Privacy Policy

Last updated: February 2026

At Reachh, we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and services.

1. Information We Collect

We collect information that you provide directly to us:

  • Account Information: Name, email address, phone number, and password when you register
  • Profile Information: Bio, profile picture, social media handles, and content categories
  • Social Media Data: Follower counts, engagement metrics, and recent posts from connected platforms
  • Campaign Data: Details about campaigns you create or participate in
  • Communications: Messages sent through our platform

2. Instagram and Meta Platform Data

When you connect your Instagram account through our app, we access and collect the following data via the Instagram Graph API and Meta Platform:

  • Basic Profile Information: Your Instagram username, profile picture, account type, and media count
  • Insights and Analytics: Impressions, reach, profile views, follower demographics, and engagement metrics for your Instagram Business or Creator account
  • Content Data: Your recent posts, media URLs, captions, like counts, and comment counts
  • Comments: Comments on your Instagram posts for the purpose of engagement management and analytics
  • Messages: Instagram Direct Messages sent to and from your account, solely for the purpose of facilitating brand-creator communication through our platform

We only access Instagram data that you explicitly authorize through the Instagram login flow. You can revoke this access at any time from your Reachh profile settings or from your Instagram account settings under "Apps and Websites."

3. Google Account Data and Gmail Integration

Reachh offers an optional "Connect Gmail" feature that lets you send outreach emails to creators directly from your own Gmail account, instead of from a shared platform sender. When you connect Gmail, we use Google OAuth 2.0 to request the following scopes:

  • email — to identify which Gmail account you have connected so we can attribute sent emails to it.
  • profile — to display your Google name in the connected-accounts list inside our app.
  • https://www.googleapis.com/auth/gmail.send — to send outreach emails on your behalf, only as part of campaign sequences you explicitly create and launch in Reachh. We do not read, modify, or delete any messages in your Gmail account.

What we store: We store the OAuth refresh token (encrypted at rest), the email address you connected, and timestamps of when emails were last sent. We do not store the body, recipient, subject, or any metadata of emails sent through your Gmail beyond what's required to display campaign history inside our app to you.

Limited Use disclosure: Reachh's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

  • We do not use Google user data for advertising or to build user profiles for advertising.
  • We do not use Google user data to train, improve, or evaluate generalized AI/ML models. (Per-message AI personalization is performed only on data the user provides directly into Reachh — e.g. their campaign template — and not on data fetched from Google APIs.)
  • We do not sell, transfer, or share Google user data with third parties except (a) as necessary to provide the requested service (Cloudflare for transit, Google itself for delivery), (b) when required by law, or (c) for security/abuse investigations.
  • Humans at Reachh do not read your Google user data unless you explicitly grant us permission for support, the data is required for a legal proceeding, or it is anonymized aggregate metrics used internally for capacity planning.

Disconnect / revoke at any time:

  • In Reachh: Profile > Connect Gmail > Disconnect. This removes your refresh token from our database immediately.
  • From Google: Visit myaccount.google.com/permissions and remove "Reachh." This invalidates any access we have to your Gmail.
  • Account deletion: Deleting your Reachh account also removes any Gmail tokens we hold for you within 30 days.

4. How We Use Your Information

We use the information we collect to:

  • Provide, maintain, and improve our services
  • Match brands with relevant influencers based on audience insights and engagement data
  • Display analytics and performance metrics on your Reachh profile
  • Facilitate communication between brands and creators
  • Process transactions and send related information
  • Send you technical notices, updates, and support messages
  • Respond to your comments and questions
  • Detect and prevent fraud and abuse

5. Information Sharing

We may share your information in the following situations:

  • With Brands/Creators: Your public profile, engagement metrics, and contact information when you apply to campaigns or receive applications
  • Service Providers: With third parties who perform services on our behalf (hosting, analytics, communication tools)
  • Legal Requirements: When required by law or to protect our rights
  • Business Transfers: In connection with any merger or acquisition

We do not sell your personal information or Instagram data to third parties. Instagram data is used solely within the Reachh platform for the purposes described in this policy.

6. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. This includes encryption of access tokens, secure HTTPS connections, and regular security audits. However, no method of transmission over the Internet is 100% secure.

7. Your Rights and Data Deletion

You have the right to:

  • Access and receive a copy of your personal data
  • Rectify or update your personal data
  • Delete your account and personal data
  • Object to or restrict processing of your data
  • Withdraw consent at any time
  • Disconnect your Instagram account and revoke data access

To request deletion of your data:

  • In-App: Go to Profile > Settings > Delete Account. This will permanently delete your account and all associated data, including any Instagram data we have stored.
  • By Email: Send a request to privacy@reachh.me with the subject line "Data Deletion Request" and include the email address associated with your account. We will process your request within 30 days.
  • Instagram Data Only: Go to Profile > Settings > Connected Accounts > Disconnect Instagram. This will remove all stored Instagram data and revoke our access tokens.

8. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you services. Instagram data is refreshed periodically and older data is automatically removed. Upon account deletion or Instagram disconnection, we delete the associated data within 30 days. We may retain certain anonymized or aggregated information as required by law or for legitimate business purposes.

9. Children's Privacy

Our services are not intended for individuals under 18 years of age. We do not knowingly collect personal information from children.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

11. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your data rights, please contact us at:

  • Email: privacy@reachh.me
  • Data Deletion Requests: privacy@reachh.me
  • Address: Mumbai, Maharashtra, India