security

Data Handling

security/data-handling/page.mdx — What data Relais does and doesn’t store:

• Stored: Your name, email (from Google OAuth). Domain names you register. Delivery log metadata (sender address, recipient address, subject line, status) — retained for 30 days then automatically deleted via pg_cron.
• Not stored: Email bodies, attachments, CC/BCC, full headers, message IDs. These pass through memory and are never written to disk or database.
• OAuth tokens: Stored encrypted at rest (AES-256). Relais uses these to insert email into your Gmail inbox. If you revoke access via your Google account, the tokens become useless immediately.
• The delivery log exists for troubleshooting (“did that email arrive?”). It intentionally stores the minimum metadata needed — sender, recipient, subject, and whether delivery succeeded or failed. After 30 days, it’s gone. Tone: transparent, no corporate fluff. Acknowledge what’s stored, explain why, explain what’s not.