This Privacy Policy explains how Firelink Labs Inc., an Indiana corporation doing business as Relladex (“Relladex,” “we,” “us”), collects, uses, and shares information when you use our websites, applications, and related services (the “Service”).
1. The short version
- We never sell your data. Not now, not ever.
- We collect what we need to run the Service: your account info, your contacts and notes, basic usage data, and (when you choose) data you import from your own accounts and address books elsewhere.
- AI features are processed by third-party providers on our behalf, and every request is gated against storage and training before it is sent.
- You can ask us to access, export, correct, or delete your data at any time by emailing admin@relladex.com.
2. Who we are
The data controller is Firelink Labs Inc., 8437 Bell Oaks Dr, Suite -528, Newburgh, IN 47630, USA. For privacy questions, email admin@relladex.com.
3. What we collect
Waitlist signups
- The email address you submit and the time you submitted it.
- Basic referral context (e.g. UTM parameters or referring page) when present, so we know how people are finding us.
Account information (at launch)
- Name, email address, hashed password (we never store passwords in plain text), and profile preferences.
Your content
- Information you add about your contacts: names, phone numbers, email addresses, organizations, relationship metadata, notes, files, and attachments you choose to upload.
Imported data
- Contacts and related metadata you choose to import from your own accounts and address books on other services, after you grant authorization. We import only what’s needed for the import you requested.
Profile enrichment
- When you add a person or a company, you can ask Relladex to fill in details about them from third-party data providers — job title, employer, work history, company information, and in some cases a work email address. We request this only for people and companies already in your account.
- What comes back is offered to you as a suggestion you accept or ignore, never applied silently over something you wrote.
- Enrichment results are held in a store shared across Relladex accounts, so that something already found once does not have to be found again. That store holds work information: companies, roles, work histories, and business email addresses at those companies. If a colleague of one of your contacts is enriched by another Relladex user, the business address we found for them may be served to that user too.
- Your notes are never placed in that store, and neither is the fact that a given person is in your network. Nobody can see who you know, or what you wrote about them.
Connected mailboxes
- If you connect a Google or Microsoft mailbox, we read your address book so you can bring those people into Relladex, and we can send messages you write, as you, from that account. We do not read, download, or store the contents of your inbox, and we never ask for permission to — the access we request covers your contacts and sending, nothing else.
- Contacts imported this way are stored in your own account and are not shared with other Relladex users. Messages are delivered by your own mail provider; we keep a record that you sent one, not a copy of what it said.
- You can disconnect a mailbox at any time in Settings. Disconnecting deletes the stored credentials, and for Google we also tell the provider to cancel the authorisation itself. Microsoft offers us no equivalent, so for an Outlook mailbox you can additionally remove Relladex from your Microsoft account's app permissions. Contacts already imported stay in your account unless you delete them, and a contact you delete is never brought back by a later sync.
Payment information
- Payments are processed by Stripe. We do not store your full card number. We receive limited metadata such as the last four digits, card brand, billing country, and Stripe customer/charge IDs.
Usage and device data
- IP address, device and browser type, operating system, pages visited and actions taken in the Service, and timestamps.
Cookies and similar technologies
- Strictly necessary cookies only, for sessions and security. We do not use third-party advertising cookies or cross-site tracking.
4. How we use your data
We use your information to:
- Provide, operate, maintain, and improve the Service.
- Authenticate you and keep your account secure.
- Communicate with you about the Service, including transactional messages (account, billing, security) and waitlist updates.
- Detect, investigate, and prevent fraud, abuse, and security incidents.
- Comply with legal obligations and enforce our Terms.
5. AI processing
When you use an AI feature, we send the relevant content — the note, contact, or company you asked the assistant to work with — to a third-party AI provider, which returns a result to us. We relay that result to you. Which providers we use is covered by the subprocessor list in section 7.
One AI feature does not work this way, and you should know which. If you record a voice note in a web browser, the words are transcribed by the speech service built into that browser, not by us and not by any provider of ours. That audio goes from your browser to your browser vendor under their privacy policy, not ours. The resulting text is then handled exactly like any note you typed.
Every AI request we send is gated against storage and training. The gate is not a setting or a promise from us — it travels with the request itself, so a provider whose terms would let it keep or learn from your content is never offered the request in the first place. If no provider can serve it on those terms, the request fails rather than going somewhere that keeps it.
That applies to every AI feature and every path in the product, not only the assistant. We do not sell or share Your Content with anyone for advertising or model training.
We do not control, and so do not promise, the country a given request is processed in; that depends on which provider is available to serve it under the terms above.
6. We never sell your data
We do not sell your personal information, and we do not share your personal information for cross-context behavioral advertising, in each case as those terms are defined under the California Consumer Privacy Act (CCPA/CPRA) and similar laws.
7. Sharing & subprocessors
We share data only with the service providers we need to run Relladex: database and file storage, application hosting, AI processing, payment processing, referral payouts, profile enrichment, web search and news, market data, and transactional email delivery. Each subprocessor is bound by confidentiality and data-protection obligations and may use the data only to provide services to us.
We may also disclose information when we believe in good faith it is required by law, legal process, or to protect the rights, safety, or property of Relladex, our users, or the public; or in connection with a merger, acquisition, or sale of assets, in which case we will require the recipient to honor this Privacy Policy.
A current list of subprocessors is available on request — email admin@relladex.com.
8. How long we keep data
We keep your account data and Your Content for as long as your account is active. Closing your account from the app deactivates it and signs you out, and we keep your data so that you can restore the account by signing back in — closing it is not by itself a request to erase it.
When you ask us to erase your data, email admin@relladex.com — we delete or irreversibly anonymize it within 30 days, with backups purged on our normal rotation thereafter. We may retain limited information longer when needed to comply with legal obligations, resolve disputes, or enforce our agreements.
9. Security
We use industry-standard safeguards to protect your data, including encryption in transit, encryption at rest where applicable, access controls, least-privilege practices, and audit logging. No service can be 100% secure, and we cannot guarantee the absolute security of your data. If you believe your account has been compromised, contact us immediately at admin@relladex.com.
10. International transfers
Relladex is based in the United States, and we process data in the United States. If you access the Service from outside the U.S., you understand that your data will be transferred to and processed in the U.S., which may have different data protection rules than your home country. Where required, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses for transfers from the European Economic Area, the United Kingdom, and Switzerland.
11. Children
The Service is intended for users 18 and older. We do not knowingly collect personal information from anyone under 18. If you believe we have, contact admin@relladex.com and we will delete it.
12. Your rights (EU/UK — GDPR)
If you are in the European Economic Area, the United Kingdom, or Switzerland, you have rights under the General Data Protection Regulation (GDPR) and equivalent laws.
Legal bases. We process your data on these bases:
- Performance of a contract — to provide the Service you've requested.
- Legitimate interests — to secure the Service, improve it, prevent abuse, and run our business, where those interests are not overridden by your rights.
- Consent — for things you opt into, such as marketing emails. You may withdraw consent at any time.
- Legal obligation — when we must process data to comply with the law.
Your rights. Subject to applicable law, you can request access, correction, deletion, restriction, or portability of your data; object to certain processing; and withdraw consent. You also have the right to lodge a complaint with your local supervisory authority.
To exercise any of these rights, email admin@relladex.com. We do not currently have an EU representative; if our processing reaches a scale that requires one, we will appoint one and update this policy.
13. Your rights (California — CCPA/CPRA)
If you are a California resident, the California Consumer Privacy Act, as amended by the CPRA, gives you certain rights.
Categories of personal information we collect (mapped to CCPA categories): identifiers (name, email, account ID, IP); customer records (account info); commercial information (subscription and transaction metadata); internet/network activity (usage and device data); geolocation (approximate, derived from IP); and inferences drawn from the above to operate the Service. When you upload contacts or notes, we also process the personal information of your contacts on your behalf.
Purposes. We collect this information for the purposes described in “How we use your data” above.
No sale or sharing. We do not sell or share personal information for cross-context behavioral advertising.
Your rights. You may request to know, access, delete, or correct your personal information; to limit the use of sensitive personal information; and not to be discriminated against for exercising your rights.
How to submit a request. Email admin@relladex.com from the address associated with your account. We will verify your identity by confirming you control that address and, when needed, by asking you to confirm details we already have on file.
Authorized agents. You may use an authorized agent to submit a request on your behalf. The agent must provide written proof of authorization, and we may still ask you to verify your identity directly.
14. Changes to this policy
We may update this Privacy Policy from time to time. If we make material changes, we will give reasonable notice (for example, by email or in the Service) and update the “Last updated” date at the top. Continued use of the Service after the changes take effect means you accept the updated policy.
15. Contact us
For privacy questions or to exercise any of your rights:
Firelink Labs Inc. (DBA Relladex)
8437 Bell Oaks Dr
Suite -528
Newburgh, IN 47630
admin@relladex.com