What we collect.Why. And what you can do about it.
We're a product studio, not an ad network. We collect what we need to reply to you and keep the site working — and almost nothing else.
- 01 · Who we are
- 02 · What this policy covers
- 03 · What we collect
- 04 · Why we collect it
- 05 · Legal basis
- 06 · Who we share it with
- 07 · International transfers
- 08 · How long we keep it
- 09 · Your rights
- 10 · Cookies and tracking
- 11 · Security
- 12 · Children's privacy
- 13 · Changes to this policy
- 14 · How to contact us
Relay Studio, the data controller.
This Privacy Policy applies to Relay Studio ("Relay Studio," "we," "us," or "our"), operating the website at relayhq.studio and related subdomains. Relay Studio is in the process of forming as Relay Studios LLC, an Indiana limited liability company. References to Relay Studio in this policy mean both the operating studio today and the formed entity once registration completes.
For privacy-related questions or requests, the contact point is privacy@relayhq.studio. A human reads everything sent there.
The marketing site, the forms on it, and the analytics behind it.
This policy covers personal data we collect when you visit relayhq.studio — including any data you submit through the forms on this site (contact, subscribe, partner), data automatically collected as you browse (analytics, performance metrics), and data stored in third-party systems we use to operate the site (Vercel for hosting and analytics; Resend for email delivery and subscriber lists).
Relay Studio operates separate products at their own domains. Each Relay-operated product has its own privacy policy that governs the data practices of that product, including any tracking, retargeting, or marketing analytics that product uses. The policy you're reading covers only the Relay Studio marketing site at relayhq.studio. When you click through to a Relay-operated product site, that product's privacy policy governs your interaction with it.
It does not cover data you may share with us under a signed engagement agreement (those engagements are governed by their own terms), or data third-party sites collect when you click an outbound link.
Three categories: forms, analytics, and email lists.
Information you give us through a form. The site has three forms:
- Contact form (/contact): we collect your name, email address, company, project description, and consent flag.
- Subscribe form (/subscribe): we collect your email address only.
- Partner Network form (/partner): we collect your name, email address, organization, partnership-fit description, and consent flag.
Information collected automatically. When you load a page, our hosting provider (Vercel) records standard server-log data and aggregate analytics: page views, referring URL, country (from IP), device class, browser type, and Core Web Vitals performance metrics. We do not log full IP addresses for individual identification.
Email-list membership. If you submit any of the three forms, your email is added to the corresponding list in our email infrastructure (Resend). Subscribe form submissions go to a Subscriptions list. Partner form submissions go to a Partner Network list. Contact form submissions go to an Inbound list. These lists are operational records — we use them to deliver Field Notes content (subscribers only) and to keep track of who reached out to us and what about. The lists are not shared, sold, rented, or accessed by any third party other than the named processors in Section 06.
What we do not collect. We do not run marketing cookies, retargeting pixels, advertising trackers, or behavioral profiling tools. We do not collect special categories of personal data (health, religion, political views, biometric identifiers, etc.). We do not collect data from children — see Section 12.
To reply to you, deliver what you signed up for, and keep the site working.
To respond to inquiries. Contact form submissions are used to reply to your message. That's the entire purpose. We do not use contact form data for unrelated marketing.
To deliver what you subscribed to. Subscribe form submissions are used to send you Field Notes and studio updates by email, at our publishing cadence.
To evaluate partner fit. Partner Network form submissions are used to assess whether a potential partnership makes sense and to follow up with you about it.
To operate and improve the site. Analytics data helps us see which pages get read, which don't, and whether the site is loading quickly. We use it to write better content and improve performance. We do not use it to profile individuals.
Consent, legitimate interests, and contract.
If you are located in the European Economic Area, the United Kingdom, or another jurisdiction that requires a stated legal basis under GDPR (or equivalent law), the legal bases we rely on are:
- Consent (GDPR Art. 6(1)(a)) — for the Subscribe form (you actively sign up to receive emails) and for the explicit consent checkbox on the Contact and Partner forms.
- Legitimate interests (GDPR Art. 6(1)(f)) — for analytics, site operation, fraud prevention (honeypot fields, MX-record email validation), and following up on partnership inquiries you initiated.
- Performance of a contract (GDPR Art. 6(1)(b)) — once an engagement is signed, processing necessary to deliver that engagement.
You can withdraw consent at any time. Withdrawing consent does not affect the lawfulness of processing that already happened.
We process data in the United States.
Relay Studio operates from the United States, and both of our named processors (Vercel and Resend) store and process data on US-based infrastructure. If you access the site from outside the United States — including the European Economic Area, the United Kingdom, or other jurisdictions — your personal data will be transferred to and processed in the United States.
For users in the EEA, UK, and other jurisdictions with cross-border transfer requirements, both Vercel and Resend rely on Standard Contractual Clauses or equivalent safeguards approved by the European Commission and the UK Information Commissioner's Office. By submitting personal data to us, you understand that the data will be transferred to the United States and processed under US law.
As long as we need it for the stated purpose. Then we delete or anonymize.
- Contact form submissions: kept in our email system and Resend Inbound list as long as the conversation is active or the engagement is live. After 24 months of inactivity, we archive or delete on request.
- Subscribe list: kept until you unsubscribe. You can unsubscribe at any time using the link in any email we send.
- Partner Network list: kept while the partnership conversation is active. After 24 months of inactivity or upon your request, we delete.
- Analytics and server logs: retained according to Vercel's standard retention (typically 30–90 days for high-resolution server logs; aggregate analytics retained longer).
You can ask us to delete your data at any time — see Section 09.
Access, correction, deletion, portability, objection — on request.
Depending on where you live, you may have the following rights under applicable privacy law:
- Access: ask for a copy of the personal data we hold about you.
- Correction (rectification): ask us to correct inaccurate or incomplete data.
- Deletion (erasure): ask us to delete your data, subject to certain legal exceptions (for example, we may need to keep some records for legitimate business or legal reasons).
- Portability: receive your data in a structured, commonly used format.
- Objection or restriction: object to our use of your data in certain circumstances or ask us to restrict it.
- Withdraw consent: where we rely on consent, you can withdraw it at any time without affecting prior lawful processing.
- Opt out of sale or sharing: under CCPA / CPRA, you can opt out of any sale or sharing of personal data. We do not sell or share for cross-context behavioral advertising, so this is effectively the default — but you can confirm in writing if you want.
- Lodge a complaint: you have the right to file a complaint with your local data protection authority (in the EU/UK) or your state attorney general (in the US) if you believe we have violated your privacy rights.
To exercise any of these rights, email privacy@relayhq.studio with enough detail for us to find your record. We respond within thirty days. We will not retaliate against you for exercising any privacy right.
Industry-standard safeguards on every layer.
We implement administrative, technical, and physical safeguards designed to protect personal data from unauthorized access, alteration, disclosure, or destruction. Specifically:
- All traffic between your browser and the site is encrypted in transit using TLS / HTTPS.
- Form submissions are validated server-side before any processing, including format checks, length caps, and a disposable-domain blocklist.
- Both named processors (Vercel and Resend) are SOC 2 Type 2 compliant and maintain their own security programs covering data at rest, data in transit, and access controls.
- Access to operational systems is restricted to Relay Studio team members on a need-to-know basis, secured by strong passwords and two-factor authentication.
No security program is perfect. We cannot guarantee absolute security, and we ask that you use a strong, unique password if you ever sign up for any Relay-operated service. If you believe your data has been compromised, contact us at privacy@relayhq.studio.
Not directed at children under 16.
The site is intended for business users and is not directed at children under the age of 16. We do not knowingly collect personal data from anyone under 16. If you are a parent or guardian and believe your child has provided us with personal data, please contact us at privacy@relayhq.studio so we can delete it.
We update the page when our practices change.
If we start collecting something new, persisting something we used to delete, add a new processor, or change a retention period, this page changes first. The Last updated date at the top reflects the most recent revision.
For material changes that affect your rights, we will provide additional notice — typically by email to subscribers on the relevant list, and a notice banner on the site for at least 30 days. Continued use of the site after a material change constitutes acceptance of the updated policy.
One email address. A human reads everything.
For privacy questions, rights requests, or any other privacy-related inquiry, contact us at:
For general inquiries, use the contact form.
Questions about any of this?
Email privacy@relayhq.studio or use the contact form. A human reads everything.