Relay is operated by BioScout Services Inc., a British Columbia corporation doing business as Accel Bio ("we," "us," or "our"). This Privacy Policy explains how we collect, use, disclose, and retain personal information in connection with Relay, including its Close CRM integration and related support communications.
This policy applies to Relay. Hosting this policy on accel-bio.com does not make it a privacy notice for all of Accel Bio's other services or website activities. Close and other independently operated services have their own privacy policies.
1. Our role and contact details
We manage account, support, and service-administration information for our own operational purposes. When a business connects its CRM or other accounts to Relay, we process the imported information to provide the service to that business and follow its authorized instructions, subject to applicable law. The business remains responsible for its own collection and use of information about its contacts, employees, and other individuals.
For privacy questions, access or correction requests, deletion requests, or complaints, contact:
Privacy Contact — BioScout Services Inc. / Accel Bio
Email: matt@accel-bio.com
Location: British Columbia, Canada
2. Information we collect
Account and workspace information. This includes account identifiers, name, email address, organization information, preferences, selected CRM owners, and configuration information you provide to use Relay.
Connected CRM information. When you authorize the Close integration, Relay imports records available through that connection and its configured import scope. These can include leads and companies, contacts, names, business email addresses, telephone numbers, owners, opportunities, pipeline stages, record associations, and related activity. Activity information can include email subjects and bodies, notes, call details, meetings, tasks, timestamps, and other text or metadata made available by Close. Import coverage depends on source availability, permissions, and configuration; Relay does not necessarily import every field or attachment.
Connection credentials. Relay receives and stores Close OAuth access tokens and refresh tokens, together with connection identifiers, authorization scope, expiry information, and synchronization state. Tokens permit Relay to access the connected account without asking for your Close password. Relay encrypts these tokens before storing them in its application database.
Other connected sources. If you connect supported email, calendar, or meeting services, Relay can process the corresponding communication metadata, meeting details, notes, or transcripts made available to the enabled features. The information processed depends on the service and connection you authorize.
Derived information and enrichment. Relay creates and stores relationship summaries, assessments, recommendations, draft communications, and evidence references using imported information. Enabled enrichment features may also obtain business or professional signals about companies and contacts from external providers.
Operational and support information. We process service and synchronization logs, error information, usage events, and messages you send us. Hosting and authentication services may process technical information such as IP addresses, browser information, and access timestamps when you use Relay.
3. How we use information
We use information to:
- Authenticate users, maintain workspaces, and manage authorized connections.
- Import and organize CRM and other connected information into relationship timelines.
- Generate relationship analysis, follow-up recommendations, meeting preparation, and draft communications.
- Provide enabled enrichment, notifications, and email digests.
- Provide support, diagnose failures, maintain reliability, and protect against misuse or unauthorized access.
- Meet legal obligations, resolve disputes, and administer our agreements.
Relay's Close integration is designed to read CRM data. It does not create, change, or delete records in Close as part of the current import functionality. The OAuth permission granted by Close may be broader than the operations Relay performs. Authorization can permit continuing background access until the connection is revoked or otherwise expires.
4. AI processing
Relay uses external AI services, including OpenAI, for features such as analysis, classification, summaries, recommendations, and drafts. When these features run, relevant CRM or communication context is sent to the AI provider for processing. That context may include personal information, email or note text, and business relationship history. Resulting outputs may be stored in Relay.
AI processing is part of the enabled Relay functionality and may run automatically during background processing. Do not connect information that your organization is not authorized to have processed in this way. Contact us before connecting an account if your organization requires restrictions on external AI processing.
AI providers may retain information under their applicable service terms and account settings. This policy does not promise zero retention by those providers. AI outputs may be inaccurate and should be reviewed before use.
5. How we disclose information
Information is disclosed as needed to operate the features you use, including to:
- Infrastructure providers: hosting, database, and authentication services, including Railway and Supabase in Relay's supported deployment configuration.
- AI providers: including OpenAI, for the processing described above.
- Enrichment providers: including AutoBound where enabled. Queries may include company domains and, for supported contact enrichment, business email addresses or professional profile URLs.
- Communication providers: including Resend where enabled, to send service messages and digests that may contain recommendation or CRM-derived information.
- Integration providers: including Composio for supported connections that use it. Relay's native Close OAuth connection stores its tokens in Relay rather than relying on Composio to hold them.
- Authorized personnel and advisers: as needed for service operation, support, security, and professional advice.
Connected services also receive the requests necessary to retrieve or manage your authorized data. We may disclose information when required or permitted by law, to protect rights and security, or in connection with a merger, acquisition, financing, or transfer of the business, subject to applicable protections.
We do not sell imported CRM information or use it for unrelated advertising. We do not use one customer's imported CRM records to perform lead generation for another customer.
6. Storage, security, and international processing
Relay stores imported records and derived information in its application database. The service uses authentication, workspace-based access controls, and encryption of stored Close OAuth credentials. No system can guarantee absolute security.
Our providers and personnel may process information outside your province or country, including outside Canada. Information processed abroad may be subject to the laws of that jurisdiction and lawful access by its authorities. Contact us if you need details about processing locations or require a particular data residency arrangement before connecting an account.
7. Retention, disconnection, and deletion
Imported information and derived outputs are retained to provide the connected workspace and its history. Retention also depends on account status, deletion instructions, operational needs, and applicable legal obligations. Disconnecting a source and deleting its imported information are separate actions: stopping future access does not necessarily remove records already imported into Relay.
You may use the available source-disconnection and data-removal controls or contact matt@accel-bio.com to request removal of imported data or closure of your Relay account. You may also revoke the application's authorization through Close. Removing Relay's copies does not delete the original records in Close.
We will assess and act on deletion requests in accordance with applicable law. Information that must be retained for legal obligations, disputes, or security may be retained for those purposes. Copies in backups and provider systems may remain subject to the applicable retention and deletion processes; disconnection does not guarantee immediate erasure from every backup or provider system.
8. Your choices and rights
You choose which supported accounts to connect and can withdraw authorization. Features that depend on an account may stop working after withdrawal.
Depending on applicable law, you may request access to personal information, correction of inaccurate information, information about its use or disclosure, withdrawal of consent, or deletion subject to legal exceptions. We may need to verify your identity and authority before responding. Where information belongs to a customer's CRM, we may coordinate with that customer to address the request.
Send requests or complaints to matt@accel-bio.com. We will respond within the period required by applicable law and explain any applicable limitation. You may also contact the Office of the Information and Privacy Commissioner for British Columbia or another privacy authority with jurisdiction over your complaint.
9. Intended use
Relay is a business service intended for adults. It is not intended for children or for storing patient records, clinical records, or other highly sensitive personal information. Do not connect such information without a separate written agreement addressing its handling.
10. Changes to this policy
We may update this policy as the service or our practices change. We will update the effective date and provide additional notice of material changes where required. If a new use requires consent, we will obtain it before that use begins.