Privacy Policy

Effective Date: February 17, 2026
Last Updated: August 6, 2026

1. Introduction

Reachd Inc., a Delaware corporation (“Reachd.ai,” “we,” “us,” or “our”), operates the Reachd.ai platform and related services (the “Service”). This Privacy Policy explains how we collect, use, disclose, and protect information about you and your business when you use the Service.

By using the Service, you agree to the practices described in this Privacy Policy. If you do not agree, do not use the Service.

This Policy applies to:

• Users who register for and use the Service (“Subscribers”)
• Visitors to our website at reachd.ai

This Policy does not apply to third-party platforms, services, or websites that we may link to or analyze as part of the Service. Those third parties operate under their own privacy practices.

2. Information We Collect

2.1 Information You Provide Directly

Account Information: When you create an account, we collect your name, email address, and password.

Business Information: To use the Service, you provide information about your business, including your business name, website URL, business category, geographic location, and other details relevant to AI visibility analysis.

Payment Information: If you subscribe to a paid plan, payment processing is handled by our third-party payment processor (Stripe). We do not store full credit card numbers or sensitive payment details on our systems. We receive limited billing information such as billing name, address, and the last four digits of your payment method.

Communications: If you contact us for support or other inquiries, we collect the content of those communications.

Survey and Feedback Data: If you participate in surveys, provide feedback, or respond to research requests, we collect the information you submit.

2.2 Information Collected Automatically

Usage Data: We automatically collect information about how you interact with the Service, including pages viewed, features used, actions taken, timestamps, and session duration.

Log Data: Our servers automatically record certain information when you access the Service, including your IP address, browser type and version, operating system, referring URLs, and device identifiers.

Cookies and Similar Technologies: We use cookies and similar tracking technologies to operate the Service, remember your preferences, and collect usage analytics. See Section 8 for more details.

2.3 Information Derived from Third-Party Sources

As part of delivering the Service, we query publicly available AI platforms (such as ChatGPT, Google AI, Perplexity, Grok, and Claude) and public data sources via their official APIs and interfaces. This process may surface publicly available information about your business and competing businesses.

We do not purchase, acquire, or receive personal data from data brokers or data aggregators.

2.4 Information About Competing Businesses

The Service provides competitive analysis that includes publicly available information about businesses other than yours (your competitors). We analyze this information solely to deliver analysis to our Subscribers and do not maintain profiles on non-subscribing businesses for any other purpose.

2.5 Information Collected Through Connectors and Integrations

The Service may offer an optional connector (based on the Model Context Protocol) that lets you connect your account to third-party AI assistants and clients that support such connectors (for example, Claude or ChatGPT). If you choose to enable a connector, we collect and log connector authentication events, the identity of the authorizing account, the connected client where that client discloses it, timestamps, IP address, and the fact that a request was made. This is the same category of Log Data described in Section 2.2, collected for security, abuse prevention, and rate limiting. Enabling a connector is entirely optional; the Service is fully usable without one.

3. How We Use Your Information

We use the information we collect for the following purposes:

To provide the Service: Process your queries, generate analysis and reports, deliver recommendations, and operate all Service features.

To communicate with you: Send transactional emails (account confirmation, billing receipts, password resets), weekly recommendation digests, and service-related notifications. These communications are necessary to operate the Service. You may adjust email frequency preferences in your account settings, but you cannot opt out of essential transactional communications while your account is active.

To improve the Service: Analyze usage patterns, identify bugs, develop new features, and improve existing functionality.

To generate Aggregated Data: Create anonymized, aggregated datasets derived from Service usage to identify patterns in AI visibility, benchmark performance across industries, and improve our recommendations. This Aggregated Data does not identify individual users or businesses and is used in accordance with Section 5 of our Terms of Service.

To enforce our Terms: Detect, investigate, and prevent fraud, abuse, unauthorized access, and violations of our Terms of Service.

For legal compliance: Comply with applicable laws, regulations, legal processes, and governmental requests.

For billing and account management: Process payments, manage subscriptions, and handle billing disputes.

4. Legal Bases for Processing (Applicable to EEA, UK, and Similar Jurisdictions)

If data protection law in your jurisdiction requires a legal basis for processing personal data, we rely on the following:

• Performance of a contract: Processing necessary to provide the Service you have subscribed to
• Legitimate interests: Processing for purposes such as improving the Service, preventing fraud, and generating Aggregated Data, where our interests are not overridden by your rights
• Legal obligation: Processing required to comply with applicable law
• Consent: Where we rely on consent (such as optional marketing communications), you may withdraw consent at any time without affecting the lawfulness of prior processing

5. How We Share Your Information

We do not sell your personal information to third parties.

We may share your information in the following circumstances:

5.1 Service Providers (Sub-processors)

We work with third-party vendors who process data on our behalf to operate the Service. These include:

All sub-processors are contractually required to process data only as directed by us and to maintain appropriate security measures.

5.2 Legal Requirements

We may disclose information if we believe in good faith that disclosure is necessary to: (a) comply with applicable law or legal process; (b) enforce our Terms of Service; (c) protect the rights, property, or safety of Reachd.ai, our users, or the public; or (d) respond to valid legal requests from government authorities.

5.3 Business Transfers

If Reachd.ai undergoes a merger, acquisition, sale of assets, or similar transaction, your information may be transferred as part of that transaction. We will provide notice before your information becomes subject to a materially different privacy policy.

5.4 With Your Consent

We may share your information for other purposes with your explicit consent.

5.5 Aggregated or Anonymized Data

We may share Aggregated Data that does not identify individual users or businesses for any lawful purpose, including research, benchmarking, and marketing.

5.6 Third-Party AI Assistants and Connectors

If you enable a connector (see Section 2.5) and connect a third-party AI assistant or client to your account, you direct us to make data available to that client at your request. The connector is read-only and scoped to your own account. It can only return data already associated with your account and the businesses in your workspace, it cannot create, modify, or delete data, and it cannot access any other Subscriber’s data. Access is granted through a secure authorization process and can be revoked by you at any time from your account settings or through the connected client, which immediately prevents further access.

The third-party AI assistant or client you connect, and the company that operates it (for example, Anthropic for Claude or OpenAI for ChatGPT), is an independent third party and a separate, independent data controller. Once data is returned to that client, it leaves our control and is received, processed, stored, and used by that third party under its own privacy policy and terms, which we do not control and for which we are not responsible. You decide which clients to connect, you are responsible for the security of those clients and the accounts and devices used with them, and you should review the privacy policy and terms of any AI assistant before connecting it. Do not connect a client if you do not agree to how it handles data.

We do not sell connector activity, and we do not share data returned through the connector except as described in this Policy.

6. Data Retention

We retain your information for as long as your account is active and as necessary to provide the Service, resolve disputes, enforce our agreements, and comply with legal obligations.

Following account termination:

• Account information is retained for up to 90 days to enable account recovery, then deleted or anonymized
• Billing records are retained for up to 7 years as required by applicable tax and financial laws
• Usage logs and analytics data are retained for up to 24 months in identifiable form, then anonymized
• Aggregated Data derived from your usage is retained indefinitely in anonymized form

You may request deletion of your data at any time as described in Section 7.

7. Your Rights and Choices

7.1 Access and Correction

You may access and update your account information at any time through your account settings. If you need assistance, contact us at hello@reachd.ai.

7.2 Deletion

You may request deletion of your personal information by contacting us at hello@reachd.ai. We will honor deletion requests subject to legal retention obligations and the need to retain certain information to resolve disputes or enforce our agreements. Note that deletion of your account will terminate your access to the Service.

7.3 Portability

You may request an export of your account data and the Outputs generated for your business by contacting hello@reachd.ai.

7.4 Opt-Out of Non-Essential Communications

You may opt out of non-essential marketing communications at any time by clicking “unsubscribe” in any marketing email or contacting us at hello@reachd.ai. You cannot opt out of transactional and service-related communications while your account is active.

7.5 California Residents — CCPA Rights

If you are a California resident, you have the following rights under the California Consumer Privacy Act (“CCPA”):

• Right to Know: Request disclosure of the categories and specific pieces of personal information we have collected about you, the categories of sources, our business purpose for collecting, and the categories of third parties with whom we share it
• Right to Delete: Request deletion of personal information we have collected about you, subject to certain exceptions
• Right to Correct: Request correction of inaccurate personal information
• Right to Opt-Out of Sale or Sharing: We do not sell or share personal information as defined under CCPA. You do not need to opt out.
• Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights

To exercise your CCPA rights, submit a request to hello@reachd.ai or use the contact information in Section 11. We will verify your identity before responding. You may designate an authorized agent to submit requests on your behalf.

We respond to verifiable consumer requests within 45 days. Complex requests may require an additional 45-day extension, which we will communicate to you.

CCPA Categories of Personal Information Collected:

We do not collect sensitive personal information as defined under CCPA (such as Social Security numbers, financial account credentials, health data, or biometric data).

7.6 Nevada Residents

Nevada residents may opt out of the sale of personal information. We do not sell personal information. For questions, contact hello@reachd.ai.

7.7 EEA and UK Residents

If you are located in the European Economic Area or United Kingdom, you may have additional rights under GDPR or UK GDPR, including the right to object to processing and the right to lodge a complaint with your supervisory authority. Contact us at hello@reachd.ai to exercise these rights.

8. Cookies and Tracking Technologies

8.1 What We Use

We use the following types of cookies and similar technologies:

Strictly Necessary Cookies: Required to operate the Service, including authentication and session management. These cannot be disabled.

Functional Cookies: Remember your preferences and settings to improve your experience.

Analytics Cookies: Help us understand how the Service is used so we can improve it. These collect aggregate, pseudonymous data.

We do not use advertising or cross-site tracking cookies.

8.2 Your Cookie Choices

On our public website, non-essential analytics cookies do not load until you accept them through our cookie consent banner. You may accept or reject non-essential cookies when you first visit, and you can change your choice at any time using the “Cookie Settings” link in the site footer. Strictly necessary cookies are required to operate the Service and cannot be disabled. You can also control cookies through your browser settings, though disabling certain cookies may affect Service functionality.

We honor the Global Privacy Control (GPC) signal. If your browser sends a GPC signal, we treat it as a request to opt out of non-essential cookies and do not load analytics cookies.

9. Data Security

We implement reasonable technical and organizational security measures designed to protect your information from unauthorized access, disclosure, alteration, or destruction. These measures include encryption of data in transit and at rest, access controls, and regular security reviews.

No method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security. In the event of a data breach affecting your rights, we will notify you as required by applicable law.

10. Children’s Privacy

The Service is intended for use by businesses and is not directed at individuals under the age of 18. We do not knowingly collect personal information from anyone under 18. If you believe we have inadvertently collected such information, contact us at hello@reachd.ai and we will promptly delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email and/or prominent notice on the Service at least 14 days before taking effect. The “Last Updated” date at the top of this Policy reflects the most recent revision. Your continued use of the Service after changes take effect constitutes acceptance of the updated Policy.

12. Contact Us

For questions, requests, or concerns about this Privacy Policy or our data practices, contact us at:

Reachd Inc.
Email: hello@reachd.ai
Website: reachd.ai

We aim to respond to all inquiries within 5 business days.

This Privacy Policy was last updated on August 6, 2026.