Privacy Policy

Last updated October 27, 2026

Relay makes point-of-sale software for restaurants, based in Albuquerque, New Mexico. This policy explains what information Relay handles on this website and when restaurant owners, managers and staff use Relay, and what we do with it. Questions: hello@relay-pos.com.

This website

• relay-pos.com has no advertising, analytics or tracking cookies, and no session recording.
• The sign-in page remembers the restaurant address you typed in your own browser so you don't have to type it again. It is not sent to us.
• Our hosting provider, Cloudflare, briefly processes your IP address and browser details to deliver the site and block abuse.
• If you email us, we use your message only to reply to you.

Signing in to a restaurant's back office

Owners and managers sign in on their restaurant's own Relay address (for example, yourrestaurant.relay-pos.com) with one of these methods:

• Sign in with Google. We ask Google only for the openid and email scopes. Relay receives only your email address and Google's confirmation that it is verified. We do not receive your Google password, contacts, files, calendar or any other Google account data. We use the email only to check that you are on that restaurant's list of owners and managers and to sign you in.
• Email code. We email a one-time 6-digit code to the address on the restaurant's list. Emails are sent through our email provider, Resend.
• Face ID or Touch ID (passkey). Your fingerprint or face never leaves your device. Relay stores only a public key.
• Password (optional). Stored only as a secure one-way hash, never as the password itself.

When someone signs in or a new device is approved, Relay may email the restaurant's owners so they can spot sign-ins they don't recognize. Relay also keeps an activity log for each restaurant (who signed in, voided or changed something, and when) so owners can see what happened in their restaurant.

Google user data

Relay's use of information received from Google APIs follows the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

• We use your Google email address only to sign you in to your restaurant's back office.
• We do not sell it, use it for advertising, or share it with anyone except as needed to run the service (our hosting provider) or when required by law.
• We do not use it to train AI or machine-learning models.
• No person at Relay reads it except to provide support you ask for, for security, or when required by law.

Restaurant and staff information

• Each restaurant's data (menu, orders, checks, sales, staff names, and owner and manager email addresses) is stored on Cloudflare in a database for that restaurant.
• Staff PINs are stored only as one-way hashes.
• Closed checks and sales records are kept because restaurants must keep them for taxes. The restaurant can export them at any time.
• Relay does not sell restaurant, staff or customer information, and does not use it for advertising.

Diners who order online

When you order from a restaurant's online ordering page, that restaurant's own privacy and order policy applies. It is linked from the ordering page. Card payments are handled by Stripe; Relay never sees your full card number.

Who helps us run Relay

• Cloudflare: hosting and data storage.
• Google: Sign in with Google, if you choose it.
• Resend: sign-in code and alert emails.
• Stripe: online order payments, for restaurants that use online ordering.

Keeping and deleting your information

An owner can remove a manager's sign-in at any time, which removes their email address from that restaurant's sign-in list and signs them out everywhere. To ask what we hold about you, or to have it corrected or deleted, email hello@relay-pos.com. We will remove what we can, except records a restaurant must keep for tax or legal reasons.

Children

Relay is a business tool and is not meant for children under 13.

Changes

If we change this policy, we will update the date at the top of this page.