Legal

Privacy Policy

Effective September 21, 2026

Relvant gives a company's employees access to AI models, and checks every message for confidential information before it reaches one. This policy explains what information Relvant collects on the website (relvant.com) and in the Relvant apps for iPhone and Android, what we do with it, who can see it, and the choices you have.

1. Your company and Relvant

Relvant is a workplace service. Your company creates your account and decides how Relvant is used: which AI models are available, what counts as confidential, and who inside the company can review activity. For the information you put into Relvant at work, your company is responsible for how it is used and Relvant handles it on your company's behalf. Questions about your company's own rules are best answered by your company's Relvant administrator.

2. Information we collect

Your account

Your full name, work email address, country, role, and the locations and departments your company assigns you to.
A profile photo, if you add one.
Sign-in details: your password (stored only as a one-way hash, never as text), your authenticator secret if you turn on two-factor authentication (stored encrypted), and, if you sign in with Google, the identifier Google gives us for your account. We do not receive your Google password.

What you send and receive

The messages you write, the documents and images you attach, and the answers the AI model writes back.
Messages that RelvantGuard stopped. They are not sent to an AI model, but they are kept so your company's administrators can review what was stopped and why.
Voice dictation: if you use the microphone, the recording is sent to Relvant's own speech service to be turned into text. The recording is not kept once the text is returned.

Usage and activity

How much you use Relvant: the model chosen, the number of tokens used, and when.
An activity log of actions in your account, such as signing in, changing your password or profile, and changes an administrator makes. Each entry records the time, the IP address, the country it maps to, and whether the web or the mobile app was used. Passwords, sign-in tokens and authenticator codes are never written to it.

Your company

The company's name, website, industry, country, time zone and logo, its locations and departments, and its confidentiality rules (stored encrypted).
If your company connects its own AI provider keys, those keys are stored encrypted and are never shown again in full.

When you ask for access

The details you enter in the Request access form: your name, work email, company, and optionally job title, company size, country, phone number and a message.

What we do not collect

Relvant has no advertising and no advertising trackers. The apps, and the website once you are signed in, have no analytics trackers either. The public pages of relvant.com use Google Analytics to count visits, only if you accept it, as described under Cookies.
The apps do not read your contacts, location, photos library or calendar. The microphone is used only while you dictate, and files are read only when you choose one to attach.

3. How we use information

To provide the service: sign you in, check your messages, send allowed messages to the AI model you chose, and show you your conversations.
To protect your company's confidential information: RelvantGuard reads every message, attached document and image before anything is sent to an outside AI provider. If the check cannot run, the message is not sent.
To give your company oversight: usage figures, reports, alerts and the activity log.
To keep Relvant secure: rate limits, sign-in protection, and investigating misuse.
To send service email: invitations, account activation, password resets, alerts and reports your company schedules. We do not send marketing email to employees.
To reply when you ask for access or write to us.

We do not sell personal information, we do not share it for advertising, and we do not use your messages, documents or answers to train AI models.

4. How messages reach AI models

Checked first, on infrastructure Relvant controls. RelvantGuard and the models that read images and transcribe speech run on Relvant's own servers in the United States.
Blocked or redacted. Depending on your company's settings, a message containing confidential information is either not sent at all, or sent with the confidential values replaced by placeholders. The original values are restored only on your own screen.
Allowed messages go to the model you chose (for example from Anthropic, OpenAI or Google). On Relvant's connection they are routed through OpenRouter to endpoints with zero data retention, meaning the provider does not keep your message or use it for training.
Your company's own keys. If your company connects its own account with an AI provider, its messages go to that provider under your company's agreement with it, and that provider's data handling applies.
Images are never sent to an outside AI provider. Only the text Relvant's own model reads from them is sent, after it is checked.

5. Who can see your information

You.
Your company. Owners and administrators can read employees' conversations, including messages that were blocked, and can see usage and the activity log. People with the Manager role see company-wide analytics and reports, which include blocked messages. A department's manager sees usage numbers for their team, not message text.
Relvant's support administrators, when needed to run and support the service. When anyone other than you opens one of your conversations, that is recorded in the activity log.
Service providers that process information for us: Amazon Web Services (hosting and file storage, United States), Cloudflare (network security and delivery), Twilio SendGrid (email delivery), OpenRouter and the AI model providers (allowed messages only, as described above), and Google (sign-in, only if you choose to sign in with Google, and Google Analytics on the public pages of the website, only if you accept it). The website loads its icons from Font Awesome, which receives your browser's IP address as any web server does.
Authorities, where the law requires it, and a successor company if Relvant is ever merged or acquired, under this policy's protections.

6. How we protect it

Connections are encrypted in transit. Conversations, attached files, confidentiality rules, authenticator secrets and provider keys are encrypted at rest.
Passwords are stored only as one-way hashes. Two-factor authentication is available to every account.
On your phone, your sign-in token is kept in the device's secure storage (Keychain on iPhone, Keystore on Android).
Access to conversations by anyone other than their author is logged.

No system is perfectly secure, and no filter catches everything. RelvantGuard lowers the risk of confidential information leaving your company. It does not promise that a leak is impossible.

7. How long we keep it

Conversations and the activity log are your company's records. They are kept for as long as your company uses Relvant, unless your company asks us to delete them sooner.
Your account details are kept while your account exists.
Voice recordings are not kept. Sign-in sessions and security counters expire on their own.
Request access details are kept while we are in contact with you about Relvant.

8. Deleting your account

You can ask for your account to be deleted at any time:

In the mobile app: Settings, then Delete account at the bottom of the page.
Or write to [email protected] from the email address on your account.

We confirm the request with you by email and then permanently delete your account and personal data (your profile, photo and sign-in details) within 30 days. Conversations you had at work are part of your company's records, so we settle what happens to those with your company. If you are the owner of your company's Relvant account, we will first ask who should take over, or whether to close the company's account.

9. Your rights

Depending on where you live, you may have the right to see the personal information held about you, correct it, delete it, receive a copy, or object to or restrict how it is used. You can correct your name, country and photo yourself in Settings. For anything else, ask your company's Relvant administrator or write to [email protected]. Because your company controls its workplace records, we may need to work with your company to answer. You will not be treated differently for using these rights, and you may also complain to your local data protection authority.

10. Cookies

The website uses only the cookies it needs to work: one that keeps you signed in, one that protects forms against forgery, and short-lived ones used during two-factor and Google sign-in. Your light or dark theme is remembered in your browser's own storage. There are no advertising cookies. The mobile apps do not use cookies.

The public pages of relvant.com (the home page, About, this policy and the Terms of Service) ask whether we may use Google Analytics to count visits and see which pages are read. Nothing is loaded from Google Analytics, and it sets no cookies, unless you choose Accept. If you do, Google Analytics sets its own cookies and receives your browser's IP address, the address of the page you opened and general details about your device and browser. Your choice is remembered in your browser's own storage. If your browser sends a Global Privacy Control signal, we treat that as Decline without asking. It is never loaded on the sign-in, password reset, invitation and activation pages, or anywhere inside Relvant once you are signed in, so it never sees your messages, documents or account.

You can change your mind at any time: open Cookie settings, also linked at the bottom of every public page. Choosing Decline stops Google Analytics and removes its cookies from this website.

11. Where information is processed

Relvant runs in the United States. If you use Relvant from another country, your information is transferred to and processed in the United States.

12. Children

Relvant is a workplace service for adults. It is not directed to children, and we do not knowingly collect information from anyone under 18.

13. Changes to this policy

When we change this policy we update the date at the top of this page. If a change is significant, we tell your company's administrators before it takes effect.

14. Contact us

Relvant · [email protected]