Privacy Policy

This policy explains what personal information Reech ("we", "us") collects, why, who we share it with, and the choices you have. Reech is a business-to-business platform: almost all data we handle is business data, but where it identifies a person this policy applies. We comply with South Africa's Protection of Personal Information Act (POPIA) and, for people in the EU/UK, the GDPR.

1. What we collect

Information you give us

• Account details: name, work email address, password (stored hashed), company name and website.
• Business content you add: product data, brand assets, campaign briefs, proposals, messages to Draper.

Information from connected platforms

When you connect an account such as Google Ads, Google Merchant Center, Meta or TikTok, we receive, with your authorisation: access tokens (stored encrypted), account identifiers, campaign structures and settings, advertising performance data (impressions, clicks, cost, conversions), product catalogue data, and creative assets. We use this only to provide the service described below, and our use of data received from each platform complies with that platform's developer policies, including the Google API Services User Data Policy, Meta Platform Terms and the TikTok Developer Terms.

Information collected automatically

• Usage and device data: log records, IP address, browser type, pages viewed.
• Cookies: we use cookies needed to sign you in and keep the product working. The public pages of reech.to use Google Analytics to measure visits (aggregate pages, referrers, rough location); it is not loaded inside the product once you sign in. We do not run third-party advertising cookies on reech.to.

2. How we use it

• To run the service: scores and insights, campaign planning and deployment, performance reporting, settlement against verified orders.
• To power Draper: your business data and campaign performance are processed by AI providers acting under contract for us, only to answer your requests and generate the plans and creatives you ask for. They are not used to train third-party models.
• To keep Reech secure, debug problems, and meet legal obligations.
• To contact you about your account and, if you opt in, about the product. You can unsubscribe from marketing at any time.

3. Who we share it with

• The advertising and commerce platforms you connect, when you direct a campaign action (for example creating a campaign in your Google Ads account).
• The other party to your campaign: a brand and a retailer in an agreed campaign see the shared campaign data, budgets and settlement statements.
• Service providers who run infrastructure for us (hosting, email, AI processing, payments), bound by contracts limiting their use of the data.
• Authorities where the law requires it. We do not sell personal information.

4. Where it lives and how long

Data is hosted on servers in the EU. Where data moves across borders we use lawful transfer mechanisms. We keep data for as long as your account is active plus what financial and legal record-keeping requires; platform access tokens are deleted when you disconnect the platform or close your account.

5. Deleting your data

You can disconnect any connected platform in Settings, which ends our access and deletes its stored tokens. To delete your account and its personal information, email [email protected] from your account address with the subject "Delete my data". We confirm within a few days and complete deletion within 30 days, except records we must keep by law. This is also the data deletion route for anything Reech received via Meta or TikTok.

6. Your rights

You may ask for a copy of your personal information, ask us to correct it, object to some processing, or complain to your data protection authority (in South Africa, the Information Regulator). Write to [email protected] and we will respond.

7. Security and children

Credentials for connected platforms are encrypted at rest, access is role-restricted, and connections use TLS. Reech is a business tool and not directed at children under 18.

8. Changes and contact

If this policy changes materially we will say so in the product or by email. Privacy questions: [email protected].