Relaxtay Chat – Privacy Policy

Effective date: November 5, 2026

Relaxtay Chat (the “App”, at https://chat.relaxtay.com and in the Android/iOS apps) is the private team chat of Relaxtay staff. It is operated by RELAXTAY INC (“Relaxtay”, “we”, “us”), a vacation rental management company in the United States. Accounts are created by Relaxtay administrators; there is no public sign-up.

Information we collect

• Account and profile: your name, username, work email address, and optionally a phone number, job title, profile photo, status and time zone. If you use Google sign-in we receive your name and email address from Google. Passwords are stored only as a salted one-way hash; if you turn on two-step sign-in, an encrypted authenticator secret.
• Messages and files: messages, replies, reactions, polls, lists, canvases, reminders and the photos, videos, documents and voice messages you and your teammates post. The App uses your camera, photos or microphone only when you choose to take or attach a photo/file, record a voice message or join a call.
• Calls (huddles): voice/video go directly between the people in the call; they are not recorded or stored. Connection-setup servers (Cloudflare and Google STUN) see the devices' network addresses.
• Guest booking emails: if switched on by an administrator, new emails sent to Relaxtay's bookings mailbox (which can contain guest names, contact details and booking details) are copied into a staff channel. An optional WhatsApp guest inbox exists but is currently switched off.
• Notifications: if you allow notifications, a push subscription for your device/browser.
• Sign-in and security records: a secure session cookie (only a hash is stored), a sign-in log (time, method, IP address, device/browser and approximate location derived from the IP) and failed-attempt counters to block password guessing.
• Links: when a message contains a web link, our server fetches that page to show a preview.
• We do not collect your contacts, precise location or device advertising IDs.

How we use it

We use this information only to run the App for Relaxtay's team. We do not sell personal information, we do not show ads, we do not use advertising IDs, analytics or tracking SDKs, and we do not use the data to train AI models.

Sharing and service providers

• Slack: Relaxtay's chat is synchronized with Relaxtay's own Slack workspace: messages and files from Slack channels are imported, and if you link your Slack account, the messages you post in the App are also posted to Slack under your Slack account.
• Cloudflare R2 (cloud storage) stores the uploaded files in a private, access-controlled bucket; encrypted backups are also kept there.
• Google for Google sign-in (and, only if an administrator connects it, read-only Google Calendar posts and the bookings Gmail mailbox).
• Email delivery (Relaxtay's mail server/provider) for sign-in and password-reset emails.
• Push services (Google Firebase Cloud Messaging, Apple, or your browser's push service) to deliver notifications.
• AI helpers (optional, currently off): if an administrator adds an AI key (Google Gemini or OpenAI), the text you ask a helper about is sent to that provider to get an answer. Nothing is sent unless someone uses a helper.
• Relaxtay My Tasks (our own app) when you turn a message into a task.
• Otherwise we share data only when required by law.

Storage and security

All traffic to and from the App uses encrypted HTTPS connections only (plain HTTP requests are redirected to HTTPS). Data is stored on Relaxtay's own server in an encrypted database, and uploaded files in a private Cloudflare R2 storage bucket; passwords are stored only as salted one-way hashes, and keys for connected services are stored encrypted. Access is limited to authorized Relaxtay staff, with optional two-step sign-in.

A recent copy of conversations is kept on your device so the App opens quickly; signing out removes it.

Retention

Messages and files are kept as Relaxtay business records until deleted by their author or an administrator; administrators can set automatic deletion after a number of days. Sign-in logs and security records are kept only as long as needed for security. Encrypted backups roll off within 30 days.

Deleting your account and data

You can edit or delete your own messages and files at any time.

To request deletion of your account or personal information, email info@relaxtay.com from the email address on your account (or ask your Relaxtay administrator in the App). We switch off the login right away on request and delete the account and its personal information within 30 days, and confirm by email. Some business records (for example messages or work items you posted for the team) may be kept where we are legally required to or where they are needed for Relaxtay's business records; you may ask us to remove them too.

Deleted data is removed from the live database; encrypted backups roll off within 30 days.

Children

The App is for adult staff only and is not directed to children under 13. We do not knowingly collect information from children.

Changes

If this policy changes we will update this page and the effective date above.

Contact

RELAXTAY INC · 2 Ralph Blvd Unit 102, Monsey, NY 10952, USA · info@relaxtay.com · relaxtay.com