Privacy Policy

Last updated: June 2, 2026

Reliancy, Inc. ("Reliancy," "we," "us") respects your privacy. This Privacy Policy explains how we collect, use, disclose, and protect personal information when you use our websites, hosted applications, customer-deployed software (including Azure virtual machine and managed application offers), support portals, and related services (collectively, the "Services").

This Policy applies to personal information Reliancy processes as a data controller. When we process personal information on behalf of a business customer (for example, end users of a customer's hosted tenant), we act as a processor and our Data Processing Addendum and customer instructions apply.

Related documents: Terms of Service · Data Processing Addendum · Service Level Agreement

Some practices apply only to certain Services. Sections marked "If Applicable" describe additional or different practices for that deployment model.

1. Who This Policy Covers

• Visitors to reliancy.com and related sites
• Account holders and Authorized Users of Reliancy applications
• Marketplace subscribers (for example, Azure Marketplace purchasers)
• Support contacts and billing contacts
• Individuals whose data is submitted to our Services by a customer (handled under Section 10)

2. Information We Collect

We collect information in three ways: you provide it, we collect it automatically, and we receive it from third parties.

2.1 Information you provide

• Account and profile: name, email, phone, company, job title, password or authentication tokens
• Billing and orders: billing address, tax IDs, purchase details (payment card data is typically processed by marketplace operators or payment processors, not stored by us)
• Support and communications: messages, tickets, survey responses, meeting notes
• Registration and forms: information you submit on our websites or in-product forms

2.2 Information collected automatically

• Usage and logs: IP address, device identifiers, browser type, pages viewed, features used, timestamps, diagnostic and error logs
• Cookies and similar technologies: see Section 8
• Security data: authentication events, fraud signals, access logs

2.3 If Applicable — Hosted (SaaS)

When you use a Reliancy-hosted application, we may also process:

• Tenant and configuration data you enter in the service
• Content and files you upload, subject to product functionality
• Operational metadata needed to run, back up, and secure the hosted environment

2.4 If Applicable — Customer-Deployed (VM, Managed App)

When you run our software in your environment, Reliancy generally does not have routine access to your production databases or file stores. We may still collect:

• License and activation data (subscription ID, tenant ID, version, instance ID)
• Telemetry described in product documentation (health, errors, performance aggregates)
• Support artifacts you choose to send (logs, screenshots, exports)

You control what your deployment sends through configuration and network policies.

2.5 Information from third parties

• Identity providers (Microsoft Entra ID, Google, etc.) if you use SSO
• Marketplace operators (for example, Microsoft) regarding subscription, account, and billing status
• Service providers that help us operate the Services (hosting, email, analytics, support tools)

3. How We Use Information

We use personal information to:

• Provide, operate, maintain, and secure the Services
• Authenticate users and manage accounts
• Process orders, billing, and marketplace entitlements
• Provide customer support and respond to inquiries
• Send service-related notices (security, maintenance, policy updates)
• Monitor usage, troubleshoot, and improve reliability
• Detect, prevent, and investigate fraud, abuse, or security incidents
• Comply with law and enforce our Terms of Service
• With your consent where required, send marketing (you may opt out)

We do not sell personal information. We do not use Customer Data from business tenants to train generalized public AI models unless we provide a separate opt-in or agreement.

4. Legal Bases (EEA, UK, and Similar Jurisdictions)

Where GDPR or similar laws apply, we rely on:

• Contract — to provide the Services you request
• Legitimate interests — security, fraud prevention, product improvement, and B2B marketing to business contacts (balanced against your rights)
• Consent — non-essential cookies and certain marketing where required
• Legal obligation — tax, accounting, and lawful requests

You may object to processing based on legitimate interests or withdraw consent where applicable by contacting us (Section 12).

5. How We Share Information

We share personal information only as needed:

• Service providers (subprocessors): hosting (including Microsoft Azure), email, monitoring, analytics, support, and payment/marketplace platforms under contracts requiring appropriate safeguards
• Affiliates within Reliancy's corporate group for operations described in this Policy
• Business transfers: merger, acquisition, or asset sale, subject to continued protections
• Legal and safety: to comply with law, court order, or governmental request, or to protect rights, safety, and security
• With your direction: integrations you enable or support cases you open

A current list of major subprocessors is available on request at info@reliancy.com. We will provide notice of material subprocessors changes where required.

5.1 If Applicable — Azure Marketplace

If you purchase through Azure Marketplace, Microsoft processes purchaser and billing information under Microsoft's privacy policy. We receive information necessary to enable your subscription and support. We do not control Microsoft's independent processing.

6. International Transfers

Reliancy is based in the United States. We may process and store information in the U.S. and other countries where we or our subprocessors operate.

If we transfer personal information from the EEA, UK, or Switzerland to countries without an adequacy decision, we use appropriate safeguards such as Standard Contractual Clauses and supplementary measures where required. Contact us for a copy of relevant transfer mechanisms.

7. Retention

We retain personal information only as long as needed for the purposes in this Policy, including:

• Account data: for the life of the account plus a reasonable period after closure
• Billing records: as required by tax and accounting laws (often seven years)
• Support records: typically up to three years after case closure
• Logs and security data: generally 12–24 months unless needed for incident investigation
• Hosted tenant Customer Data: per our Terms and DPA (export window, then deletion from production systems subject to backup rotation)

You may request deletion subject to Section 9 and legal exceptions.

8. Cookies and Similar Technologies

We use cookies and similar technologies for:

• Essential operation (session, authentication, security)
• Preferences (settings, language)
• Analytics (usage trends, performance) — where permitted

You can control cookies through browser settings. Blocking essential cookies may prevent use of parts of the Services. Where required by law, we request consent for non-essential cookies.

9. Security

We implement administrative, technical, and organizational measures designed to protect personal information, including encryption in transit for hosted Services, access controls, and monitoring. No method of transmission or storage is completely secure; we cannot guarantee absolute security.

If we become aware of a personal data breach affecting your information as controller, we will notify you as required by law.

10. Business Customers and End-User Data

If you use our Services as a customer organization, you are responsible for providing notice and obtaining any required consents from your users whose personal information you submit to the Services. We process that information under your instructions and our DPA when applicable.

For requests from individuals who use a customer's tenant, we may direct them to the customer as primary controller.

11. AI and Automated Processing

Some Services may use machine learning or automation to classify data, detect anomalies, or assist users. We do not make solely automated decisions with legal or similarly significant effects on individuals without appropriate basis and safeguards where required. Outputs may be inaccurate; human review is advised for important decisions.

12. Your Rights and Choices

Depending on your location, you may have rights to:

• Access, correct, or delete personal information
• Restrict or object to certain processing
• Data portability
• Withdraw consent (where processing is consent-based)
• Lodge a complaint with a supervisory authority (EEA/UK)

California residents (CCPA/CPRA): You have rights to know, delete, and correct personal information, and to opt out of "sale" or "sharing" (we do not sell or share for cross-context behavioral advertising as defined by CPRA). You may designate an authorized agent. We will not discriminate against you for exercising rights.

To exercise rights, email info@reliancy.com. We may verify your identity before responding. Authorized agents must provide proof of authority.

13. Children's Privacy

The Services are not directed to children under 16 (or under 13 in the U.S. where COPPA applies). We do not knowingly collect personal information from children. Contact us to request deletion if you believe we have collected such information.

14. Third-Party Links and Integrations

The Services may link to third-party sites or allow integrations (for example, cloud storage or identity). Their privacy practices govern those services. Review their policies before use.

15. Changes to This Policy

We may update this Policy by posting a new version with an updated "Last updated" date. Material changes will be notified through the Services or email when practicable. Continued use after the effective date constitutes acceptance where permitted by law.

16. Contact Us

Reliancy, Inc.

Email: info@reliancy.com

For data protection inquiries in the EEA/UK, contact the address above; we will respond and coordinate with our representatives if we appoint them.

This Policy is provided for operational transparency. It does not constitute legal advice.