Privacy Policy

Last Updated

10/03/2026
Introduction
Data Collected
Use of Data
Call Recordings
Legal Basis for Processing
Your Rights & Choices
Data Retention
Cookies
Security
Changes to This Policy
Contact Us

1. Introduction

Reached ("we", "us", "our") is a SaaS parallel dialing service for sales teams, operated under the Reached brand and accessible via reachedapp.com.
Contact: contact@reachedapp.com

2. Data Collected

2.1 Data you provide


  • Account information: name, email address, password

  • Billing information: payment details (processed by Stripe)

  • Prospect data: names, phone numbers, emails, company information imported into Reached

  • Notes and comments entered into the platform


2.2 Data collected automatically

  • Call recordings

  • Call transcriptions (if the feature is enabled)

  • Call logs: date, time, duration, outcome

  • Usage data: pages visited, actions performed, login logs

  • IP address and browser information


2.3 Data from third parties

  • Data imported from your connected CRMs (HubSpot, Salesforce, Pipedrive, Attio, Folk, Sellsy, Monday.com, Lemlist, Close)

  • AI-generated lead enrichment data

3. Use of Data

We use your data to:

  • Provide and improve the Reached service

  • Enable phone calls via our Twilio infrastructure

  • Synchronize data with your connected CRMs

  • Generate call transcriptions and summaries

  • Send you service-related communications

  • Ensure security and prevent fraud

  • Comply with legal obligations

4. Call Recordings

In accordance with applicable laws (France: Article L34-5 of the Postal and Electronic Communications Code; United States: federal and state call recording laws), Reached users are responsible for informing their contacts of call recording before or at the start of each call.

5. Legal Basis for Processing (GDPR)

For users in the European Union, we process your data on the following legal bases:

  • Contract performance: processing necessary to provide the service

  • Legitimate interest: service improvement, security, fraud prevention

  • Consent: for marketing communications (revocable at any time)

  • Legal obligation: data retention required by law

6. Your Rights (GDPR & CCPA)


6.1 European users (GDPR)

You have the following rights regarding your personal data:

  • Right of access: obtain a copy of your data

  • Right to rectification: correct inaccurate data

  • Right to erasure: request deletion of your data

  • Right to portability: receive your data in a structured format

  • Right to object: object to the processing of your data

  • Right to restriction: request limitation of processing


6.2 California users (CCPA)

California residents have the following rights:

  • Right to know what personal data is collected

  • Right to request deletion of their data

  • Right to opt out of the sale of their data (Reached does not sell your data)

  • Right to non-discrimination for exercising these rights

To exercise your rights, contact us at: contact@reachedapp.com

7. Data Retention

  • Account data: retained for the duration of your subscription + 3 years after termination

  • Call recordings: 90 days

  • Transcriptions: 90 days

  • Call logs: 2 years

  • Billing data: 10 years (French legal requirement)

8. Cookies

Reached uses technical cookies necessary for the proper functioning of the service (authentication, session management). We do not use advertising cookies or third-party tracking cookies.

9. Security

We implement appropriate security measures to protect your data, including: AES-256 encryption for sensitive data, HTTPS connections, secure authentication, and Row Level Security (RLS) access control on our database.

10. Changes

We may update this policy at any time. In case of significant changes, we will notify you by email at least 30 days before the new terms take effect.

8. Contact Us

If you have any questions about this Privacy Policy, please contact us at:

Email: contact@reachedapp.com