Privacy policy

What Reline collects, why we collect it, and how to remove it.

Effective

A short, plain-English description of how data flows through Reline. We've kept the legalese to a minimum — if something is unclear, the email at the bottom of this page works.

Section 01

Overview

Reline is an AI note-taking product. We record audio, transcribe it, generate summaries with large language models, and store the result so you can search, share, and collaborate on it.

This policy describes what we collect, why we collect it, who has access, and how to remove it. We've kept it short on purpose. If something is unclear, email privacy@reline.so.

Section 02

What we collect

Account data. Name, email, profile image, and SSO provider identifiers (Google or Microsoft Entra ID).

Workspace content. Notes, transcripts, recordings, summaries, Lenses, and chat threads you create or that are shared with you.

Calendar metadata. If you connect Google or Microsoft, we receive event titles, descriptions, time ranges, attendees, and conference links — used to attach notes to meetings.

Operational telemetry. Crash reports and usage metrics collected at the workspace level for capacity planning and bug-fixing. No transcript content is sent to third-party analytics.

Section 03

How we use it

  • To provide the product (record, transcribe, summarize, sync).
  • To enforce per-plan quotas (free plan: 1 hour per note, 10 hours per user per month).
  • To investigate bugs, abuse, and security incidents.

What we never do. We do not sell your data. We do not use your audio or transcripts to train third-party AI models. We do not share workspace content with anyone outside your workspace, except under explicit instruction or legally required disclosure.

Section 04

Sub-processors

We use a small set of vetted vendors to operate Reline:

  • Convex — primary database, file storage, authentication, and realtime sync.
  • Soniox — real-time speech-to-text. Audio chunks are streamed to Soniox during a recording session.
  • OpenAI — large language model for summaries and chat answers, accessed via the AI SDK gateway.
  • Vercel — hosting for the web application.
  • Anthropic / DeepSeek — additional model providers used for specific features.

Each sub-processor receives only the minimum data required for their function. Audio and transcript content is not retained beyond what their own policies specify.

Section 05

Retention & deletion

Workspace content (notes, transcripts, recordings) is retained for as long as the workspace exists.

When a note is deleted, it goes to trash and is permanently removed after 30 days. Deleting a workspace removes all its content.

You can request a full export or deletion of your account by emailing privacy@reline.so. We respond within 30 days.

Section 06

Security

Encryption in transit (TLS 1.2+) and at rest (Convex). SSO via Google or Microsoft Entra ID (Okta and generic SAML are on the enterprise roadmap). Granular per-note permissions and an append-only audit log. See our security page for the full posture matrix.

Section 07

Your rights

If you're in the EEA, UK, or California, you have the right to:

  • Access the data we hold about you.
  • Correct inaccurate data.
  • Delete your account and content.
  • Export your content in a machine-readable format.
  • Object to processing for legitimate-interest purposes.

Email privacy@reline.so to exercise any of these.

Section 08

Children

Reline is not directed to children under 16. We do not knowingly collect data from children under 16.

Section 09

Changes to this policy

We update this page when our practices change. Material changes will be communicated by email and announced in the changelog. The effective date at the top of this page always reflects the current version.


Questions? Email legal@reline.so.