Privacy Policy

Last updated: October 17, 2026

The privacy of your data is a big deal to us. This policy lays out what data we collect and why, how it is handled, and your rights. We never sell your data.

When we say “Reachin”, “we” or “us”, we mean the operator of Reachin and its website. This policy covers site visitors and people who sign in to Reachin (“you”). People who appear in search results have their own section below.

What we collect and why

Our guiding principle is to collect only what we need.

Identity and access

You sign in with Google, through our login provider Supabase. We get your email address and the name on your Google account. We use them to run your account and to send you essential messages about it. We never see or store a password.

Your searches

When you search, we store the website you entered and a short summary of it written by AI (what you sell and who buys it, plus the searches we run for you). We also keep a record of each search: when it ran, where it came from (the website, the daily search or a connected AI app), whether it worked and what it cost us to run. We use this to run your daily search, apply plan limits and keep costs under control.

Saved leads

We save the people each search finds to your account: their public LinkedIn profile link, name, headline and photo link, the public post or comment they wrote and its link, date and reaction counts, plus the AI fit score, the reason for it and a suggested message. Free accounts see the first 5 leads of their free search; the rest are saved but stay hidden unless you upgrade. We keep your leads, and the status you set on them, while your account is active.

Billing information

Payments are handled by Dodo Payments, our merchant of record. Your card details go straight to Dodo and never reach our servers. Dodo processes the payment and handles tax and refunds under its own terms and privacy policy. We store only your Dodo customer and subscription IDs, your plan and its status.

Connected AI apps

If you create a personal link for an AI app (MCP), we store only a one-way hash of its key, so we can recognise it without keeping the key itself.

Website interactions

We use PostHog product analytics to understand how the site is used, for example which pages you visit, which buttons you click, your browser and device, and which website sent you to us. If you are signed in, this is tied to your account.

Cookies

We use cookies to keep you signed in and for the analytics above. A cookie is a piece of text stored by your browser. You can block cookies in your browser settings, but signing in will not work without them.

Emails

If you pay for daily leads, we email you when your daily search finds new people. Every one of these emails has an unsubscribe link.

Voluntary correspondence

When you email us with a question or for help, we keep that correspondence, including your email address, so we have a history to refer to if you get in touch again.

People who appear in leads

Reachin finds public LinkedIn posts and comments through third-party data providers. For each person we show what they posted publicly, their public profile link, name, headline and photo, and we use AI to judge whether they may need what our user sells. We do not collect or show email addresses or phone numbers, and we never message anyone. Our users decide whether to contact someone, from their own LinkedIn account. If you appear in Reachin and want to be removed, contact us via the email address in the site footer with your LinkedIn profile link.

When we access or disclose your information

To provide the service you asked for. We use these providers to run Reachin:

  • Vercel: hosting of the website and its servers.
  • Supabase: Google sign-in and our database.
  • Dodo Payments: checkout, billing, tax and refunds.
  • Anthropic's Claude models, reached through OpenRouter: reading your website and judging and writing about each lead.
  • Third-party LinkedIn data providers: finding public posts.
  • PostHog: product analytics.
  • An email delivery provider: the daily new-leads email.

No human at Reachin looks at your account except with your permission, for example to help with a support request, or when an error stops an automated process and needs fixing by hand.

To investigate, prevent, or act on misuse of the service, including breaking our Terms of Service.

Aggregated and de-identified data. We may aggregate or de-identify information and use it for any purpose, including improving the product.

When required under applicable law. We only share data with authorities when the law requires it, and we disclose only the minimum needed.

If Reachin is acquired or merges with another company, we will notify you before any of your personal information is transferred or becomes subject to a different privacy policy.

Your rights with respect to your information

We apply the same rights to everyone, wherever you live:

  • Right to know what personal information we collect and how it is used, as set out in this policy.
  • Right of access to the personal information we hold about you.
  • Right to correction of your personal information.
  • Right to erasure. You can ask us to delete your personal information. Deleting your account removes your searches and saved leads.
  • Right to restrict processing and right to object to how your information is used.
  • Right to portability: a copy of your data that you can take elsewhere.
  • Right to complain to your data protection authority.
  • Right to non-discrimination: we will not treat you differently for using these rights, though some requests may mean we can no longer provide the service.

To use any of these rights, contact us via the email address in the site footer. We may need to verify that you own the account first.

How we secure your data

All data is encrypted with TLS on its way between our servers and your browser. Each account can only read its own data, enforced by the database itself.

Data retention

We keep your information while your account is active and for as long as we need it for the purposes above. If you ask us to delete your account, we delete your account, searches and saved leads. We may keep some records where the law requires it, or to resolve disputes and enforce our agreements; Dodo keeps payment records under its own policy.

Location of data

Our providers may store and process your information in countries other than yours, including the United States. By using Reachin you agree to this transfer.

Changes and questions

We may update this policy to reflect new practices or legal requirements. When we make a significant change, we will update the date at the top of this page and let account holders know.

Questions about this policy, your data or your rights? Please contact us via the email address in the site footer.

This page is adapted from the open-source policies by 37signals (Basecamp), used under CC BY 4.0. We changed it to describe how Reachin works. 37signals is not connected with Reachin and does not endorse it.