Privacy Policy

This Privacy Policy explains how ReachTok (“we”, “us”) collects, uses, stores, and shares information when you use our websites, apps, and related services (the “Service”).

1. Who we are

ReachTok provides creator discovery and outreach tooling for brands and agencies. For privacy questions, contact legal@reachtok.app or support@reachtok.app.

2. Information we collect

• Account data: name, email address, authentication identifiers, workspace membership, and plan selection.
• Workspace content: creator/lead records, campaign settings, message templates, outreach logs, connected sender account metadata, and related operational notes you store in the Service.
• Usage and device data: approximate location from IP, browser type, pages viewed, feature usage, and diagnostic logs needed to operate and secure the Service.
• Billing data: subscription status and customer IDs processed by our payment provider (Stripe). We do not store full card numbers on our servers.
• Communications: support emails and other messages you send us.

3. How we use information

• Provide, maintain, and improve the Service
• Authenticate users and enforce workspace permissions
• Process subscriptions and prevent abuse or fraud
• Send transactional notices (security, billing, product changes)
• Comply with law and respond to lawful requests

4. Legal bases (EEA/UK where applicable)

We process personal data where needed to perform our contract with you, pursue legitimate interests (security, product improvement, fraud prevention), comply with legal obligations, or with your consent where required.

5. Sharing

We share data with:

• Infrastructure and auth providers needed to run the Service (for example hosting, database, and identity)
• Payment processors for paid plans
• Professional advisors and authorities when legally required

We do not sell personal information.

6. Retention

We retain account and workspace data while your account is active and for a reasonable period afterward for backups, dispute resolution, and legal compliance. You may request deletion of your workspace subject to residual backup and legal retention limits.

7. Security

We use industry-standard controls including encrypted transport, access controls, encrypted secrets for connected sessions where applicable, and tenant-scoped authorization. No method of transmission or storage is completely secure; see also our Security page.

8. Your rights

Depending on your location, you may have rights to access, correct, delete, export, or restrict processing of your personal data, and to object to certain processing. Contact legal@reachtok.app to exercise these rights.

9. International transfers

We may process data in countries other than your own. Where required, we use appropriate safeguards for cross-border transfers.

10. Children

The Service is not directed to children under 16, and we do not knowingly collect their personal information.

11. Changes

We may update this policy from time to time. Material changes will be posted on this page with an updated date. Continued use after changes means you accept the revised policy.