1. Scope
This policy covers information we process as a controller about people who visit our website and use Rell. When you use Rell to manage your own records, you act as the controller of that workspace data and we process it on your behalf as described in our Terms.
2. Information we collect
Account information
When you create an account — including via Google sign-in — we collect your name, email address, profile photo (if provided), and a unique account identifier.
Workspace content
The objects, fields, records, and files you and your members create in your workspace. We process this to provide the service; we do not sell it or use it for advertising.
Usage and device data
Log data such as IP address, browser type, pages viewed, and timestamps, used to operate, secure, and improve the service.
3. Google sign-in (OAuth)
If you sign in with Google, we use Google OAuth to authenticate you. We request only the basic scopes needed to create your account — typically your email address and basic profile (name and profile picture).
- We use the information solely to create and secure your account and sign you in.
- We do not sell Google user data, and we do not use it for advertising.
- Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
- You can revoke our access at any time from your Google Account's security settings.
4. How we use information
We use the information we collect to:
- Provide, maintain, and secure the service.
- Authenticate you and manage your account and workspace.
- Communicate with you about your account, updates, and support.
- Monitor performance, prevent abuse, and improve features.
- Comply with legal obligations.
7. Data retention
We retain personal information for as long as your account is active or as needed to provide the service. After account closure, we make data available for export for a limited period and then delete or anonymize it, except where we must retain it for legal, accounting, or security reasons.
8. Security
We use technical and organizational safeguards — including encryption in transit, access controls, and tenant isolation — to protect your information. No method of transmission or storage is completely secure, but we work to protect your data and to respond promptly to incidents.
9. Your rights
Depending on where you live, you may have rights to access, correct, delete, or export your personal information, and to object to or restrict certain processing. To exercise these rights, contact us at the address below; we may need to verify your identity.
If you are in the EEA/UK, our lawful bases include performing our contract with you, our legitimate interests in operating the service, and your consent where applicable. If you are in California, you have rights under the CCPA/CPRA, including the right not to be discriminated against for exercising them.
10. International transfers
We may process and store information in countries other than where you live. Where required, we use appropriate safeguards such as Standard Contractual Clauses for cross-border transfers.
11. Children's privacy
Rell is not directed to children under 16, and we do not knowingly collect their personal information. If you believe a child has provided us information, contact us and we will delete it.
12. Changes to this policy
We may update this Privacy Policy as the service evolves. If we make material changes, we will provide notice (for example, by email or in-product) before they take effect.
13. Contact
Questions or requests about your privacy? Email us at privacy@getrell.com.