Privacy Policy

Reachly is a product of SKYBIN AI VENTURES LLP ("Skybin," "we," "us," or "our"), operated at beta.reachly.in. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you use the Reachly website, web app, Chrome extension, and related services (collectively, the "Services").

By using the Services, you agree to this policy. If you do not agree, please do not use Reachly.

1. Information We Collect

1.1 Account and profile data

When you register or manage your account, we may collect:

• Name, email address, and password (stored as a secure hash via Argon2)
• Authentication provider identifiers if you sign in with a third-party provider
• Profile data you provide: platform preferences, mode (Individual or Agency), resume or profile JSON, skills, bio, portfolio links, and platform-specific AI instructions
• Billing and subscription status (card details are handled by our PCI-DSS-compliant payment processor)

1.2 Content and generation data

• Inputs you submit for AI generation: job descriptions, lead context, prompts, tone settings, and selected text from web pages
• AI outputs and generation history associated with your account
• Credit usage, ledger records, and generation audit logs

1.3 Automatically collected data

• IP address, browser type, device information, OS version, and approximate location
• Usage events: features used, session timestamps, extension interactions, tab URLs scraped
• Cookies and similar technologies (see our Cookie Policy)
• Performance and error data: API latency, failed generations, and extension crash reports (when bug reporting is enabled)

1.4 Chrome extension data

• Active tab URL and selected text content (processed locally and sent only when you trigger a generation)
• Scraped page content from supported platforms (LinkedIn, Freelancer, Upwork, Guru, Reddit, job boards)
• Extension version, browser version, and interaction logs

2. How We Use Information

• Provide, operate, maintain, and improve the Services
• Generate AI outreach drafts tailored to your profiles and inputs
• Authenticate users, manage sessions, and enforce plan and credit limits
• Process payments, invoices, and subscription changes
• Send transactional email (verification, security, billing)
• Detect, prevent, and investigate fraud, abuse, and security incidents
• Comply with legal obligations
• Send product updates and marketing communications (you may opt out at any time)
• Analyze usage patterns to improve UX and prioritize feature development

3. AI Processing

To generate outreach content, we send relevant inputs to third-party AI inference providers under data-processing agreements. We do not sell your content. We may use your account content to train and improve our own AI models. We do not share your content with third parties for their model training. Providers may process data temporarily to return results; retention is limited by our contracts and provider settings where available.

Generation inputs and outputs are stored in your account history. You may delete individual generations or your entire account from Settings. Deletion removes content from our primary databases within a reasonable period.

4. Sharing and Disclosure

We do not sell personal information. We may share information with:

• Service providers who help us operate the Services (hosting, AI inference, payments, email delivery, analytics, error monitoring), bound by confidentiality obligations
• Other Reachly users only when you explicitly share content (e.g., agency team members viewing shared profiles)
• Authorities when required by law or to protect rights, safety, and security
• A successor entity in connection with a merger, acquisition, or asset sale, subject to this policy

5. Cookies

We use cookies for authentication, preferences, and analytics. Details are in our Cookie Policy.

6. Data Retention

Account and profile data are retained while your account is active. Generation history is kept for the life of your account unless you delete it. After account deletion, we remove or anonymize personal data within 30 days, except where we must retain records for legal, tax, or security purposes.

7. Data Security

We implement technical and organizational measures to protect your data:

• TLS encryption for all data in transit
• Encryption at rest for databases and file storage
• Password hashing using Argon2 (not reversible)
• Secure, HttpOnly, SameSite cookies for session management
• Role-based access controls for internal personnel
• Regular security reviews and vulnerability scanning

No system is completely secure. We encourage you to use strong, unique passwords and enable two-factor authentication when available.

8. Data Breach Notification

If a breach occurs that affects your personal data, we will notify you and applicable regulators within the timeframes required by law. Notification will include the nature of the breach, the types of data affected, and steps we are taking.

9. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access — request a copy of your personal data
• Correction — update inaccurate or incomplete data
• Deletion — request deletion of your account and associated data
• Export — receive your data in a portable format
• Object — object to certain processing, including for direct marketing
• Restrict — request limitation of processing in certain circumstances

To exercise these rights, contact privacy@reachly.in. You may also delete your account from Settings where available. We will respond within 30 days.

10. Children

The Services are not directed to children under 16. We do not knowingly collect personal information from children under 16. If you believe a child has provided us with personal information, contact us and we will delete it.

11. International Transfers

Reachly is operated from India and may process data in other countries. Where required, we use appropriate safeguards such as standard contractual clauses. By using the Services, you consent to the transfer of your data to India and other countries where our processors operate.

12. Third-Party Services

Reachly integrates with the following third-party services that may collect data subject to their own privacy policies:

• AI inference providers (for generating outreach content)
• Payment processors (for subscription billing)
• Email delivery services (for transactional and marketing email)
• Analytics providers (for product usage insights)
• Error monitoring services (for bug reports, when enabled)

13. Do Not Track

We honor Do Not Track signals where technically feasible. Analytics tracking respects browser DNT settings where our providers support it.

14. Changes

We may update this policy from time to time. The "Last updated" date at the top reflects the latest revision. Material changes will be posted on this page and announced in the product.

15. Contact

SKYBIN AI VENTURES LLP
Product: Reachly (beta.reachly.in)
Privacy: privacy@reachly.in
Security: security@reachly.in