Privacy Policy

Last Updated: 01-Nov-2025

This Privacy Policy explains how RelayOrca (“Company”, “we”, “our”, or “us”) a product of Innovatily Inc collects, uses, and protects information in connection with our AI-driven social engagement and response platform (“Service”).

By using RelayOrca, you agree to the terms described below.

---

1. Information We Collect

We collect the following categories of data:

1.1 Account Information

• Name, email address, password, role
• Company/tenant information

1.2 Connected Social & Communication Channels

When you connect channels (e.g., Instagram, Facebook, WhatsApp, Email):

• Public comments
• Direct messages
• Mentions, reactions
• Metadata provided by the platform
• Sender IDs (as allowed by the channel’s API)

We do not collect passwords for these platforms.

1.3 Customer Content

Messages, comments, DMs, tickets, or other text your customers send to your channels.

1.4 Knowledge Base & Documents

Product catalogs, FAQs, policy documents, and related content you upload for grounding.

1.5 Usage Information

• Log data, browser type, IP address
• Timestamps, workflow events
• API calls, response actions

1.6 Cookies & Tracking

We use cookies for authentication and analytics.

---

2. How We Use Information

We process data to:

• Provide real-time listening across social channels
• Understand intent, sentiment, and risk levels
• Generate grounded responses
• Apply your autonomy/policy rules
• Route messages for human-in-the-loop review
• Update your CRM or downstream systems
• Improve model performance and platform reliability
• Comply with legal requirements

RelayOrca does not use your tenant data to train public or shared AI models.

---

3. Data Sharing

We may share data with:

3.1 Service Providers

• Cloud hosting (IBM Cloud/AWS/GCP)
• Vector DB (Qdrant)
• Analytics and monitoring tools
• Email/SMS providers

3.2 Connected Platforms

When executing responses:

• Instagram/Facebook (Graph API)
• WhatsApp Cloud API
• Email providers
• Zoho CRM or other integrations you configure

We only send what is required to perform the requested action.

3.3 Legal Compliance

We may disclose information if required by law, subpoena, or governmental request.

We do not sell or rent your data.

---

4. Data Security

We use industry-standard security practices:

• Tenant isolation using tenant_id and org_id
• Encryption in transit (TLS 1.2+) and at rest
• Role-based access control
• Rate limiting and audit logs
• Secrets stored in IBM KeyProtect/Vault

---

5. Data Retention

We retain data only as long as necessary to:

• Provide the service
• Meet legal obligations
• Support telemetry & analytics

You may request deletion of your tenant data at any time.

---

6. International Transfers

Your data may be processed in regions where our cloud providers operate.
We use contractual protections for cross-border transfers where required.

---

7. Your Rights

Depending on jurisdiction, you may have rights to:

• Access your data
• Correct or update information
• Request deletion
• Export data
• Restrict processing

Contact us at privacy@[yourdomain].com for requests.

---

8. Children’s Privacy

RelayOrca is not intended for individuals under 16.
We do not knowingly collect data from children.

---

9. Updates to This Policy

We may update this Privacy Policy.
Changes take effect when posted.

---

10. Contact

For questions or requests:
📧 privacy@[yourdomain].com
📍 [Insert Company Address]