Terms of service

RelayKey forwards HTTP requests from your team / agents to third-party APIs after enforcing the scope you set on a delegated credential or recipient grant. We never modify your request body or your upstream vendor's response beyond stripping hop-by-hop headers and enforcing the configured response-size cap. We log the metadata of every call to your audit log.

• Having the right to issue API keys for the upstream vendors you connect. RelayKey doesn't grant you authority you don't already have with those vendors.
• Setting reasonable scopes on the credentials and recipients you issue. RelayKey enforces what you configure; it doesn't second-guess whether the scope was wise.
• Keeping your rk_proxy_ tokens and management tokens out of public repos, browser bundles, and shared chats. We hash them so we can't recover one if you lose it — you'd need to re-issue.
• Not using RelayKey to access systems you don't have authorization for, or to evade anti-abuse measures on upstream APIs (rate limits, terms of service, etc.).

Don't use RelayKey to:

• Probe or attack systems you don't own or operate.
• Send requests on behalf of users who haven't consented to that automation.
• Bypass an upstream vendor's rate limits, IP allowlists, or geographic restrictions.
• Send malware, illegal content, or spam.

If we see traffic that looks like one of these, we'll contact you and may suspend the relevant credentials or the account itself.

We aim for high availability but we don't commit to a contractual SLA on the public plans. If you need an SLA, email hello@relaykey.ai and we'll work out an enterprise contract.

We'll give reasonable notice before scheduled maintenance. Brief deploys (< 60 seconds) may happen without notice; this is documented in our deploy notes.

Free plan is free, no commitment. Paid plans (Solo, Starter, Agency) are billed monthly via Stripe once Stripe checkout is live. You can downgrade or cancel any time; access at the paid tier continues through the end of the billing period you've already paid for.

You can delete your account at any time (email privacy@relaykey.ai; see our Privacy page for what gets removed).

We can suspend or terminate accounts for material breaches of these terms. We'll email first when we can; we won't when we believe doing so risks ongoing harm to someone else.

RelayKey is provided as is. We make no warranty that the service will be uninterrupted, error-free, or that it will protect you from every kind of credential misuse. Read /security for the explicit out-of-scope list.

To the extent permitted by law, our total liability under these terms — across every claim — is limited to what you've paid us in the 12 months preceding the claim. For free-plan users that figure is $0. We're not liable for indirect, incidental, or consequential damages.

These terms are governed by the laws of the State of Delaware, USA, without regard to conflicts of law. Disputes go to courts located in Delaware. Nothing here waives consumer-protection rights you have under your local laws.

If we change these terms materially we'll email account admins and update the date at the top. If you don't like the change, you can delete your account before the new terms take effect.

Legal / contracts: hello@relaykey.ai. Security incidents: security@relaykey.ai.