Privacy Policy

LazyRelay ("we," "us," or "our") provides a scheduling and publishing tool that connects to your social media accounts so you can queue up posts and have them published automatically. This policy explains what information we collect, how we use it, and the choices you have.

LazyRelay is operated by IPE Projects (Pty) Ltd, a company registered in South Africa (registration number 2021/003176/07).

Information we collect

Account information. When you sign up, we collect your email address and a password (stored securely by our authentication provider, never in plain text).

Connected account information. When you connect a social media account (any platform you connect to LazyRelay), we receive an access token and basic profile information (account name, platform, account ID) from that platform via its official OAuth process. We use this token only to publish the posts you schedule and to verify they went live. We never read your private messages, contacts, or unrelated account activity.

Content you submit. The post text, images, and scheduling details you enter into LazyRelay are stored so we can publish them at the time you choose.

Usage data. If you accept analytics cookies in the cookie banner, we use PostHog to understand how the product is used and to debug issues — this includes product usage events, error reports, and session replay (a recording of your on-screen activity, not audio or video of you). Every page and input on the dashboard is masked in these recordings by default, and anything showing a real secret (an API key, a webhook secret, MFA recovery codes) is always masked regardless of that setting. If you decline analytics cookies, none of this is collected.

Advertising. We do not currently run any advertising campaigns, so no advertising cookies are actually in use today. The cookie banner still offers a separate "Targeted Advertising" preference, covering the consent signal that would apply the moment any future ad campaign goes live — so your choice is already respected in advance rather than something we'd need to ask again later.

How we use your information

• To publish your scheduled posts to the accounts you've connected.
• To verify that a published post is actually live on the platform.
• To operate, maintain, and troubleshoot the service.
• To respond to support requests you send us.

We do not sell your data, and we do not share it with third parties except:

• The social media platforms you've explicitly connected, solely to publish your content.
• Service providers that host our infrastructure (e.g. our database and hosting providers), bound to keep your data confidential.
• PostHog, our product analytics provider, if you've accepted analytics cookies — see above.
• When required by law.

AI features and Google user data

LazyRelay's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

LazyRelay uses Anthropic's Claude API for two optional features: generating post captions on request, and classifying incoming social media comments and DMs. Separately, LazyRelay offers an MCP (Model Context Protocol) server that lets you connect a third-party AI assistant of your own choosing (for example Claude or ChatGPT) to manage your own scheduled posts through our API — any request through that connection is initiated by your own AI client, under your own authorization, not by LazyRelay.

If you connect Google Calendar or Google Sheets, we do not use raw or derived data obtained through those Google APIs to train, retrain, or improve any AI or machine learning model, foundational or otherwise. That data is used exclusively to provide the calendar-sync and spreadsheet-sync functionality you've authorized, and is never transferred to Anthropic, to any AI assistant you connect via our MCP server, or to any other third party for model-training purposes.

Data retention

We keep your account and connected-account data for as long as your account is active. If you disconnect a social account or delete your LazyRelay account, we remove the associated access tokens and stored content within a reasonable time.

Abandoned accounts. If you sign up but never connect a social account or schedule a post, we'll delete the account after 6 months of inactivity, with two email warnings first (14 days and 3 days before deletion) — logging in and connecting a platform or scheduling a post at any point cancels the deletion. This never applies to a paid subscription, regardless of activity.

Your choices

• You can disconnect any connected social account at any time from your dashboard.
• You can request deletion of your account and associated data by contacting us.
• You can request a copy of the data we hold about you by contacting us.

Security

We use industry-standard practices (encrypted connections, secure token storage) to protect your information. No method of transmission or storage is 100% secure, but we work to protect your data to the best of our ability.

Children's privacy

LazyRelay is not directed at children under 16, and we do not knowingly collect data from them.

Changes to this policy

If we make material changes to this policy, we'll update the "Last updated" date above and, where appropriate, notify you directly.

Contact us

Questions about this policy or your data? Email us at [email protected].