Privacy Policy

This policy covers Reliafy Cloud. If you self-host the open-source version, your data lives on your own infrastructure and none of it reaches us.

What we collect

• Account details: your email address and display name, via sign-in with email/password or Google.
• Your content: the datasets (CSV files), fitted models, and reliability block diagrams you save.
• Files you upload to import: used only to import them. A file imported in the app is read during the import and not stored; only what you save from it is kept. A file sent through an assistant's upload link (which works for 15 minutes) is deleted as soon as it's imported, or automatically an hour after it arrived if it isn't.
• Billing records: your plan, AI credit balance, and a ledger of credit grants and usage. Card details go directly to Stripe — we never see or store them.
• AI conversations: when you use the assistant, your messages — and the data the assistant reads in order to act for you — are sent to our AI provider to generate a response. Those conversations are retained by the provider, and we can read them back to check the assistant is answering correctly and to fix problems. We don't keep transcripts in our own database, and we don't use them to train models — and our AI providers' terms commit them to the same. Treat it like any hosted tool: don't paste anything you wouldn't want retained.
• Connected apps: if you connect an AI assistant such as Claude to your account, you approve it on a Reliafy sign-in screen (OAuth), and it can then read your datasets, models and diagrams and create new ones on your behalf. We keep a record of which app you connected, when, and when it last used that access. What the assistant does with the data it reads is governed by its provider's terms, not ours. You can disconnect it at any time in Settings → Connected apps.
• Operational logs: standard request logs (timestamps, endpoints, status codes) for reliability and debugging.
• Usage analytics: records of the pages you visit, the site that referred you, and actions you take within the Service (such as creating an account or fitting a model). We collect these in our own systems solely to understand how the Service is used and to improve it, and retain them for no longer than 90 days.

We don't use advertising or third-party analytics trackers, and usage analytics are never shared with or sold to third parties.

How we use it

Only to operate and improve the Service: authenticating you, storing your work, processing payments, metering AI usage, checking the assistant is working properly, fixing problems, and understanding how the Service is used so we can improve it. We never sell your data, and we don't use your datasets or AI conversations to train machine-learning models.

Emails we send

We may send account holders a few short emails: a welcome when you sign up, a getting-started tip a few days later, and occasional product updates about changes to the Service. Links in them are tagged with the email they came from, so we can count what each email brings in through the first-party analytics described above. Every one has an unsubscribe link, and you can also turn them off in Settings. Emails you trigger yourself, like team invites and shares, are separate and aren't affected.

Who processes it (subprocessors)

• Google Cloud / Firebase — hosting (Cloud Run) and authentication.
• MongoDB Atlas — the database holding your account and content.
• Stripe — payment processing and subscription management.
• OpenAI — processes assistant conversations to generate responses, and retains them so we can review how the assistant is performing. Its API terms commit that this data is not used to train models.
• Anthropic — runs the Reliability Agent (a Pro feature) and stores those agent sessions so you can revisit them. Its commercial terms likewise commit that this data is not used to train models.

Where it lives and how long

Application data is stored in MongoDB Atlas and Google Cloud (our primary region is Australia). We keep your content for as long as your account exists. Deleting an item in the app removes it from the live database; deleting your account removes your content and profile.

Assistant conversations are the exception: they sit with our AI provider under their API retention terms rather than in our database, so deleting your account removes your content and profile from our systems but does not erase the provider's copy of earlier conversations. Email us if you need those dealt with and we'll do what the provider allows.

Your rights

You can access and delete your content in the app at any time. To export everything, delete your account entirely, or ask what we hold about you, email hello@reliafy.com and we'll action it promptly. If you're in a jurisdiction with specific data rights (GDPR, Australian Privacy Principles), we'll honour them.

Cookies and local storage

We use browser storage only for sign-in session tokens (Firebase Authentication) and small UI preferences (like whether the assistant panel is open). No advertising or cross-site tracking cookies.

Changes

If this policy changes materially we'll update this page and note the new effective date; for significant changes we'll email account holders.

Contact

Privacy questions or requests: hello@reliafy.com.