Privacy policy

Who is responsible

ReachMadeEasy operates the platform described in this notice. Our privacy contact is admin@reachmadeeasy.com.

For platform accounts, service administration, security and billing, ReachMadeEasy determines how the relevant information is used. When a customer business uses our tools to manage its enquiries or content, that business determines the purpose of that activity and we process the information to provide its configured services. That business is responsible for its own customer notices and permissions. Its privacy notice may also apply.

Information we collect and its sources

The information depends on the services you use. We receive it from you, authorised members of your business, people who contact your business, connected providers and public business sources. It may include:

• Account and business details: name, email address, business identity and contact details, selected country and language, account roles and sign-in information.
• Business-review inputs and results: business websites, public listings and social profiles, the links you select, review findings and supporting sources.
• Content and work: uploaded images, videos and audio; website content, scripts, captions, drafts, templates, saved edits, posting plans and published or exported results.
• Connected-account data: authorised account and phone identifiers, access permissions, encrypted access tokens, available account measurements and connection status.
• Enquiries and communications: WhatsApp sender numbers, available profile names, message content, requirements shared by the sender, replies, handoff details, message identifiers, timestamps and delivery status. We also keep support requests and feedback you submit.
• Service and technical records: subscriptions, credit balances, usage and transaction records, marketing preferences, consent records, audit events, security and error logs.

How we use information

We use information to provide the services you request, administer your account and meet relevant obligations. These purposes include:

• Signing you in, managing business access and remembering relevant preferences.
• Preparing business reviews, managing your content, editing and exporting media, and arranging posts for destinations you choose. Direct publishing depends on a supported, authorised connection.
• Handling enquiries, providing configured replies, recording requirements and passing conversations to the business team.
• Managing service requests, subscriptions, credits, usage, billing, customer support, reliability, fraud prevention and security.
• Sending service-related messages and, where you have opted in, marketing updates. You can withdraw marketing consent separately from essential service communications.

WhatsApp and other Meta connections

Connecting an account allows Meta to share the account information and events covered by the permissions you approve. For WhatsApp, this can include business and phone identifiers, incoming messages, sender details and delivery updates. We use these to operate the connected service for the selected business. Connecting an account does not itself switch on automated replies or publish a social post.

When a business enables the WhatsApp assistant, its configured flow can ask for a language and enquiry details, answer from its prepared content, and hand the conversation to a person. Where enabled, AI services may process relevant message text and business content for functions such as intent classification or translation. Do not send passwords, payment-card details or other sensitive information in these conversations.

Send STOP in a supported ReachMadeEasy WhatsApp flow to stop that automated flow; START can restart it. Stopping the flow does not delete earlier messages, cancel a booking or remove records held by the business or Meta. You can ask the business for human help or contact us about data deletion.

An account administrator can disconnect a connection in ReachMadeEasy and remove app permissions in the provider’s settings. This prevents the affected connection from being used after access is revoked; it does not automatically erase records already received. A separate deletion request can cover those records.

Who receives information

Relevant information is available to authorised members of your business and platform personnel who support the service. Service providers receive the information needed for the work they perform for us. This includes hosting, authentication and storage providers such as Render and Supabase; Meta for connected WhatsApp and social features; and enabled AI, media, voice or rendering providers for the content tasks you request. For example, OpenAI may process text for review, guidance, scripting, translation or enquiry assistance. Stock-media searches may send your search terms to the stock provider, such as Pexels.

We do not sell your personal information. We may disclose information where required by law, to respond to a lawful request, to protect rights and security, or as part of a business transfer with appropriate handling of the affected data.

If you choose to publish, share or download content, it may also be received by your chosen destination or audience. Links to external sites and the providers’ own account services are subject to their own privacy notices.

AI assistance and your content

Some features use AI to help with research, suggestions, scripts, captions, voice or enquiry handling. Relevant prompts, text or media are sent to the enabled provider only as needed for that feature. AI-generated footage is not part of the current customer Video Studio journey.

Provider processing and retention depend on the service and its configured settings. Do not upload information you are not authorised to share. Review suggestions and generated responses before relying on them; they may be inaccurate.

Cookies and browser storage

We use cookies and similar browser storage for sign-in sessions, login protection, language and country preferences, and supported editing or preview functions. These help the site remember your choices and keep the workspace working.

You can manage cookies and site storage in your browser. Blocking essential cookies may prevent sign-in or connected services from working. Clearing local storage may remove work saved only on that device.

How long we keep information

We retain information for as long as needed for the relevant service, account administration and the purposes described here. The period depends on the type of record, your account and service activity, deletion requests, legal or accounting obligations, security needs and unresolved disputes.

Archiving a product, pausing a flow or disconnecting an account does not automatically delete existing content, enquiry history, purchases or audit records. When information is no longer needed, we delete it or remove identifying details. Backups and provider-held copies may remain until their applicable retention cycles complete. We explain any continuing retention that affects your deletion request.

Security and international processing

We use access controls, business-level separation and encrypted provider-token storage to help protect information. No online service can guarantee absolute security. Keep account credentials private and tell us if you suspect unauthorised access.

Our service providers may process information outside your country. The location depends on the provider and feature. We consider applicable data-protection requirements and safeguards when arranging these services. Contact us for information about a particular service or transfer.

Your choices and requests

You can ask to access or correct your personal information, withdraw relevant consent, or request deletion, subject to applicable law and any justified retention needs. You can also raise a concern with us or the relevant data-protection authority. We may need to verify your identity and authority before acting.

Marketing emails include an unsubscribe option, and account holders can manage their communication preferences. Withdrawing marketing consent does not stop essential service or security messages. Declining information needed for an account or feature may mean we cannot provide that feature.

If your information was provided to a customer business, you can contact that business directly. We may coordinate with it to locate the records and handle your request. The data-deletion page explains what to send us.

Changes to this notice

We may update this notice as services or data-handling practices change. The revision date appears above. Where a change requires additional notice or consent, we will provide that separately; this notice does not replace a permission you need to give for a connected service.