Privacy Policy

ReachScout ("we", "us", "our") is a software service that helps businesses find leads and run cold email campaigns from their own Gmail accounts. For the purposes of UK GDPR, we are the data controller for the personal data described in this policy.

You can contact us about anything in this policy at roberthuntermedia@gmail.com.

Account data: your name, email address and password when you create an account.

Gmail access: when you connect your Gmail account, we receive OAuth permission to send emails on your behalf, read replies and bounces to campaigns you send, and read your profile (name and email address). We never read or store the general contents of your mailbox beyond what is needed to run and report on your campaigns.

Lead and campaign data: the business contacts you add or that our AI lead finder suggests for you (names, emails, websites, phone numbers, niches and notes), plus the content and performance of your campaigns (sends, opens, replies, bounces and unsubscribes).

Billing data: your subscription status and payment records. Payments are processed by Stripe — we never see or store your full card details.

Usage data: technical logs such as IP address, browser type and pages visited, used to keep the service secure and working.

Email tracking: emails you send through ReachScout may include a tiny tracking image that records opens, and links may record clicks, so we can report engagement for your campaigns.

To provide the service: sending your campaigns, tracking their performance, finding and managing leads, and sorting replies (contract performance).

To process subscriptions and enforce plan limits (contract performance).

To secure your account, prevent abuse and fix problems (legitimate interests).

To send service emails such as reply alerts, billing notices and deliverability warnings (contract performance / legitimate interests).

We do not sell your data, and we do not use your leads, emails or mailbox contents to advertise to you or to train AI models.

Your Gmail connection is protected with your own OAuth tokens, which are stored encrypted. You can disconnect your Gmail at any time from Settings, which revokes our access immediately and removes the tokens from our systems.

You can also revoke ReachScout's access directly in your Google Account at myaccount.google.com/permissions.

ReachScout's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

We only share data with the providers needed to run the service:

Google — to connect your Gmail, send your emails and read campaign replies and bounces.

Stripe — to process subscription payments securely.

Our hosting and infrastructure provider — to run the app, its database and its AI features.

AI providers — to power features like the lead finder, personalisation and reply sorting. Lead data is only sent to AI providers when you use those features.

Each provider is only given the data necessary for its function. We never sell personal data.

When you use ReachScout to contact leads, you are the data controller for those contacts. You are responsible for making sure your campaigns comply with applicable law (including UK GDPR and PECR), that your emails identify you and include a working unsubscribe link, and that you only contact people who are happy to hear from you under the rules that apply to your business.

ReachScout automatically processes unsubscribe requests and maintains a do-not-contact list for addresses that unsubscribe or bounce, and we never send to those addresses on your behalf again.

Account, lead, campaign and billing records are kept for as long as your account is active. If you cancel, we keep your data for 30 days so you can reactivate, then delete it, except where we must keep financial records for tax purposes.

Request deletion at any time by emailing roberthuntermedia@gmail.com and we will remove your account and associated data.

Under UK GDPR you have the right to access, correct, export or delete your personal data, object to or restrict certain processing, and complain to the Information Commissioner's Office (ico.org.uk) if you're unhappy with how we handle your data.

To exercise any right, email roberthuntermedia@gmail.com. We respond within 30 days.

Your data is stored in an encrypted cloud database with row-level security so each customer can only reach their own data. Gmail OAuth tokens are encrypted at rest. Access to production systems is restricted.

If we change this policy we'll update the date below and, for material changes, notify you by email or in-app before they take effect.