This Privacy Policy explains how Farmer Media, LLC d/b/a RelayLeads ("RelayLeads," "we," "us") collects, uses, shares, keeps, and protects information in connection with the RelayLeads platform (including the RelayOS operator app), our websites, and the communications we send, including SMS text messages.

1Scope & our role

RelayLeads provides a platform that service businesses ("Clients") use to run a booking page, capture leads, quote and schedule work, take payments into their own accounts, and communicate with their own customers. Our handling of information falls into two roles:

• As a service provider (processor). When we process information about a Client's customers and leads on that Client's behalf, the Client decides how that information is used. The Client is responsible for its own privacy practices and for any consents it needs from its customers.
• As a controller. For information about our Clients, people who sign up for updates from us, and visitors to our own websites, and for operating and securing the platform, we decide how information is used and this Policy governs directly.

2Information we collect

About Clients (the businesses that use RelayLeads)

• Sign-in information — your name, email address, and Google account identifier when you sign in with Google. We do not store a password for you.
• Business information — business name, address, service area, phone number, hours, services, prices, photos, logo, and the content of your booking page.
• Alert number — a mobile number you give us for new-lead alerts, and your consent to receive them.
• Billing information — your subscription and payment details for RelayLeads plans, handled by Stripe. We see the card brand and last four digits, not the full card number.
• Connected accounts — when you connect Square or Google Calendar, we store the access tokens those services issue, in encrypted form, so we can act on your behalf.

About people who book with a Client

• Contact details — name, phone number, email address, and the service address.
• Request details — the services, options, dates, and answers given on the booking form, and any notes.
• Photos — images attached to a booking. Location and other embedded metadata are removed before they are stored.
• Payment — payments are made to the Client's own Square account. Card details are entered in Square's secure payment fields; we receive the payment's status, never the card number.
• How the booking page was reached — the referring link or ad, campaign tags, and advertising click identifiers (such as Google or Facebook click IDs) present in the link, plus an approximate location (city or region) and a shortened form of the IP address. These help the Client see which listings and ads bring in work, and help us detect abuse.
• Consent records — whether you agreed to receive texts, the wording you agreed to, and when.
• Phone calls — if a Client uses RelayLeads phone answering, the caller's number, the conversation, and the details captured from it.

About people who sign up for updates from us

• Your email address and mobile number, your consent to receive our messages, and a record of when and where you gave it.

Collected automatically

• Usage and device data — pages viewed, referring pages, approximate location derived from the IP address, and browser and device type, used to operate, measure, and secure the service.
• Cookies, local storage, and similar technologies — described in section 8.

3How we use information

We use information to:

• provide, maintain, and improve the platform and its features;
• take bookings, quote work, schedule jobs, sync with a Client's calendar, and send confirmations, reminders, and payment requests on the Client's behalf;
• send Clients new-lead alerts and service notices;
• process payments through the payment providers described below;
• send product news, tips, and offers to people who have agreed to receive them;
• measure how people find and use our own websites;
• secure the platform, prevent fraud and abuse, and enforce our terms;
• comply with legal obligations.

We do not use a Client's lead or customer data for our own marketing, and we do not sell personal information.

5AI features

Some optional features use artificial intelligence: setting up a booking page from a conversation, drafting a business's site and proposals, and suggesting the next step on a lead. They run on models provided by Anthropic. A Client chooses whether to use them.

• When a Client uses lead suggestions, job details, form answers, notes, and the service address may be sent to Anthropic to produce the suggestion. We remove direct contact details such as name, phone number, and email first.
• When a Client drafts a proposal from its own notes, whatever the Client includes in those notes is sent.
• AI output is a draft for the Client to review; it does not make decisions about you.

6How we share information

We share information only as needed to run the service:

• With our Clients — information from a booking, request, or call is made available to the Client you are dealing with.
• With service providers — the companies below perform specific services for us under contract and may use the information only to provide those services.
• Legal and safety — where required by law, or to protect rights, safety, and the integrity of the service.
• Business transfers — in connection with a merger, acquisition, or sale of assets, subject to this Policy.

A Client may also copy information into its own tools, such as its Square account or Google Calendar. Those copies are governed by the Client's practices and those providers' terms.

We do not sell personal information.

7How long we keep it

• Customer contact details (name, phone number, email address, and service address) expire automatically after a period each Client sets: 30 days by default. While a job is still open, they are kept so the Client can complete it, but never more than one year.
• Job records — what was booked, when, the options and form answers, amounts, and how the booking page was reached — are kept with the Client's account so the Client can run its business and books. They are deleted when the Client closes its account and asks us to delete its data.
• Photos are kept with the job they belong to.
• Client account and billing records are kept while the account is active and afterward as needed for legal, tax, accounting, and security obligations.
• Consent and opt-out records are kept as long as needed to show what was agreed to and to honor opt-outs.
• Deleted information may remain in backups for a limited period before it is overwritten.

8Cookies & tracking

• Sign-in — the RelayOS app uses a cookie to keep a Client signed in. It is required for the app to work.
• Local storage — the app and booking pages store small items on your device, such as setup progress, display preferences, and how a booking page was reached, so they work as expected and the Client can see where bookings come from.
• Website analytics — Cloudflare measures visits to our websites and booking pages without using cookies.
• Advertising measurement — relayleads.io (our marketing website, not Clients' booking pages) uses an OpenAI measurement tag to understand which of our ads lead to visits and sign-ups. Under some US state laws this may be considered "sharing" for advertising. You can block it with your browser's tracking protection or an ad blocker, or ask us to stop by emailing the address below.
• Payment providers — Square's and Stripe's payment fields may set their own cookies for fraud prevention.

9Security

We use technical and organizational measures designed to protect information, including:

• encryption in transit (HTTPS) for our websites, app, and booking pages;
• encryption at rest for contact details entered on booking pages, with keys kept separate from the database;
• access controls that tie every request to the signed-in Client's own business;
• sign-in through Google, so we hold no passwords;
• card numbers entered only in Square's or Stripe's own fields, never stored by us;
• masking of phone numbers in a Client's job list.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security. To report a security concern, email us at the address below.

10Your choices & rights

• If you booked with a Client — you can delete your contact details yourself from your booking link, confirmed with a one-time code. You can also ask the Client, or email us and we will help the Client respond.
• Texts — reply STOP to any message to opt out.
• Emails from us — use the unsubscribe link in any email.
• Advertising measurement — see section 8.
• Access, correction, and deletion — depending on where you live, you may have rights to access, correct, delete, or obtain a copy of your personal information, to opt out of certain processing, and not to be treated differently for using these rights. Email us to make a request. We may need to verify your identity first, and we aim to respond within 30 days. You may use an authorized agent where the law allows.

For information we process on a Client's behalf, we may refer your request to that Client and help them respond.

11Children's privacy

The platform is intended for businesses and adults. We do not knowingly collect personal information from children under 13 (or the age defined by local law). If you believe a child has provided information, contact us and we will delete it.

12Changes to this policy

We may update this Policy from time to time. When we do, we will revise the "Last updated" date above and, where appropriate, provide additional notice. The version at this address is always the current one.

13Contact us

Questions about this Policy or your information, and privacy or security requests, can be directed to:
Farmer Media, LLC d/b/a RelayLeads
1920 Paxton Street, Unit B, Harrisburg, PA 17104
support@relayleads.io