Privacy Policy
This policy explains how [to be completed] (“we”) handles personal data in ReachPilot.
1. Two kinds of data
Your account data — your name, email, sign-in details, billing status and how you use the Service. We are the controller of this data.
Your workspace data — the contacts you import, your campaigns, the emails sent and the replies found in your connected inboxes. You are the controller of this data; we process it only on your instructions to provide the Service.
2. What we use it for
- running the Service: sending your sequences, detecting replies, bounces and unsubscribes, showing statistics;
- account emails such as verification, password reset, trial and usage notices;
- billing (through Paddle), security, abuse prevention and fixing errors.
We do not sell personal data and do not use your contacts for anything else.
3. Security
Data is encrypted in transit. Inbox passwords and API keys are additionally encrypted at rest and never shown again after you save them. Each workspace’s data is kept separate from every other workspace.
4. Service providers
- Google Cloud (application hosting, logs) and Supabase (database);
- Resend (account emails);
- Paddle (payments, tax, invoices — Paddle is the merchant of record and has its own privacy policy);
- Google Gemini or OpenAI, only when AI writing is used — with your own key, under your agreement with that provider;
- ZeroBounce, only if you add a key for email verification;
- your own mail providers, which receive the emails you send and hold the replies.
Providers may process data outside your country under appropriate safeguards.
5. Retention
We keep workspace data while your account is active. When you delete it, it is removed from the live database promptly and from backups within 35 days. Suppressed addresses (unsubscribes and bounces) are kept for as long as your workspace exists so they are never emailed again.
6. Your rights
You can access, correct, export or delete your account data, and object to or restrict its use, by contacting us. People in your contact lists should contact you, the sender; we will help you respond.
7. Cookies
We use only the cookies needed to keep you signed in. No advertising or tracking cookies.
8. Contact
[to be completed] · [to be completed]