Privacy Policy

Last Updated

16/10/2026

1. Introduction

Reached ("we", "us", "our") is a SaaS parallel dialing service for sales teams, operated under the Reached brand and accessible via reachedapp.com.
Contact: contact@reachedapp.com

2. Data Collected

2.1 Data you provide


  • Account information: name, email address, password

  • Billing information: payment details (processed by Stripe)

  • Prospect data: names, phone numbers, emails, company information imported into Reached

  • Notes and comments entered into the platform


2.2 Data collected automatically

  • Call recordings

  • Call transcriptions (if the feature is enabled)

  • Call logs: date, time, duration, outcome

  • Usage data: pages visited, actions performed, login logs

  • IP address and browser information


2.3 Data from third parties

  • Data imported from your connected CRMs (HubSpot, Salesforce, Pipedrive, Attio, Folk, Sellsy, Monday.com, Lemlist, Close)

  • AI-generated lead enrichment data

3. Use of Data

We use your data to:

  • Provide and improve the Reached service

  • Enable phone calls via our Twilio infrastructure

  • Synchronize data with your connected CRMs

  • Generate call transcriptions and summaries

  • Send you service-related communications

  • Ensure security and prevent fraud

  • Comply with legal obligations

4. Call Recordings

In accordance with applicable laws (France: Article L34-5 of the Postal and Electronic Communications Code; United States: federal and state call recording laws), Reached users are responsible for informing their contacts of call recording before or at the start of each call.

5. Legal Basis for Processing (GDPR)

For users in the European Union, we process your data on the following legal bases:

  • Contract performance: processing necessary to provide the service

  • Legitimate interest: service improvement, security, fraud prevention

  • Consent: for marketing communications (revocable at any time)

  • Legal obligation: data retention required by law

6. Your Rights (GDPR & CCPA)


6.1 European users (GDPR)

You have the following rights regarding your personal data:

  • Right of access: obtain a copy of your data

  • Right to rectification: correct inaccurate data

  • Right to erasure: request deletion of your data

  • Right to portability: receive your data in a structured format

  • Right to object: object to the processing of your data

  • Right to restriction: request limitation of processing


6.2 California users (CCPA)

California residents have the following rights:

  • Right to know what personal data is collected

  • Right to request deletion of their data

  • Right to opt out of the sale of their data (Reached does not sell your data)

  • Right to non-discrimination for exercising these rights

To exercise your rights, contact us at: contact@reachedapp.com

7. Data Retention

  • Account data: retained for the duration of your subscription + 3 years after termination

  • Call recordings: 90 days

  • Transcriptions: 90 days

  • Call logs: 2 years

  • Billing data: 10 years (French legal requirement)

8. Cookies

Reached uses technical cookies necessary for the proper functioning of the service (authentication, session management). We do not use advertising cookies or third-party tracking cookies.

9. Security

We implement appropriate security measures to protect your data, including: AES-256 encryption for sensitive data, HTTPS connections, secure authentication, and Row Level Security (RLS) access control on our database.

10. Google User Data

Reached offers optional integrations with Gmail and Google Calendar. This section explains which Google user data we access, how we use it, how we store it, and with whom it is shared.


Data we access

When you connect your Google account, Reached requests only the following permissions:

  • Your Google account email address (userinfo.email), used to show which Google account is connected to Reached.

  • Permission to send emails on your behalf (gmail.send), used to send the emails you write in Reached, immediately or at the time you schedule.

  • Permission to view and edit events in your calendars (calendar.events), used to create, update and delete events in your primary Google Calendar that correspond to the tasks you create in Reached.

Reached does not read, list, modify or delete the emails in your Gmail account. Reached does not read your existing Google Calendar events. It only manages the events it creates for your Reached tasks.


How we use this data

We use Google user data only to provide the features described above, at your request. We do not use Google user data for advertising, and we do not sell it.


How we store and protect this data

The access tokens that allow Reached to act on your behalf are stored securely in our database, hosted by our infrastructure provider, and are encrypted in transit. They are used only by our servers to send your emails and update your calendar events. You can disconnect Gmail or Google Calendar at any time from the Reached settings, which revokes Reached's access and deletes the stored tokens. You can also revoke access at any time from your Google account settings (https://myaccount.google.com/permissions).


Sharing, transfer and disclosure

We do not share, transfer, sell or disclose Google user data to any third party, except:

  • our hosting and database provider (Supabase), which stores the data on our behalf solely to operate the service and is bound by confidentiality and security obligations;

  • when required by law, or to protect the rights, safety and security of our users and of Reached.

Google user data is never shared with advertisers, data brokers or information resellers.


Artificial intelligence

Google user data is never processed by, shared with or transferred to any artificial intelligence or machine learning model or service. It is never used to create, train or improve any AI or machine learning model.


Limited Use

The use of raw or derived user data received from Workspace APIs will adhere to the Google User Data Policy (https://developers.google.com/terms/api-services-user-data-policy), including the Limited Use requirements.

11. Changes

We may update this policy at any time. In case of significant changes, we will notify you by email at least 30 days before the new terms take effect.

12. Contact Us

If you have any questions about this Privacy Policy, please contact us at:

Email: julien@reachedapp.com