes email content to deliver it to us. Resend Privacy Policy
  • Slack (slack.com) - We use Slack's API to post messages to your workspace. Slack stores the messages we post. Slack Privacy Policy
  • Stripe (stripe.com) - Processes all payments. Stripe stores your payment information securely. Stripe Privacy Policy
  • DigitalOcean (digitalocean.com) - Hosts our servers in the United States. DigitalOcean Privacy Policy

Data Retention

  • Account data: Retained while your account is active, deleted within 30 days of account deletion
  • Thread mappings: Retained to maintain conversation history, deleted when you delete your inbox
  • Email content: Processed in real-time and not permanently stored - only metadata (message IDs, subjects) is retained
  • Usage metrics: Retained for 12 months for billing purposes

Data Security

We implement appropriate technical and organizational measures to protect your data:

  • All data in transit is encrypted using TLS/HTTPS
  • Database access is restricted and authenticated
  • Slack bot tokens are stored securely
  • Webhook signatures are verified to prevent spoofing (using Svix for Resend webhooks)
  • Regular security reviews of our infrastructure

Your Rights

Depending on your location, you may have the following rights:

  • Access: Request a copy of the data we hold about you
  • Correction: Request correction of inaccurate data
  • Deletion: Request deletion of your account and associated data
  • Portability: Request your data in a portable format
  • Objection: Object to certain types of data processing

To exercise any of these rights, contact us at privacy@relaymail.app.

For European Users (GDPR)

If you are in the European Economic Area (EEA), we process your data under the following legal bases:

  • Contract: Processing necessary to provide our service to you
  • Legitimate interests: Improving our service, preventing fraud, ensuring security
  • Consent: Where required, such as for marketing communications

Our servers are located in the United States. By using RelayMail, you consent to the transfer of your data to the US. We ensure appropriate safeguards are in place for international data transfers.

For California Users (CCPA)

California residents have additional rights under the CCPA:

  • Right to know what personal information we collect
  • Right to delete personal information
  • Right to opt-out of the sale of personal information
  • Right to non-discrimination for exercising your rights

We do not sell personal information. To exercise your CCPA rights, contact us at privacy@relaymail.app.

Children's Privacy

RelayMail is not intended for use by children under 16. We do not knowingly collect personal information from children under 16. If you believe we have collected information from a child, please contact us so we can delete it.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page and updating the "Last updated" date. We encourage you to review this policy periodically.

Contact Us

If you have questions about this Privacy Policy or our data practices, contact us at: