Relyve Privacy Policy

Relyve is a trading name of Vyredo Ltd, a company registered in England and Wales under company number 16939602.

This Privacy Policy explains how Vyredo Ltd, trading as Relyve (“Relyve”, “we”, “us” or “our”), collects, uses, stores, shares and protects personal information when you use our website, platform, applications, hosted galleries and related services (together, the “Service”).

It applies to customers who create and use Relyve accounts, including creators, sole traders and businesses; people who access galleries created through Relyve; visitors to our website; and anyone who contacts or otherwise interacts with us.

For data protection purposes, the relevant legal entity is:

Vyredo Ltd trading as Relyve
Company No. 16939602
Registered in England and Wales

Registered Office
67 Ravencarr Road
Sheffield
England
S2 1SR

Privacy enquiries: hello@relyve.co

Where applicable, we process personal data in accordance with the UK General Data Protection Regulation (“UK GDPR”), the Data Protection Act 2018, the Privacy and Electronic Communications Regulations 2003 (“PECR”), the EU General Data Protection Regulation (“EU GDPR”) and applicable United States privacy laws.

This Privacy Policy should be read together with our Terms of Service and, where relevant, our Data Processing Addendum.

Relyve may act either as a controller or as a processor, depending on the personal data involved.

We generally act as the controller for information relating to Relyve accounts, authentication, subscriptions and transactions, customer support, communications, website and platform usage, analytics, security logs, marketing preferences, and the operation and improvement of the Service.

Customers may also upload photographs, videos and other material containing personal data about their own clients, subjects, guests or other individuals. In relation to that Customer Content, the Customer will generally act as the controller and Relyve will act as a processor on the Customer’s behalf.

We process Customer Content only as needed to provide the Service. This may include storing and processing files, transcoding video, displaying and delivering galleries, enabling downloads, maintaining and securing the Service, backing up systems where applicable, and troubleshooting technical issues.

Customers are responsible for ensuring that their collection, use, upload and disclosure of personal data through Relyve is lawful.

Where Relyve processes Customer Content containing personal data solely on behalf of a Customer, that processing is also governed by our Data Processing Addendum (“DPA”), which forms part of our agreement with that Customer.

The information we collect depends on how you use Relyve.

Account and authentication information

When you create or manage a Relyve account, we may collect your name, email address, business or trading name, account identifier, profile information, settings, preferences and any other information you choose to provide.

Customers may sign in using email and password, Google sign-in, or Apple sign-in where available. If you use a third-party authentication provider, we may receive information that you have authorised that provider to share with us, such as your name, email address and authentication identifier.

Payment and subscription information

Payments and subscriptions are processed through Stripe.

Stripe may process information including your name, payment method, card details, billing information, tax information and transaction details.

Relyve does not store your full payment card number on its own servers. We may receive limited information from Stripe that is necessary to administer your account, such as payment status, transaction identifiers, subscription status, plan information and billing or fraud-prevention information.

Customer Content

Customers may upload or create photographs, videos, files, filenames, metadata, gallery covers, text, logos, business information, colours, fonts, links, gallery settings, access settings and other materials through the Service. We refer to this collectively as “Customer Content”.

Customer Content may contain personal data relating to people other than the Customer.

It may also incidentally contain information that is considered sensitive or special-category personal data under applicable law. For example, photographs or videos may reveal information about a person’s racial or ethnic origin, religious or philosophical beliefs, health or other protected characteristics.

Relyve does not use Customer Content to infer, categorise or profile individuals based on sensitive or special-category characteristics.

Gallery Visitors

Gallery Visitors do not currently need to create a Relyve account.

Where a Customer has protected a gallery with a password, a Gallery Visitor may be required to enter that password before accessing the gallery.

Relyve does not currently require Gallery Visitors to provide a name or email address in order to view or download gallery content.

Communications

If you contact us, we may collect your name, email address, the contents of your message, support information, feedback and any files or screenshots you choose to send us.

Technical and usage information

When you use Relyve, we may automatically collect technical and usage information such as your IP address, browser and device information, operating system, language, approximate location derived from your IP address, referring URL, pages or galleries accessed, dates and times of access, session information, features used, interaction and download events, diagnostic information, security events and access logs.

Analytics and session replay

We use analytics services, including tools such as PostHog and Google Analytics, to understand how Relyve is used, identify problems and improve the Service.

Depending on applicable law and your consent choices, this information may include pages viewed, features used, navigation behaviour, interactions, session duration, device information, approximate location, account or session identifiers and technical events.

For authenticated Customers, some product analytics may be associated with an account or user identifier.

Where enabled and permitted by law, we may also use session replay technology for analytics, troubleshooting and product improvement.

Where consent is required by applicable law, analytics, session replay and other non-exempt storage or access technologies will not be activated until the required consent has been obtained.

We may obtain personal information directly from you, automatically when you use Relyve, from Customers who upload Customer Content, from Google or Apple when you use third-party authentication, from Stripe in connection with payments and subscriptions, and from our hosting, analytics, security and other service providers.

Some information is necessary for us to provide the Service. For example, an email address and authentication information are required to create and operate a Customer account, payment information is required for paid Services, and certain technical information is required to connect to and secure the Service.

If you do not provide information that is necessary for an account, authentication, payment or requested feature, we may be unable to provide that part of the Service.

Other information, such as optional profile or branding information, is generally voluntary unless we clearly state otherwise.

We use personal information where necessary to operate and provide Relyve, manage accounts, authenticate Customers, host and deliver galleries, process Customer Content, enable downloads, manage subscriptions and payments, provide support, respond to enquiries, send account and security communications, prevent fraud and abuse, protect our systems, diagnose technical problems, analyse Service performance and improve Relyve.

We may also use information to maintain records, enforce our Terms, establish or defend legal claims, comply with legal obligations, send marketing communications where permitted, and protect Relyve, our Customers, Gallery Visitors and others.

We do not use Customer Content for behavioural advertising, advertising profiling, AI model training, unrelated internal analytics or unrelated promotional purposes.

Our product analytics are intended to measure how people interact with the Relyve platform, not to analyse the people, objects or subject matter contained within Customer photographs or videos.

Where UK GDPR or EU GDPR applies, we rely on one or more lawful bases depending on the purpose of the processing.

We process personal data where necessary to perform our contract with you, including to create and manage your account, authenticate you, provide the Service, host and deliver galleries, manage subscriptions, administer payments and provide support.

We may also rely on our legitimate interests, where those interests are not overridden by your rights and freedoms. These interests include operating and improving Relyve, understanding how the Service is used, diagnosing technical issues, protecting our systems, preventing fraud and abuse, protecting our legal rights and, where permitted, communicating with existing Customers about relevant Relyve services.

We rely on consent where required, including for certain analytics technologies, session replay, cookies and similar technologies, and some marketing communications. You may withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing that took place before consent was withdrawn.

We may also process personal data where necessary to comply with legal obligations, including tax, accounting, regulatory and data-protection requirements.

Customers retain their rights in Customer Content, subject to the limited rights Relyve needs in order to process that content and provide the Service.

Uploading content to Relyve does not give us permission to use it in Relyve advertising, social media, case studies, portfolio examples or other promotional material.

If we would like to feature Customer Content publicly, we will ask the relevant Customer for separate permission.

Relyve does not currently use customer-uploaded photographs or videos to train generative AI or machine-learning models.

We do not currently send Customer photographs or videos to external generative AI providers such as OpenAI, Anthropic or Google for generative AI analysis or model training, and we do not sell Customer Content to AI providers for model training.

Relyve may provide design-assistance features that use information and design values already available within the Service to create or vary presentation options.

If we materially change how Customer Content is processed in the future, including by introducing external AI processing, we will update our privacy information and provide any notice, consent or choice required by law before that processing begins.

Customers are responsible for ensuring they are entitled to upload personal data relating to other people. This may include providing appropriate privacy information, identifying an appropriate lawful basis, meeting any requirements relating to special-category data, obtaining any necessary permissions or consent, responding to privacy rights and managing gallery access appropriately.

Customers must not use Relyve to process personal data unlawfully.

Customers decide how their galleries are shared.

A gallery that is not password protected may be accessed by anyone who obtains the gallery URL.

Customers may choose to add password protection. In that case, Gallery Visitors must enter the correct password before accessing the gallery.

Password protection is an access-control feature and does not guarantee that gallery content will remain confidential. Customers are responsible for choosing suitable access settings, protecting passwords and deciding who receives gallery links and passwords.

Customers may also choose whether Gallery Visitors are allowed to download content. Where downloads are enabled, anyone who can access the gallery may be able to download the permitted files.

Even where a Gallery Visitor does not create an account, we may process limited technical and usage information, including IP address, browser and device information, timestamps, gallery access events, download events and security information. Analytics information may also be processed where permitted.

Where a privacy request relates primarily to Customer Content, the Customer who created or shared the gallery will generally be responsible for that content as controller. We may refer the requester to that Customer and assist the Customer where required.

Relyve uses cookies and similar technologies to operate, secure and improve the Service. These may include cookies, scripts, tags, pixels, local storage and other technologies that store or access information on a browser or device.

Some technologies may be used without consent where they are necessary for the Service or otherwise exempt from consent requirements under applicable law. These may support authentication, sessions, security, fraud prevention and requested functionality.

We may also use analytics technologies, including Google Analytics and PostHog, to understand how Relyve is used and improve the Service.

Where consent is required by applicable law, analytics, session replay and other non-exempt storage or access technologies will not be activated until consent has been obtained.

Relyve does not currently use advertising pixels such as Meta Pixel or TikTok Pixel. If we introduce advertising, retargeting or similar technologies in the future, we will update our disclosures and implement any consent or opt-out controls required by law.

You can manage non-essential technologies through the Cookie Settings option available on our website. You may also be able to control certain technologies through your browser settings.

Further information about the cookies and similar technologies used by Relyve is available in our Cookie Policy.

We may send Customers product updates, feature announcements, educational information, offers, promotions and other Relyve marketing communications.

Where consent is required, we will request it before sending marketing communications. Where permitted by law, we may also contact existing Customers about our own similar products and services.

Marketing communications may be sent using providers such as Brevo.

Where enabled, our communications provider may collect information about engagement with emails, such as whether an email was opened or a link was clicked. We may use this information to understand the effectiveness of our communications and improve them, subject to applicable privacy and electronic-communications requirements.

You can unsubscribe at any time by using the unsubscribe link in an email or by contacting hello@relyve.co.

Unsubscribing from marketing does not prevent us from sending necessary communications about your account, subscription, billing, security or use of the Service.

We may retain limited suppression information so that we can continue to respect an unsubscribe or objection request.

We use third-party providers to help us operate Relyve. These providers may support hosting and cloud infrastructure, databases and storage, authentication, content delivery, payment processing, analytics, security, error monitoring, business email, marketing communications and customer support.

Where required, we enter into appropriate data-protection agreements with providers that process personal data on our behalf.

Where a provider processes Customer Personal Data as a subprocessor, that relationship is governed by our DPA and applicable subprocessor arrangements.

We may also disclose information where reasonably necessary to comply with law, a court order or legally valid request; cooperate with regulators or law enforcement; investigate fraud or security incidents; enforce our agreements; protect our rights or property; or protect the safety of Relyve, our Customers or others.

Personal information may also be disclosed as part of a merger, acquisition, restructuring, financing, sale of assets, insolvency or similar business transaction, subject to applicable law.

Relyve does not sell personal information for money.

Relyve is operated from the United Kingdom, but some of our service providers may process personal data in other countries.

Personal data may therefore be processed in the United Kingdom, the European Economic Area, the United States and other countries where our service providers operate.

Where applicable law requires safeguards for international transfers, we use an appropriate recognised transfer mechanism. Depending on the circumstances, these may include UK adequacy regulations, European Commission adequacy decisions, European Commission Standard Contractual Clauses, the UK International Data Transfer Agreement, the UK International Data Transfer Addendum to the EU Standard Contractual Clauses, or another legally permitted transfer mechanism.

Where required, relevant transfer assessments are also carried out.

You can contact hello@relyve.co for further information about safeguards used for international transfers.

We retain personal data only for as long as reasonably necessary for the purposes for which it is processed.

Account information is generally retained while your account remains active. When you confirm account deletion, we delete or disable the active account promptly. Some information may remain temporarily in backups, logs or systems where immediate deletion is not technically possible.

We may also retain information where necessary or permitted for accounting, tax, fraud prevention, security, legal obligations, disputes or legal claims.

Files deleted from a gallery may first be moved to a Trash area. Depending on the Customer’s selected settings, files in Trash may be scheduled for permanent deletion after 15 or 30 days.

Where a subscription or storage period expires, Customer Content may be retained for up to 30 days to allow recovery, download or renewal. After that period, the relevant content may be permanently deleted.

As a general guide:

Marketing consent and suppression records may be retained for as long as reasonably necessary to demonstrate compliance and respect unsubscribe requests.

Relevant information may be retained for longer where necessary for an active legal claim, security investigation or legal obligation.

Aggregated or irreversibly anonymised information may be retained for longer because it no longer identifies an individual.

We use technical and organisational measures designed to protect personal data against unauthorised access, unlawful processing, accidental loss, alteration, destruction and unauthorised disclosure.

These measures may include encryption in transit, authentication controls, access restrictions, infrastructure security, monitoring and logging, network protections and incident-response procedures.

No internet-based service or storage system can be guaranteed to be completely secure.

Customers are responsible for protecting their account credentials, using appropriate passwords, protecting gallery passwords, controlling who receives gallery links and taking reasonable steps to secure access to their Relyve account.

If you believe your account or gallery has been accessed without authorisation, contact hello@relyve.co.

Relyve Customer accounts are intended only for people aged 18 or over.

People under 18 are not permitted to create Customer accounts.

Customer Content may, however, contain photographs, videos or other personal data relating to children. Where this occurs, Relyve generally processes that content on behalf of the Customer.

The Customer is responsible for ensuring that its collection, upload, disclosure and use of that information is lawful and that any required permission, consent or other legal basis has been obtained.

UK and EEA

If UK GDPR or EU GDPR applies, you may have rights to access your personal data, correct inaccurate information, request deletion in certain circumstances, restrict processing, receive certain data in a portable format, object to certain processing, object to direct marketing and withdraw consent.

Relyve does not currently use solely automated decision-making to make decisions about Customers that produce legal or similarly significant effects.

To exercise an applicable privacy right, contact hello@relyve.co. We may ask for information reasonably necessary to verify your identity.

If you are in the United Kingdom, you may also complain to the Information Commissioner’s Office (“ICO”).

If EU GDPR applies to you, you may also have the right to complain to the relevant data-protection supervisory authority.

United States

Residents of some U.S. states may have additional rights where the relevant state privacy law applies to Relyve.

Depending on the applicable law, these may include rights to access, correct or delete personal information; obtain a portable copy of certain information; opt out of certain sales, targeted advertising or profiling; and appeal certain decisions relating to privacy requests.

Relyve does not currently sell personal information for money or use Customer Content for cross-context behavioural advertising.

Some analytics or technical providers may receive limited device, usage or technical information as described in this Privacy Policy.

Where applicable law requires us to recognise a legally valid universal opt-out preference signal, we will process that signal as required.

California and Do Not Track

Some browsers offer a traditional “Do Not Track” setting.

Relyve does not currently respond to traditional Do Not Track browser signals because there is no universal technical standard governing how those signals should be interpreted.

Third-party analytics or technical providers may collect information through Relyve where their technologies are enabled, as described in this Privacy Policy and our cookie controls.

Customers can review or change certain account information through their Relyve account or contact us at hello@relyve.co.

Customers may include links within Relyve galleries to third-party websites or services.

Once you leave Relyve and access an independent third-party service, that third party’s privacy practices apply.

Relyve is not responsible for the privacy practices of independent third parties.

We may update this Privacy Policy from time to time to reflect changes to Relyve, new features, changes to our service providers, changes to how we process personal information, legal or regulatory developments, or improvements to our privacy practices.

The “Last updated” date at the top of this Privacy Policy shows when it was most recently revised.

Where a change is material, we will provide additional notice where required. This may include email, an in-product notification, a notice on our website or another appropriate method.

Where applicable law requires consent before we begin a materially different use of personal information, we will obtain that consent.

For questions about this Privacy Policy, privacy concerns or requests to exercise your rights, contact:

Vyredo Ltd trading as Relyve
Company No. 16939602
Registered in England and Wales

Registered Office
67 Ravencarr Road
Sheffield
England
S2 1SR

Email: hello@relyve.co

We may ask you for information reasonably necessary to verify your identity and locate the relevant information before completing a privacy request.

We will handle privacy requests in accordance with applicable law.