Privacy policy

01Data controller

RELAY X (SAS), 18 Bis Rue de Villiers, 92300 Levallois-Perret, France, is the controller of data collected via this site and its platform. Any question about your data: contact@relay-x.com.

02Data we process and sources

We only collect the data needed for the purposes below, from the following sources:

• Data you provide: first and last name, business email, company, role, message (forms, demo requests, exchanges).
• Data collected automatically while browsing: pages visited, technical data and aggregated statistics via analytics tools.
• Customer data (platform): documents and regulatory data you entrust to us as part of the service (supplier files, compositions, certificates).
• We do not enrich your data through third-party data brokers.

03Purposes and legal bases

• Respond to your requests and follow up — basis: pre-contractual measures / legitimate interest.
• Provide and operate the platform — basis: performance of the contract.
• Improve and secure the service, measure audience — basis: legitimate interest.
• Send marketing communications — basis: consent, withdrawable at any time.
• Comply with our legal and accounting obligations — basis: legal obligation.

04Data sharing

We do not sell your data. It may only be shared with:

• Our technical processors (hosting, AI, analytics, email), strictly for the purposes above and under a data processing agreement compliant with Article 28 GDPR.
• Competent authorities, where required by law.
• A potential acquirer, in the event of a corporate transaction (merger, sale), with the same level of protection maintained.

05Hosting and location

Your data is hosted in France on OVH infrastructure (Paris and Gravelines datacenters). No application data is transferred outside the European Union for hosting.

06International transfers

As a principle, your data stays within the European Union. Should a processor involve a transfer outside the EU, it would be governed by appropriate safeguards (European Commission standard contractual clauses or an adequacy decision).

07AI and processors

The platform relies on AI models operated through selected processors. Your content is never used to train these models: processing is carried out in "zero retention" mode (AI providers do not retain your data beyond processing time).

The list of processors is available on request at contact@relay-x.com. Each processor is bound by a data processing agreement compliant with Article 28 GDPR.

08Retention periods

• Prospects and requests: 3 years from last contact.
• Customers: duration of the contractual relationship, then archiving per legal obligations.
• Platform data: kept for the term of the contract, then deleted or returned at its end.
• Analytics: per each tool’s own periods (13 months maximum for cookies).

09Security

Data is encrypted at rest (AES-256) and in transit (TLS 1.3), with strict per-client isolation and least-privilege access control. An ISO 27001 certification process is underway.

10Cookies

The site uses cookies strictly necessary for its operation and, subject to your consent, analytics cookies. You can set or withdraw your consent at any time via your browser settings.

11Your rights

You have the right to access, rectify, erase, restrict, object to and port your data, as well as to set post-mortem directives.

To exercise them: contact@relay-x.com. You may also lodge a complaint with the CNIL (www.cnil.fr).

12Minors

RELAY X’s site and services are intended for professionals and are not directed at minors. We do not knowingly collect data relating to persons under 16.

13Changes

This policy may be updated to reflect legal or service changes. The applicable version is the one published on this page, with its update date shown at the top. In the event of a significant change, we will inform you by appropriate means.