Reacher.so Privacy Policy
1. Who We Are and What This Policy Covers
This Privacy Policy explains how Reacher.so ("Reacher," "we," "us," or "our") collects, uses, and shares personal information. Reacher is located at 7660 Fay Ave #307, La Jolla, CA 92037, United States.
Reacher is a business-to-business service. We find prospective customers for the businesses that hire us ("clients") and run email outreach to those prospects on our clients' behalf. This policy applies to:
- Our website at reacher.so, including its forms and waiting list (the "Site")
- Our client dashboard, inbox, booking pages, and outreach services (the "Services")
- Information about the business owners and founders we identify as prospects for our clients
By using the Site or Services, you acknowledge that you have read this Privacy Policy. If you do not agree with it, do not use the Site or Services.
The Site and Services are intended only for businesses in the United States. See Section 14.
2. Google User Data
This section governs all information Reacher receives from Google APIs ("Google user data"). If anything else in this Privacy Policy conflicts with this section, this section controls for Google user data.
Connecting Google Calendar is optional. If you connect it, Reacher asks Google for the first two permissions below. It asks for the third only if you turn on "Also add bookings to Google Calendar" in Settings → Booking. Reacher uses each one only as described here:
- See your availability (calendar.freebusy): Reacher reads the start and end times of the busy periods on your primary calendar, to hide times you are already busy from your booking page. Other calendars are not checked. We do not read event titles, descriptions, locations, or guests.
- See your email address (userinfo.email): Reacher reads the address of the Google account you connected, to show you in Settings which account is connected.
- Add booked calls to your calendar (calendar.events.owned): when a prospect books a call, Reacher creates one event for it on your primary calendar, with the call's title and time and the prospect's name, email, and notes. When the booking is cancelled, Reacher deletes that event. If Google cannot be reached at that moment, the event can be missing or can stay after a cancellation, and you can add or delete it in Google Calendar yourself. Reacher does not read, change, or delete any other event, and adds no guests, so Google sends no invitations.
Storage. Busy times are read when your booking page needs them and are not stored. We store the connected account's email address, the time you connected, and the refresh token Google gives us, encrypted at rest. All data moves over HTTPS.
Sharing. We do not share, sell, or transfer Google user data to anyone, and we do not use it for advertising. We do not send it to AI models, and we do not use it to create, train, or improve any AI or machine learning model. Our people do not read it, unless you ask us to for support, or it is needed for security or to comply with the law.
Deletion. Disconnect Google Calendar in Settings → Booking at any time. Reacher then asks Google to revoke its access and immediately deletes the stored token, email address, and connection time. Events Reacher already added stay in your calendar, and you can delete them there. You can also remove Reacher at myaccount.google.com/permissions.
Limited Use. Reacher's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
3. Zoom Integration Data
This section governs information Reacher receives from Zoom and the registration information it submits to Zoom. If another part of this Privacy Policy conflicts with this section, this section controls for that information.
Connecting Zoom is optional. If you connect it, Reacher uses your authorization to verify your account, let you select your webinar, register prospects who have agreed to attend, and confirm registration or attendance for your campaign.
Information we access. Reacher reads the connected Zoom user's email address, user ID and account ID. It reads webinar IDs, titles, scheduled start times, host information and registration questions, including required fields and answer choices. Zoom also provides authorization tokens and, when configured, registration and participant-joined notifications containing account, host, webinar and registrant identifiers, email addresses when available, registration status and event timestamps. This integration does not retrieve webinar audio, video, recordings or transcripts.
Information we send to Zoom. When a prospect agrees to a campaign commitment with Zoom registration enabled, Reacher submits their email address, name and any required registration answers. Answers may include company information and other details requested by the webinar's registration form. We use the resulting registrant ID to record the registration and match later attendance notifications to the prospect.
Use and sharing. We use this information to provide the Zoom features described above, display registration and attendance results to the client running the campaign, and apply the campaign's configured conversation outcomes. Required registration questions, answer choices, known answers and the prospect's replies are processed by our third-party AI providers so Reacher can ask for missing answers and prepare replies. Conversation records containing registration results may also be processed by those providers as part of the Services. Authorization tokens remain on our servers and are not included in AI prompts. Our hosting and database providers process stored integration data to operate the Services. We do not sell or rent Zoom integration data or use information received from Zoom to build advertising profiles.
Storage and retention. We store Zoom access and refresh tokens encrypted at rest. We retain the connected account's identifiers and email address while the connection remains active. Selected webinar IDs, registration answers, registrant IDs and registration or attendance records remain with the campaign and conversation records for as long as needed to provide the Services, subject to this policy's retention provisions and applicable legal requirements.
Disconnecting and removal. You can disconnect Zoom in Reacher under Settings, Connections. A successful disconnect revokes Reacher's Zoom access and deletes its stored tokens, connected account identifiers and email address. If you remove Reacher through the Zoom App Marketplace, we delete that connection information when Zoom's signed removal notification is processed. We briefly retain a hashed removal marker to prevent an authorization already in progress from restoring a removed connection. Disconnecting does not delete existing campaign or conversation records, cancel registrations already made in Zoom, or remove data held by Zoom. Zoom handles data in its own service under its privacy policy.
Access and deletion requests. To request access to or deletion of Zoom-related personal information held by Reacher, email privacy@reacher.so. Identify the connected account or the email address used for webinar registration so we can locate the relevant records. We may need to verify your identity before completing the request. Disconnecting alone is not a request to delete historical campaign and conversation records.
4. Information We Collect From Clients
When you apply for or use Reacher, you give us:
- Contact details: your name and email address, and your company's name and website.
- Business information: what you sell, how you sell it, who your ideal prospects are, and other details about your business that you share on applications, on calls, or by email.
- Campaign preferences: your preferences for your campaigns and any changes you ask us to make to the emails we write for you.
- Account information: your login credentials for the Site and Services.
- Google Calendar connection: if you choose to connect Google Calendar, only the information described in Section 2.
- Payment information: collected and processed by Stripe (see Section 9).
Material you choose to send us. You may voluntarily send us emails, messages, call recordings, meeting notes, transcripts, or other material about your business, your customers, or your sales process. Sending it is entirely optional. When you do, you agree that we may use it to train and improve our system so it writes better emails for you and gives your prospects a better experience. If you do not want material used this way, do not send it to us.
We do not buy information about our clients or combine it with information from data brokers, and we do not build profiles about you. We do not intentionally collect sensitive personal information such as Social Security numbers, health information, or precise geolocation. Please do not send us this kind of information.
5. Information We Collect About Prospects
Reacher works only business to business, and we look for businesses, not consumers. Based on the ideal prospect a client describes, we search for businesses that fit, and then for the owner or founder of each business and their business email address. Clients do not upload contact lists to Reacher.
Where it comes from. We use only publicly available information, gathered from search engines, business websites, professional networking sites, and business directories, directly and through third-party tools such as Google, LinkedIn, FullEnrich, Apollo, DataForSEO, Ahrefs, Similarweb, and Serper.
What we collect:
- About the business: its name, website, industry, services, location, size, how it sells, and an estimated revenue range. The revenue range is our own estimate, produced by our own algorithms. It is not the business's actual revenue, which we have no way of knowing.
- About the owner or founder: their name, title, business email address, and public professional profile URLs.
- When prospects interact with our emails: whether an email was delivered, opened, or bounced, which links were clicked, replies and their content, meetings booked, and unsubscribe requests.
How we review it. We review each business, by hand and with automated tools, to decide whether it fits the client's criteria. For example: does this pool company specialize in salt water pools, and does it sell by appointment? These decisions are about the business. We do not build profiles of individuals' personal interests, characteristics, or behavior. We verify email addresses to confirm they are valid.
6. Cookies, Pixels, and Automatically Collected Information
When you visit the Site, we and our advertising partners automatically collect some information using cookies, pixels, and similar technologies. This includes your IP address, browser type, operating system, device identifiers, approximate location based on your IP address, pages viewed, links clicked, referring URLs, and the date and time of your visits. Our outreach emails may also record whether they were opened and which links were clicked.
We use these technologies to:
- Keep you logged in and remember your preferences
- Measure traffic and understand how people use the Site
- Measure whether outreach emails are delivered, opened, and clicked
- Show ads for Reacher on other websites and social media, including retargeting ads, and measure their results
Advertising partners such as Meta (Facebook and Instagram) and Google place pixels and cookies through the Site. They may collect information about your activity over time and across other websites, and use it under their own privacy policies.
7. How We Use Information
We use personal information to:
- Provide the Services: find and review prospects, verify email addresses, write and send outreach emails, manage sending domains and inboxes, show clients their inbox and bookings, and book meetings
- Improve our system: use the material clients choose to send us (Section 4) to improve how our system writes emails and serves prospects
- Run our business: process payments, manage the waiting list and applications, decide whom to accept as a client, provide support, and keep records
- Market Reacher: send information about Reacher to clients and people who contact us, and show ads through the pixels described in Section 6
- Stay safe and legal: prevent fraud and abuse, enforce our terms, and comply with law, subpoenas, and court orders
- Handle business transfers: in connection with a merger, acquisition, financing, or sale of all or part of our business
- Do anything else we describe when we collect the information, or that you consent to
8. How We Share Information
This section does not apply to Google user data, which we never share, sell, or transfer (see Section 2). We share other personal information only as follows:
- With clients, inside Reacher: a client can see the outreach conversations we run on their behalf in their Reacher inbox. This includes a prospect's name, business, business email address, emails and replies, and whether the prospect booked a meeting, asked for more information, or clicked a link. Clients can reply to prospects by hand from the inbox. Clients cannot download or export prospect lists or prospect data.
- With service providers: companies that help us operate, including email sending and deliverability platforms, email verification and data enrichment tools, website hosting, content delivery, and security (Cloudflare), cloud storage, analytics, scheduling, AI and language model providers, customer support tools, and payment processing (Stripe).
- With advertising partners: Meta and Google, through the pixels described in Section 6.
- For legal and safety reasons: with courts, law enforcement, government agencies, and others when we believe disclosure is required by law or needed to protect rights, property, or safety.
- In a business transfer: with buyers, investors, or successors in a merger, acquisition, financing, bankruptcy, or sale of assets.
- With your consent or at your direction.
No sale of personal information; sharing for advertising
We do not sell personal information, and we have not sold it in the past 12 months. We do use advertising pixels and cookies from partners such as Meta and Google on the Site. Under California and some other state laws, this counts as "sharing" personal information for cross-context behavioral advertising (targeted advertising). In the past 12 months we may have shared identifiers (such as IP address, device IDs, and cookie IDs) and internet activity (such as pages viewed and actions taken on the Site) with advertising platforms for this purpose.
We do not knowingly sell or share the personal information of anyone under 16.
You can opt out of this sharing at any time by emailing privacy@reacher.so or by using a browser that sends a Global Privacy Control signal. See Section 13.
9. Payments
We use Stripe, Inc. ("Stripe") to process payments. When you pay us, your payment card or bank details are sent directly to Stripe. We do not store your full card number on our own systems. We may receive and keep limited payment information from Stripe, such as your name, billing address, the last four digits and expiration date of your card, card brand, transaction amounts, dates, and payment status.
Stripe collects and uses your information under its own privacy policy, available at stripe.com/privacy. Stripe may use your information for fraud prevention, compliance, and to improve its own services.
10. Artificial Intelligence and Automated Tools
We use artificial intelligence and other automated tools to run the Services. These tools mainly process business information: they research whether a business fits a client's criteria, and they write and send outreach emails. The only personal information they look for is the business email address of a business's owner or founder, which we then verify. AI tools also write responses to prospects' replies, which clients can watch and take over in their inbox. To do this, emails and replies are processed by third-party AI providers.
We do not use prospects' emails or replies to train, test, or improve our models or automated systems. We do use material that clients voluntarily send us to improve our system, as described in Section 4. We never send Google user data to AI models (see Section 2).
We do not use automated tools to make decisions that produce legal or similarly significant effects on individuals, such as decisions about credit, housing, employment, or insurance.
11. Data Retention and Security
Retention. We keep personal information for as long as we need it for the purposes described in this policy, including providing the Services, marketing, maintaining business and tax records, resolving disputes, and enforcing our agreements. We keep suppression and unsubscribe records indefinitely so we can honor opt-out requests. When we no longer need information, we delete it or de-identify it. De-identified information may be kept and used for any purpose.
Security. We use reasonable administrative, technical, and physical safeguards to protect personal information. No method of transmission or storage is completely secure, and we cannot guarantee the security of your information. You are responsible for keeping your account credentials confidential. If we learn of a security breach affecting your personal information, we will notify you as required by applicable law.
12. Your Choices
Marketing emails. You can stop receiving marketing emails from Reacher by clicking the unsubscribe link in any email or by emailing privacy@reacher.so. We will still send clients transactional messages, such as receipts and account notices.
Outreach emails sent for our clients. If you received an email sent through Reacher and do not want to be contacted again, reply asking to be removed or use the opt-out link in the email. We add every unsubscribe to a global suppression list, so we will not contact you again on behalf of any client. To ask what information we hold about you, email privacy@reacher.so.
Google Calendar. Clients can disconnect Google Calendar at any time, as described in Section 2.
Cookies and ads. Most browsers let you block or delete cookies, though parts of the Site may not work if you do. You can opt out of interest-based advertising from many companies at optout.aboutads.info and optout.networkadvertising.org, and adjust ad preferences in your Google and Meta account settings. Blocking images in your email client prevents email open tracking.
Do Not Track. Some browsers send a "Do Not Track" signal. There is no common standard for responding to it, and the Site does not currently respond to it. We do honor Global Privacy Control signals, as described in Section 13.
13. Your U.S. State Privacy Rights
Depending on where you live, including California, Colorado, Connecticut, Virginia, Utah, Texas, Oregon, and other states with consumer privacy laws, you may have some or all of the following rights, subject to exceptions under applicable law:
- Right to know / access: ask what personal information we collected about you, where it came from, why we use it, and the categories of third parties we disclosed or shared it with, and get a copy
- Right to delete: ask us to delete personal information we collected about you
- Right to correct: ask us to correct inaccurate personal information
- Right to opt out of sharing: tell us not to share your personal information for targeted advertising (we do not sell personal information)
- Right to non-discrimination: we will not discriminate against you for exercising these rights
- Right to appeal: if we deny your request, you can appeal by replying to our decision. If your appeal is denied, you may contact your state attorney general.
How to make a request
Email us at privacy@reacher.so with the subject line "Privacy Request" and tell us which right you want to use. We will verify your identity before responding, usually by matching information you give us with information we already hold. You may use an authorized agent to make a request on your behalf. We may ask the agent for proof of authorization and ask you to verify your identity directly. We will respond within the time required by law, generally 45 days.
Global Privacy Control
If your browser sends a Global Privacy Control (GPC) signal, we treat it as a request to opt out of the sharing of personal information associated with that browser.
California "Shine the Light"
California residents may ask once per year for information about personal information we disclosed to third parties for their direct marketing purposes in the prior calendar year. Send requests to the email or mailing address in Section 15.
14. Users Outside the United States and Children
United States only. Reacher is based in the United States, and the Site and Services are intended only for people and businesses in the United States. We do not offer the Services to people in the European Union, the European Economic Area, the United Kingdom, or Switzerland, and we do not target or market to them. We do not represent that our practices comply with the EU or UK General Data Protection Regulation (GDPR) or with the privacy laws of any country other than the United States. If you are located outside the United States, do not use the Site or Services or send us personal information.
If you access the Site from outside the United States, you understand that your information will be transferred to, stored, and processed in the United States and other countries where our service providers operate, where data protection laws may differ from those in your country.
Children. The Site and Services are for businesses and are not directed to children. We do not knowingly collect personal information from anyone under 16. If you believe we have collected information from a child, contact us and we will delete it.
15. Changes and Contact
Changes to this policy. We may update this Privacy Policy from time to time. When we do, we will change the effective date at the top. If we make material changes, we will give notice as required by law, such as by posting a notice on the Site or emailing you. Your continued use of the Site or Services after an update means you accept the updated policy.
Contact us. For questions about this policy or to make a privacy request:
Reacher.so
7660 Fay Ave #307
La Jolla, CA 92037
United States
Email: privacy@reacher.so