Privacy Policy

Last updated October 5, 2026

The short version: Relay reads the maintenance mailbox your company connects so it can sort requests and help your team respond. We use that information only to run Relay for your company. We don't sell it, we don't use it for advertising, and photos and attachments stay in your own Microsoft 365 mailbox.

1. Who we are

Relay is a maintenance-request service for property management companies, operated by The Boricua Group LLC (“Relay,” “we,” “us”). This policy explains what information Relay handles and how.

2. Whose information this covers

• Customers and their team members: the property management companies that subscribe to Relay and the people they invite.
• Residents and vendors: people who email a customer's connected maintenance mailbox, or who receive emails a customer sends through Relay.

For residents' and vendors' information, our customer (the property management company) decides how it's used, and Relay processes it on the customer's behalf. If you're a resident or vendor with a question about your information, please contact the property management company first; we'll help them respond.

3. What we collect

Account information

• Name, work email, role, and the Microsoft account identifiers used to sign in. We never see or store your Microsoft password.

Mailbox and request information

• Emails that arrive in the maintenance mailboxes a customer connects: sender name and email address, subject, message text, and the date received.
• Attachment details (file name, type, and size). The files themselves stay in the customer's Microsoft 365 mailbox; Relay fetches a photo from Microsoft only when an authorized team member opens it, or attaches it to a job email the customer sends.
• Relay's decisions about each request (for example urgency, trade, and suggested next step), reviews and corrections made by the customer's team, replies and job emails sent, and a record of who did what and when.

Information customers add

• Properties, vendors (names, emails, phone numbers), team members, regions, and alert and summary settings.

Billing information

• Payments are processed by Stripe. We don't receive or store card or bank account numbers. We store the Stripe customer and subscription identifiers, plan, trial and renewal dates, and payment status.

Technical information

• Sign-in times, session information, and basic request logs used to keep the service secure and working.

4. How we use information

• To run Relay for the customer: read and sort incoming requests, draft replies and job emails, send the messages the customer's team approves, and send the alerts and summaries the customer sets up.
• To measure and improve how accurate Relay's decisions are, using the reviews and corrections each customer's team makes.
• To provide support, keep accounts secure, prevent abuse, and handle billing.
• To communicate with customers about their account and the service.

We do not sell personal information, share it for advertising, or use one customer's information to serve another customer.

5. Automated decisions

Relay uses automated systems, including an AI decision engine, to suggest how urgent a request is, which trade it needs, and what to do next. These are suggestions: a person on the customer's team reviews and approves what is sent. To make these suggestions, Relay sends the text of an incoming request to its decision engine provider.

6. Who we share information with

We share information only with service providers that help us run Relay, only as needed for that purpose:

• Cloudflare: hosting and network delivery.
• Supabase: database hosting (United States).
• Microsoft: reading and sending email through the customer's own Microsoft 365 mailbox, and sign-in.
• TypeSafe: the AI decision engine that classifies incoming requests.
• Stripe: subscriptions and payments.

We may also disclose information if required by law, to protect the rights and safety of our users or the public, or as part of a merger or sale of the business (in which case this policy would continue to apply).

7. Security

• All traffic to Relay is encrypted (HTTPS).
• Microsoft access tokens are encrypted before they're stored.
• Workspaces are invitation-only, each person sees only what their role and regions allow, and actions are recorded in an audit log.

No system is perfectly secure, but we work to protect information and will notify affected customers of a security incident as required by law.

8. How long we keep information

We keep a customer's information while their account is active. A customer can ask us to delete their workspace data at any time by emailing gilbert@theboricuagroup.com, and we'll do so within 30 days, except for records we must keep for legal, tax, or billing reasons.

9. Your choices and rights

Depending on where you live, you may have the right to access, correct, or delete your personal information. Team members can update their information through their company's workspace administrator. For anything else, email us and we'll respond within 30 days. Residents and vendors should start with the property management company, as explained in section 2.

10. Children

Relay is a business tool and isn't directed to children under 16.

11. Where information is stored

Relay is operated from the United States, and information is stored and processed in the United States.

12. Changes to this policy

If we make material changes, we'll update the date above and let customers know by email or in Relay before the changes take effect.

Questions? Email gilbert@theboricuagroup.com. Relay is operated by The Boricua Group LLC.