XATHERYN RELAY

Privacy Policy

Last updated: September 23, 2026

Xatheryn Relay (“Relay”), our short-form video publishing service (the “Service”), is operated by Xatheryn LLC, a North Carolina limited liability company (“Xatheryn,” “we,” “us,” or “our”). This Privacy Policy explains how Xatheryn LLC collects, uses, shares, and protects information when you use the Service. Xatheryn LLC is responsible for the personal information described in this Policy and, where the law uses the term, is its controller. By using the Service, you acknowledge that you have read and understood this Policy.

1. Your Account Comes From Xatheryn Connect

Relay does not have its own sign-up form, passwords, or passkeys. You sign in to Relay with your Xatheryn Connect account. When you do, Connect confirms who you are and passes Relay two things: your Connect username and your Connect user ID (an internal identifier that stays the same even if you change your username). Relay uses those to create and recognize your Relay account.

Your passkey, your date of birth, and the rest of your Connect profile stay with Connect and are covered by the Xatheryn Connect Privacy Policy. Relay never receives your passkey or any other sign-in credential.

2. Information We Collect

Account information. Your Connect username and Connect user ID, as described in Section 1, plus an account number we assign so support can find your account. Your username on Relay is refreshed from Connect each time you sign in, so changing it on Connect changes it here.

Accounts created before September 16, 2026. Before Relay moved to Connect sign-in, it asked for an email address at signup. If your account is from that period, that address may still be on file. We no longer use it to identify you, sign you in, or contact you. You can ask us to delete it using the contact details in Section 14.

Content you upload. Video files, captions, and any other content you submit for publishing. We process this content only to check it, store it temporarily, and send it to the platforms you choose.

Connected platform information. If you connect an account on a third-party platform (such as Instagram, Facebook, TikTok, YouTube, X, or Threads), that platform gives us an authorization token, which we store encrypted. We use it only to publish to that account when you tell us to. We never receive or store your password for any connected platform.

Technical and usage information. IP addresses and records of account activity (such as sign-ins, publishing attempts, and subscription changes), used to secure accounts, prevent abuse (for example, one person creating many accounts to get around free-tier limits), and help with support.

Support messages. If you contact support through the Service, we keep your message, your account number, your username, and any error code you include.

Payment information. Paid subscriptions are processed by Square, Inc. We never see or store your card details. Square handles them under its own privacy policy and payment card industry standards.

3. How We Use Information

We use this information to: (a) provide and run the Service; (b) recognize you when you sign in through Connect and keep your account secure; (c) publish your content to the platforms you choose, using the authorizations you give; (d) process subscription payments; (e) detect and prevent fraud, abuse, and security problems; (f) respond to support requests; and (g) meet legal obligations.

4. Legal Bases for Processing

Where the law requires a legal basis for processing, we rely on: performance of a contract (providing the Service you signed up for), legitimate interests (security, fraud prevention, and improving the Service), consent (where you have given it, such as for advertising cookies), and compliance with legal obligations.

5. How We Share Information

We do not sell your personal information. We share it only in these cases:

• Platforms you connect. When you publish, we send your content to the platforms you selected and act on your behalf using the authorization you gave. Each platform’s own terms and privacy policy then apply. If you publish to YouTube, you are also bound by the YouTube Terms of Service, and Google handles your information under the Google Privacy Policy.
• Other Xatheryn products. Relay and Connect share sign-in, so they know you are the same person. When you sign out of either, you are signed out of both. Relay does not send your uploads, connected accounts, or usage to Connect.
• Service providers. Square for payments, an email provider that delivers support requests to our team, and, for free-tier accounts only, Google AdSense for advertising (see Section 6). Each follows its own privacy practices.
• Legal requirements. If required by law, subpoena, or other legal process, or if we believe in good faith that disclosure is needed to protect our rights, our property, your safety, or the safety of others.
• Business transfers. If Xatheryn LLC or Relay is part of a merger, acquisition, or sale of assets, your information may be transferred, subject to this Policy or a successor policy we will tell you about.

6. Advertising

Free-tier accounts are supported in part by advertising served through Google AdSense. Google and other third-party vendors use cookies to serve ads based on your prior visits to this and other websites. You can opt out of personalized advertising in Google’s Ads Settings, or opt out of some third-party vendors’ use of cookies for personalized advertising at www.aboutads.info.

Ad-free access is per product. Each Xatheryn product has its own subscription. A paid Relay subscription that includes ad-free access removes ads in Relay only. It has no effect in Xatheryn Connect, and a Connect subscription has no effect in Relay.

If we cannot confirm your subscription status, we do not show ads.

7. Cookies

We use a strictly necessary session cookie (HttpOnly, and Secure over HTTPS) to keep you signed in, and a separate cookie that protects against cross-site request forgery. They are required for the Service to work and are not used for tracking or advertising. See Section 6 for advertising cookies on free-tier accounts.

8. Data Retention

Uploaded videos are stored only temporarily. They are deleted automatically once every platform you chose has reached a final status (published, failed, or cancelled), or after a limited retention period, whichever comes first. Account information is kept while your account is active. You can ask us to delete your account and its data at any time using the contact details in Section 14.

9. Data Security

Our safeguards include: sign-in handled by Xatheryn Connect with passkeys, so Relay holds no passwords or passkeys that could leak; hashed session tokens that expire after 24 hours without activity; encryption at rest (AES-256-GCM) for connected-platform authorization tokens; and rate limiting. No system is completely secure, and we cannot guarantee absolute security.

10. Your Rights and Choices

Depending on where you live, you may have the right to access, correct, delete, or export your personal information, and to object to or restrict certain processing. To use these rights, contact us using the details in Section 14. We will respond within a reasonable time and as the law requires. To change your username, change it on Xatheryn Connect.

11. Children’s Privacy

The Service is not directed to children under 13 (or the minimum age where you live), and we do not knowingly collect personal information from children under that age. Because Relay accounts come from Xatheryn Connect, Connect’s age rules also apply. If you believe a child has given us personal information, contact us and we will delete it.

12. International Data Transfers and Changes

The Service is operated from the United States by Xatheryn LLC. If you use it from elsewhere, your information will be transferred to and processed in the United States, where data protection laws may differ from yours.

We may update this Policy. Material changes will show a new “Last updated” date, and where required, we will ask you to accept the updated Policy before you continue using the Service.

13. YouTube API Services and Google User Data

Relay uses YouTube API Services. If you connect YouTube, you are bound by the YouTube Terms of Service, and Google handles your information under the Google Privacy Policy. Relay’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

What we ask Google for. Two permissions. “Manage your YouTube videos” (youtube.upload) lets Relay upload the videos you choose to your channel. “View your YouTube account” (youtube.readonly) lets Relay read your channel’s ID and name so it can show which channel is connected.

What we store. Your channel ID and channel name, and the authorization tokens Google gives us, which we store encrypted. We do not read or store your videos, playlists, subscriptions, comments, watch history, or analytics.

How we use and share it. Only to show which channel is connected and to upload the videos you tell us to publish to it. We do not use it for advertising, do not sell it, do not share it with anyone else, and do not use it to develop, improve, or train machine learning or AI models. Our staff do not read it except where needed for security, to follow the law, or with your permission.

Revoking access and deleting data. You can disconnect YouTube at any time under Account in Relay. When you do, Relay tells Google to revoke its access and deletes the stored tokens, channel ID, and channel name. You can also remove Relay’s access in your Google security settings. When Google tells us that access is gone, we delete the stored tokens at once and the channel ID and name within seven days. To ask us to delete anything else, contact us using the details in Section 14.

14. Contact Us

For questions about this Policy or to use your rights, contact Xatheryn LLC, a North Carolina limited liability company, at [email protected]. Please include your Relay account number or username so we can find your account.