Security and data handling
Your designs are often unreleased work. Here's how Relloo treats them during the private beta.
Where your data lives
Relloo runs on Vercel, with files in private storage and data in a managed Postgres database.
Each workspace is separate
Every project, release, screen and comment belongs to one organization, and every request is checked against it.
Files are never public
Frames, layer data and assets are stored privately and served only through signed links that expire.
Access
Roles control who can publish and ship releases. Guests see only the project they were invited to.
Tokens
Plugin and MCP tokens are tied to one person in one workspace, stored hashed, and can be revoked.
Deleting your data
Ask us and we’ll delete your workspace and everything in it. Deletion removes files from storage, not just database rows.
During the beta
We only bring a company’s designs into Relloo with that company’s explicit consent.
Reporting an issue
Found something? Email hello@relloo.io. We’ll reply within two business days.