Privacy Policy — Agentic Relay

The short version

You need an account to use the app. A guest account lets you try it without giving an email address.
What you type into an agent — learning goals, tasks, notes, resumes, uploaded documents, questions — is stored on our server so the agent can work across sessions and devices.
To answer you, that content is sent to AI model providers (OpenAI, and others listed below). It is not sold, and it is not used to train anyone's models by us.
Your uploaded documents are scoped to your account. One user's questions never search another user's files.
You can delete your account and everything in it from inside the app, at any time, without asking us.

1. Who we are

Agentic Relay ("the app", "we", "us") is operated by solidauto, noida / india. We are the data controller for the information described here. For anything in this policy, write to solidauto202@gmail.com.

The app is a collection of AI agents in one place: a Learning Assistant (roadmaps and daily digests), a Personal Assistant (tasks, notes and reminders), a Job Helper (resumes, job search and applications), and Ask your documents (questions answered from files you upload). Each one is described below in terms of what it stores.

2. What we collect

2.1 Account information

Registered accounts: your email address, your name, and a password. The password is stored only as a salted hash — we never hold the password itself.
Guest accounts: created on request with no email and no password, so you can try the app anonymously. A guest account expires, and its data goes with it. Converting a guest account to a full one attaches your email to the data already in it.
Verification and reset codes sent to your email address, and the fact that an address has been verified.
Session tokens issued at sign-in, so you stay signed in between launches.

2.2 What you put into the agents

This is the bulk of what we hold, and all of it is content you chose to enter:

Learning Assistant — what you want to learn, your stated level and preferred explanation style, the roadmaps and topics generated for you, the daily digests, your answers to the read-checks and quizzes (including free-text answers), the misconceptions those answers reveal, your notes, your progress and streaks, and the hour and timezone you chose for delivery.
Personal Assistant — tasks, details, due dates and recurrence, notes, and the profile it learns from your messages (your working hours, timezone, standing priorities, preferred communication style, recurring commitments) along with a history of completed tasks and research turns.
Job Helper — resume files you upload and the structured version parsed out of them (which typically contains your name, contact details, work history, education and skills), job descriptions and links you save, your applications and their status, your search terms and locations, and the chat turns you have with the agent.
Ask your documents — the PDFs, text files and web links you upload, the text extracted from them, the numeric embeddings computed from that text, your questions, and the answers with their citations. Your conversations are saved so you can return to them.

2.3 Technical information

Push token — if you allow notifications, a device push token issued by Expo (and, on Android, Firebase Cloud Messaging), linked to your account so that only your device receives your notifications.
Request metadata — IP address, timestamps, and the endpoint called. We use these for rate limiting, abuse prevention and debugging.
App and platform basics — operating system, app version and build variant, and whether the app is running on a physical device (a simulator cannot receive push notifications).

The app contains no advertising SDK, no analytics SDK and no third-party tracker. We do not build advertising profiles, and we do not sell or rent personal information to anyone.

3. How we use it

To run the features you asked for — generate a roadmap, write your daily digest, grade a check, tailor a resume, answer a question from your documents, remind you about a task.
To keep your work available across sessions and devices, and to let an agent refer back to what you told it earlier.
To authenticate you and keep your session alive, and to send verification and password-reset emails.
To send the notifications you enabled, at the time you chose.
To keep the service working and safe — rate limiting, error monitoring, preventing abuse.
To improve the app — by looking at aggregate, non-identifying signals such as error rates and endpoint latency.

Where the GDPR applies, our legal bases are performance of a contract (running the features you request), legitimate interests (security, abuse prevention, keeping the service reliable), consent (push notifications, and access to files you pick), and legal obligation where one applies.

4. AI processing

The agents are built on large language models we do not host ourselves. To produce a reply, the relevant part of your content — your message, and the stored context the agent needs, such as the passages retrieved from your documents or the tasks on your agenda — is sent to a model provider over an encrypted connection, processed, and returned to you.

We do not use your content to train models, and our providers are used under terms that do not permit training on API content.
Model output can be wrong. The app is not a substitute for professional advice — legal, medical, financial or otherwise — and the Job Helper does not make decisions about you.
Some features search the public web (for example, research behind a digest, or a job search). The search query derived from your request goes to the search or job-board provider; your account identity does not.

5. Who we share it with

We share personal information only with the service providers below, only as far as a feature needs it, and only under contracts that require them to protect it. We do not sell personal information.

Provider	Used for	What reaches them
OpenAI	Language models and text embeddings	Your prompts and the context needed to answer them
Groq	Alternative model hosting	Same as above, when a request is routed there
Jina AI	Re-ranking search results	Your question and candidate passages from your documents
Tavily	Web search behind research and digests	The search query only
Pinecone	Vector storage for your documents	Embeddings and text chunks, scoped to your user id
MongoDB	Primary application database	Account records and agent content
Redis	Caching and rate limiting	Short-lived cached answers and request counters
Supabase Storage	Storing your uploaded resume file	The file, retrieved through short-lived signed links
Expo (EAS)	Push delivery and over-the-air app updates	Push token and notification content
Google Firebase Cloud Messaging / Apple Push Notification service	Delivering notifications to the device	Push token and notification content
Job boards (JSearch / RapidAPI, Adzuna, Remotive, Arbeitnow)	Job search results	Your search terms and location
Our email (SMTP) provider	Verification and password-reset mail	Your email address and the message

We may also disclose information if the law requires it, or to establish or defend legal claims. If the app is ever transferred to another operator, your data may transfer with it, and you will be told before that happens.

6. Where it is stored, and for how long

Account and agent content is kept while your account exists. Deleting your account is a hard delete: the records are erased from our live systems immediately, not deactivated, anonymised or flagged as deleted while being retained. There is no grace period, nothing is recoverable, and your uploaded files and the vectors derived from them go with it. Backups age out on their own cycle shortly after.
Guest accounts and everything in them expire automatically. Convert to a full account before then if you want to keep the work.
Uploaded documents stay until you delete them in the app. Deleting a document also removes the vectors derived from it.
Resume files are downloadable only through signed links that expire within an hour of being issued.
Cached answers expire within about 24 hours; short-lived caches such as briefings expire within hours.
Logs containing IP addresses are kept for a short period for security and debugging, then discarded.

7. Data kept on your device

The app stores a small amount of data locally so it works offline and keeps you signed in:

Your session and refresh tokens, and a copy of your basic profile.
A cached snapshot of recent learning content and an outbox of actions taken offline, sent when you reconnect.
The unread-digest summary shown on the home-screen widget.
Interface preferences, such as which view mode you last used.

Signing out clears the session, the caches and any scheduled local reminders. Uninstalling the app removes all of it.

8. Notifications and widgets

Notifications are opt-in and are asked for by the operating system. If you decline, everything else keeps working — you simply pull digests and check tasks yourself. You can withdraw permission at any time in your device settings, and you can change or turn off the daily digest hour inside the app.

The home-screen widget reads only the summary the app has already stored on your device. It sends nothing on its own.

9. Your rights and choices

Depending on where you live, you may have the right to access, correct, export, delete or restrict the processing of your personal information, to object to processing, and to complain to your data protection authority.

In the app: edit or delete tasks, notes, roadmaps, applications, chats and uploaded documents at any time; deleting a document also deletes what was derived from it.
Account deletion: open the drawer menu, tap your name to reach Account, and use Delete account under "Danger zone". You will be asked to type DELETE and, unless you are a guest, to re-enter your password. Confirming erases your account and everything in it — tasks, notes and what the assistant remembers about you, roadmaps, digests and quiz history, job applications and uploaded resumes, chats and uploaded documents. The records are erased rather than deactivated, it takes effect immediately, and it cannot be undone. A guest account can also simply be left to expire.
Export: email solidauto202@gmail.com and we will send you a machine-readable copy of your data.
Notifications: revoke the permission in device settings, or change the schedule in the app.

We do not charge for these requests and we do not degrade the service for making one.

10. Security

Traffic between the app and our server is encrypted with HTTPS. Passwords are stored as salted hashes. Every request is authenticated with a bearer token, sessions refresh and expire, and each user's documents and vectors are scoped to their own account so that one user's search cannot reach another's files. Uploads are size-limited and rate-limited.

No system is perfectly secure. If a breach affects your personal information, we will notify you and any regulator that has to be told, as required by law.

11. Children

The app is not directed at children under 13 (or under 16 where local law sets that bar), and we do not knowingly collect their information. If you believe a child has created an account, contact us and we will delete it.

12. International transfers

Our providers operate globally, so your information may be processed in countries other than your own, including the United States. Where the law requires it, transfers rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.

13. Changes to this policy

We will update this page when the app changes, and the date at the top will change with it. For a change that materially affects how we handle your information, we will tell you in the app or by email before it takes effect.

14. Contact

Questions, requests or complaints: solidauto202@gmail.com. solidauto, noida / india.