Privacy Policy

1. Who we are

Relaystrike is an outreach platform run by Velorum AI, based in Germany ("we", "us"). For the data you give us to run your own account, we are the controller under the EU General Data Protection Regulation (GDPR).

For the contacts and companies a customer uploads or finds through Relaystrike to reach out to, the customer is the controller and we process that data on their behalf, as their processor. Questions about how a particular company contacted you are best sent to that company; we will help them answer.

Contact for anything in this policy: taku@velorum-ai.com.

2. What we collect

Account data. Your name, work email, company name, password (stored only as a hash by our authentication provider) and the workspaces you belong to.

Sign in with Google. If you choose it, Google shares your name, email address and profile picture with us. We use them only to create and sign in to your account. We do not request access to your Gmail, calendar or contacts through sign-in.

Workspace content. What you put into Relaystrike: your company profile, offers, writing examples, campaigns, email drafts, replies and settings.

Contact data you work with. Names, job titles, work emails, LinkedIn profile links, company details and public posts of the people and companies you choose to contact, whether you upload them or find them through the research features.

Outreach activity. Which emails and LinkedIn messages were sent, delivered, opened, clicked or answered, and unsubscribe requests.

Technical data. IP address (stored as a one-way hash for abuse limits), browser type, and the cookies described below.

3. How we use it, and our legal basis

• To provide the service you signed up for: accounts, workspaces, research, drafting, sending and reporting (contract, Art. 6(1)(b) GDPR).
• To keep Relaystrike safe: sign-up and rate limits, fraud and abuse prevention, security logs (legitimate interests, Art. 6(1)(f)).
• To send service emails: confirming your email, password resets, invitations and important notices (contract).
• To process contact data for customers, only on their instructions and only to run their outreach (Art. 28 GDPR, under our terms with them).
• To meet legal duties, such as tax and accounting records (legal obligation, Art. 6(1)(c)).

4. AI processing

Relaystrike uses AI models to research contacts and companies, draft and check emails, and classify replies. The relevant workspace content and contact data is sent to the model provider for that one task. Our AI providers process it under their commercial terms, which do not allow them to train their models on it.

We do not use one workspace's content to write for another workspace, and we do not sell personal data.

5. Google user data

Relaystrike's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We use Google data only to provide and improve the features you use, never for advertising, and never transfer it except as needed to run the service, for security, or to comply with the law.

6. Who we share it with

We use these service providers to run Relaystrike. Each processes data only on our instructions:

• Supabase: database and authentication.
• Vercel: hosting.
• Anthropic and OpenAI: AI models (OpenAI only for transcribing voice notes).
• Apollo.io and Apify: contact and company research from business and public sources.
• Aimfox: sending LinkedIn messages, when a workspace connects it.
• n8n and the customer's own mailbox provider (for example Google Workspace): sending emails.
• Google: Sign in with Google, when you use it.

Some of these providers are in the United States. Transfers there rely on the EU-US Data Privacy Framework where the provider is certified, or on the European Commission's Standard Contractual Clauses.

We may also disclose data when the law requires it, or to a buyer if the business is sold, under this same policy.

7. Cookies and tracking

We use only cookies needed to run the app: your sign-in session and the workspace you are working in. We do not use advertising cookies or third-party analytics trackers.

Emails sent through Relaystrike can include a small open-tracking image and tracked links, so the sender can see opens and clicks. Every outreach email includes a way to unsubscribe.

8. How long we keep it

We keep account and workspace data for as long as the account is active. When a workspace is closed we delete or anonymise its data within 90 days, except what we must keep by law (for example invoices, for up to 10 years under German law). Security logs are kept for up to 12 months. An unsubscribe is kept so the person is not contacted again.

9. Your rights

Under the GDPR you can ask to access, correct, delete or export your personal data, to restrict or object to our processing, and to withdraw any consent you gave. Write to taku@velorum-ai.com; we answer within one month. If you were contacted through Relaystrike, we will pass your request to the company that contacted you and help them act on it.

You can also complain to a data protection authority. Ours is the Berlin Commissioner for Data Protection and Freedom of Information (Berliner Beauftragte für Datenschutz und Informationsfreiheit).

10. Security

Data is encrypted in transit and at rest. Each workspace's data is kept separate from every other workspace's, access inside our team is limited to what is needed to run and support the service, and passwords are never stored in readable form.

11. Changes to this policy

If we change this policy we will update the date at the top, and tell account owners by email before a significant change takes effect.