Privacy Policy

Last updated: July 4, 2026

What we collect

Account data: your email, name, and a hash of your password (never the password itself). Workspace data: the content, settings, and domains you create. Usage data: server logs (IP address, requests, timestamps) kept for security and debugging, and per-workspace counters such as monthly AI usage.

What we use it for

To run the product: signing you in (a session cookie is the only cookie the app needs), operating the features you use, emailing you the transactional messages the product requires (password resets, teammate invites, billing notices), and keeping the service secure. We do not sell your data and we do not send marketing email you did not ask for.

Who processes it for us

A small set of processors, each only for its job: our hosting provider (application and database infrastructure), Dodo Payments as merchant of record for checkout and invoicing (we never see your card number), an email delivery provider for transactional email, and AI model providers that receive text only when you use the AI features.

Where your rights come in

You can access, correct, export, or delete your data. Most of it is directly editable in the app; for the rest, email us and we will handle it within 30 days. Deleting your workspace deletes its content from the live database, with backups rotating out on a fixed schedule afterwards.

If you are in the EU/EEA or UK, we process your data to perform our contract with you (Art. 6(1)(b) GDPR) or for our legitimate interest in securing the service (Art. 6(1)(f)). You also have the right to complain to your local supervisory authority.

Content you publish

Pages you publish with Reachroller are your sites: you are their data controller and we process visitor requests (standard server logs) on your behalf to serve the pages.

Retention and security

We keep your data for as long as your workspace exists. Passwords are hashed with bcrypt, sessions are signed and expire after seven days, reset and invite links are single-use and short-lived, and all traffic runs over HTTPS.

Changes and contact

If this policy changes materially we will tell you before it takes effect. Privacy questions and requests: hello@reachroller.com.