Privacy Policy

This policy explains what personal data Reachbox ("we", "us") handles, why, and what choices you have. Reachbox is an outbound tool, so two groups of people are affected: customers who use Reachbox, and the business contacts that customers find and write to. We cover both.

1. Data we collect from customers

• Account data: name, work email, password (stored hashed) or sign-in details from a provider such as Google, and workspace settings.
• Business profile data: your ideal customer profile, product descriptions, messaging and campaign settings.
• Connected accounts: when you connect a mailbox or a LinkedIn account, we store the credentials or tokens needed to send on your behalf. Mailbox credentials are encrypted at rest.
• Campaign and inbox data: the messages Reachbox sends for you and the replies you receive.
• Billing data: plan, credit balance and payment status. Card details are handled by our payment provider, not stored by us.
• Usage and device data: pages viewed, actions taken, browser and IP address, used for security and product analytics.

2. Data we collect about business contacts

To find leads, Reachbox searches publicly available web sources for people who match a customer's ideal customer profile. For each lead this typically means name, job title, company, work email address, a public profile link and publicly stated company details. We check email addresses (syntax, domain and mail server) before anything is sent. We do not collect this data to build a general-purpose people database; it is processed for the customer who asked for it.

If you received a message sent through Reachbox and want it to stop, or want to know what we hold about you, see "Your rights" below.

3. How we use data

• To provide the service: find and verify leads, write and send outreach, show replies and book meetings.
• To secure the service, prevent abuse and enforce our Terms, including suppressing addresses that have opted out or bounced.
• To bill you and provide support.
• To improve the product using aggregated or de-identified usage data.
• To meet legal obligations.

4. AI processing

Reachbox uses AI models to write personalised messages. To do this, relevant context (for example a lead's role and company, and your product description) is sent to our AI providers. We do not allow our providers to use this content to train their models for other customers.

5. Who we share data with

We share data only with service providers that help us run Reachbox, under written terms that limit their use of it. These include cloud hosting, AI model providers, web data and enrichment providers, email and messaging delivery, payment processing, and analytics. We may also disclose data when the law requires it, or as part of a merger or sale of the business. We do not sell personal data.

6. Cookies and analytics

This website uses privacy-conscious analytics and performance measurement to understand how pages load and which content is useful. The product itself uses cookies or local storage needed to keep you signed in.

7. Retention

We keep customer data while your account is active and for a limited period afterwards for backup, legal and billing reasons, then delete or anonymise it. Lead data is kept for as long as the customer's workspace needs it, and is deleted when the customer deletes it or closes the account. Suppression records (such as opt-outs) are kept so that we do not contact someone again.

8. Your rights

Depending on where you live (for example under the GDPR, UK GDPR or California law) you may have the right to access, correct, delete or export your personal data, to object to or restrict certain processing, and to withdraw consent. To use any of these rights, or to opt out of outreach sent through Reachbox, email us. We will reply within the time the law requires.

9. International transfers

Our providers may process data in countries other than your own. Where required, we rely on approved transfer mechanisms such as standard contractual clauses.

10. Security

We use technical and organisational measures to protect personal data. See our Security page for detail. No system is perfectly secure, and we will notify affected people and regulators where the law requires after a breach.

11. Children

Reachbox is a business tool and is not directed at children under 16. We do not knowingly collect their data.

12. Changes

We may update this policy. If a change is significant we will tell customers by email or in the product. The date at the top shows the latest version.

13. Contact

Questions or requests: privacy@reachbox.site.