Privacy Policy
Last updated: June 27, 2026
1. Overview
Reachly("we", "us", or "the Service") respects your privacy. This Privacy Policy explains what information we collect, how we use it, and the choices available to you when you use our Gmail-powered outreach platform.
2. Information We Collect
Account information
When you sign in with Google, we receive basic profile information from your Google account, such as your email address, display name, and profile picture. We also store OAuth tokens needed to send email on your behalf.
Email activity
To provide sending and tracking features, we store information about outreach you send through the Service, including recipient addresses, subjects, message bodies, attachment metadata, send times, Gmail message IDs, and thread IDs.
Session data
We use encrypted session cookies to keep you signed in and to manage access tokens securely during your visit.
Technical data
Like most web applications, our hosting infrastructure may process standard request logs such as IP address, browser type, and timestamps needed for security and reliability.
3. How We Use Information
We use collected information to:
- Authenticate you and maintain your session
- Send emails from your connected Gmail account
- Display sent messages from your outreach history
- Show attachment metadata when you view sent messages
- Operate, secure, and improve the Service
We do not sell your personal information. We do not use your Gmail data to serve advertisements.
4. Google API Services
Reachly's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
To operate the Service, we request the following Google permissions:
- Gmail send — to send outreach emails from your account
- Profile and email — to identify your account and show your name and avatar in the app
5. How We Store and Protect Data
Account and sent email records are stored in a secure database. Session tokens are encrypted. Access to production systems is restricted to what is necessary to operate the Service.
No method of transmission or storage is completely secure. We take reasonable measures to protect your information, but we cannot guarantee absolute security.
6. Data Retention
We retain information for as long as needed to provide the Service and fulfill the purposes described in this policy. If you stop using the Service, stored records may remain until they are deleted by the operator of your deployment or until retention policies are applied.
7. Sharing of Information
We do not share your personal information with third parties except:
- With infrastructure providers that host or support the Service, under obligations to protect your data
- With Google, as required to authenticate and use Gmail APIs
- When required by law or to protect rights, safety, and security
8. Your Choices
You can:
- Sign out of the Service at any time
- Revoke Reachly's access in your Google Account permissions settings
- Contact the operator of your deployment to request access to or deletion of stored account data, subject to legal and operational requirements
9. Children's Privacy
The Service is not intended for users under 13 years of age, and we do not knowingly collect personal information from children.
10. Changes to This Policy
We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page will reflect the most recent revision. Material changes will be posted on this page.
11. Contact
For privacy questions or requests, contact the operator of the Email Outreach deployment you are using.