Privacy policy
How RelayBib protects your personal data, registration proof documents, and payment details.
1. Strictly private registration proof documents
When a Seller lists a bib, they are required to upload proof of race registration (e.g. RunSignup confirmation email, registration receipt PDF).
🔒 Private Bucket Security: Proof documents are stored in private, non-public AWS S3 buckets. They are NEVER indexed by search engines and NEVER exposed publicly to buyers or third parties.
Only authorized RelayBib compliance administrators may access proof files via temporary 15-minute presigned URLs for verification purposes.
2. Payment & bank account encryption
RelayBib does not store credit card numbers, debit card details, or bank account numbers on our servers. All financial transactions and seller bank payouts are processed directly by Stripe Inc. through PCI-DSS Level 1 certified infrastructure.
When you buy an entry with protected payment, we show the seller your full name and email address so they can enter them in the organizer's official transfer process (Art. 6(1)(b) GDPR, to carry out the transfer you requested). The screenshot a seller uploads to show they started the transfer is stored privately and is only viewed by RelayBib staff when a problem is reported.
3. Information we collect
- Account Credentials: Name, email address, password (stored strictly as salted bcrypt hashes).
- Marketplace Activity: Order timestamps, bib listings, transfer confirmation logs, and dispute claims.
- Communications: Messages exchanged between buyers and sellers on RelayBib. Authorized RelayBib staff may review these messages to resolve disputes, investigate reported problems, and prevent fraud or payments outside the platform.
4. Data retention & post-race purge
Following completion of a race and expiration of the dispute window, participant registration proof screenshots are automatically scheduled for permanent deletion from our storage buckets within 30 days.