1. Introduction

ReachAI ("we," "our," or "us") is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service at reachai.us.

2. Information We Collect

Account information: When you register, we collect your name, email address, and password (stored securely via Supabase Auth).

Usage data: We store the outreach messages you generate, including the inputs (sender info, target info, offer) and outputs (generated variants). This is required to show your message history.

Billing information: Payment processing is handled by LemonSqueezy. We store only your subscription plan and status — not your payment card details.

Usage analytics: We collect anonymous usage data (page views, feature usage) via Vercel Analytics to improve the product.

3. How We Use Your Information

• To provide and improve the ReachAI service
• To process your payments and manage subscriptions
• To send account-related emails (confirmation, password reset)
• To display your message history in the dashboard
• To enforce our rate limits and plan limits
• To improve our AI prompts and generation quality

4. Third-Party Services

We use the following third-party services that may process your data:

• Supabase — database and authentication (stored in EU region)
• Anthropic — AI message generation (your inputs are sent to Anthropic API; they do not use your data to train models by default)
• LemonSqueezy — payment processing and subscription management
• Vercel — hosting and analytics

5. Data Retention

We retain your account data as long as your account is active. Generated messages are retained for 90 days by default. You can delete your account at any time from the Account settings page, which will permanently remove all your data.

6. Your Rights (GDPR)

If you are in the European Union, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate personal data
• Request deletion of your personal data
• Object to processing of your personal data
• Data portability

To exercise any of these rights, email us at privacy@reachai.us.

7. Cookies

We use essential cookies for authentication (Supabase session cookies) and localStorage for user preferences (language selection, demo usage count). We do not use third-party advertising cookies.

8. Security

We implement industry-standard security measures including HTTPS encryption, Row Level Security in our database, and secure API key management. No method of transmission over the internet is 100% secure, but we take all reasonable steps to protect your data.

9. Contact

For privacy-related questions, contact us at privacy@reachai.us.