Privacy Policy

Last Updated: February 14, 2026

ReachLLM, Inc. (“ReachLLM”, “we”, “us”, or “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website at reachllm.com, use our application at app.reachllm.com, or interact with our AI Search & LLM Visibility Platform (collectively, the “Service”).

By accessing or using the Service, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree, please do not use our Service.

1. Information We Collect

1.1 Information You Provide Directly

We collect information that you voluntarily provide to us, including:

  • Account Information: Name, email address, company name, job title, and password when you create an account on app.reachllm.com.
  • Payment Information: Billing address and payment method details. Payment processing is handled securely by our third-party processor, Paddle, and we do not store full payment card numbers.
  • Profile & Brand Data: Brand names, website URLs, competitor information, and preferences you provide within the platform for AI visibility analysis.
  • Communication Data: Messages, support requests, demo bookings (via Cal.com), and feedback you send to us.
  • Content Inputs: Prompts, brand descriptions, URLs, and other data you input into the Service for analysis, article generation, or AI search monitoring.

1.2 Information Collected Automatically

When you use our Service, we automatically collect certain information through analytics and tracking technologies:

  • Usage Data: Pages visited, features used, buttons clicked, time spent on the Service, scroll depth, and interaction patterns. We use PostHog for product analytics.
  • Session Recordings: We use PostHog to record anonymized user sessions for improving user experience. All text input fields are masked in recordings to protect sensitive data.
  • Device Information: IP address, browser type and version, operating system, device identifiers, screen resolution, and referring URL.
  • Cookies & Tracking Technologies: We use cookies, web beacons, and similar technologies to track activity, store preferences, and analyze usage. See Section 6 for details.
  • Log Data: Server logs including access times, error reports, and performance data.

1.3 Information from Third Parties

We may receive information about you from third-party services, including:

  • Payment processors (Paddle) for transaction and subscription status
  • Analytics providers (PostHog, Google Analytics via Google Tag Manager) for aggregated usage insights
  • Referral partners (Endorsely) for tracking referral sources
  • Calendar booking services (Cal.com) for demo scheduling information

2. How We Use Your Information

We use the information we collect for the following purposes:

  • Provide the Service: To deliver AI search visibility monitoring, brand analysis, article generation, and other core platform features.
  • Process Transactions: To manage subscriptions, process payments, and send billing-related communications.
  • Improve the Service: To analyze usage patterns, fix bugs, optimize performance, and develop new features.
  • Communicate with You: To send technical notices, updates, security alerts, support messages, and respond to your inquiries.
  • Product Analytics: To understand how users interact with our platform using session recordings and event tracking (with sensitive data masked).
  • Marketing: To send promotional communications about new features or offers, with your consent where required. You can opt out at any time.
  • Security & Fraud Prevention: To detect, prevent, and address technical issues, abuse, and fraudulent activity.
  • Legal Compliance: To comply with applicable laws, regulations, and legal processes.

3. How We Share Your Information

We do not sell your personal information. We may share your information in the following limited circumstances:

  • Service Providers: With trusted third-party vendors who perform services on our behalf, including:
    • Paddle (payment processing)
    • Firebase / Google Cloud (hosting and infrastructure)
    • PostHog (product analytics and session recordings)
    • Cal.com (demo scheduling)
    • Strapi (content management)
    • Google Tag Manager (tag management)
  • Business Transfers: In connection with a merger, acquisition, reorganization, or sale of assets, your information may be transferred as part of that transaction.
  • Legal Requirements: When required by law, subpoena, court order, or government regulation.
  • Protection of Rights: To protect our rights, property, or safety, or that of our users or the public.
  • With Your Consent: When you explicitly authorize us to share your information with a specific third party.

4. Data Security

We implement appropriate technical and organizational measures to protect your personal information, including:

  • Encryption of data in transit (TLS/SSL) and at rest
  • Secure authentication mechanisms and access controls
  • Regular security assessments and vulnerability monitoring
  • Input masking in session recordings to prevent capture of sensitive data
  • Hosting on secure, SOC 2 compliant infrastructure (Google Cloud / Firebase)

No method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee absolute security.

5. Your Rights and Choices

Depending on your location, you may have certain rights regarding your personal information:

  • Access: Request a copy of the personal information we hold about you.
  • Correction: Request correction of inaccurate or incomplete information.
  • Deletion: Request deletion of your personal information, subject to legal retention requirements.
  • Portability: Request transfer of your data in a structured, machine-readable format.
  • Restriction: Request that we limit processing of your information in certain circumstances.
  • Objection: Object to processing based on legitimate interests or for direct marketing purposes.
  • Opt-Out of Marketing: Unsubscribe from marketing emails via the link in any marketing communication.
  • Cookie Preferences: Manage cookie settings through your browser or our cookie consent tool.
  • Session Recording Opt-Out: You can opt out of session recordings by contacting us.

To exercise any of these rights, please contact us at privacy@reachllm.com. We will respond within 30 days (or sooner where required by law).

6. Cookies and Tracking Technologies

We use the following types of cookies and tracking technologies:

  • Essential Cookies: Required for the Service to function properly, including authentication and session management.
  • Analytics Cookies: Help us understand how visitors interact with our Service. We use PostHog and Google Tag Manager for this purpose.
  • Functional Cookies: Remember your preferences, such as language and display settings.
  • Marketing Cookies: Used to track visitors across websites for the purpose of displaying relevant advertisements.

Third-Party Analytics

We use the following analytics services:

  • PostHog: For product analytics, session recordings (with input masking), and feature usage tracking. PostHog processes data on US-based servers. PostHog Privacy Policy
  • Google Tag Manager / Google Analytics: For website traffic analysis and marketing attribution. Google Privacy Policy

You can manage cookie preferences through your browser settings. Most browsers allow you to refuse or delete cookies. Note that disabling cookies may affect the functionality of our Service.

7. Data Retention

We retain your personal information for as long as necessary to:

  • Provide and maintain the Service while your account is active
  • Comply with legal, accounting, or reporting obligations
  • Resolve disputes and enforce our agreements

When your information is no longer needed, we will securely delete or anonymize it. Session recordings are retained for up to 90 days. Analytics data may be retained in aggregated, anonymized form indefinitely.

You may request deletion of your account and associated data at any time by contacting privacy@reachllm.com.

8. Children’s Privacy

Our Service is designed for business use and is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If you become aware that a child has provided us with personal information, please contact us immediately at privacy@reachllm.com, and we will take steps to delete such information.

9. International Data Transfers

ReachLLM is based in the United States, and your information may be transferred to and processed in the United States or other countries where our service providers operate. These countries may have data protection laws that differ from those in your jurisdiction.

Where required, we use appropriate safeguards for international transfers, including Standard Contractual Clauses (SCCs) approved by the European Commission, and we ensure our service providers maintain adequate data protection standards.

10. California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

  • Right to Know: Request information about the categories and specific pieces of personal information we have collected.
  • Right to Delete: Request deletion of your personal information, subject to certain exceptions.
  • Right to Correct: Request correction of inaccurate personal information.
  • Right to Opt-Out of Sale/Sharing: We do not sell or share personal information for cross-context behavioral advertising.
  • Right to Non-Discrimination: You will not receive discriminatory treatment for exercising your privacy rights.
  • Right to Limit Use of Sensitive Information: Where applicable, you may limit how we use sensitive personal information.

To submit a request, contact us at privacy@reachllm.com. We may need to verify your identity before processing your request.

11. European Privacy Rights (GDPR)

If you are located in the European Economic Area (EEA), the United Kingdom, or Switzerland, you have rights under the General Data Protection Regulation (GDPR), including the right to access, rectify, erase, restrict processing, object to processing, and data portability.

Our legal bases for processing your information include:

  • Contract Performance: Processing necessary to provide the Service you requested.
  • Legitimate Interests: Processing necessary for our legitimate business interests, such as improving the Service and preventing fraud, balanced against your rights.
  • Consent: Where you have given explicit consent, such as for marketing communications or non-essential cookies.
  • Legal Obligation: Processing necessary to comply with applicable laws.

You may withdraw consent at any time without affecting the lawfulness of prior processing. To exercise your GDPR rights, contact us at privacy@reachllm.com.

12. Third-Party Links

Our Service may contain links to third-party websites or services that are not owned or controlled by ReachLLM. We are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any third-party sites you visit.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. We will notify you of material changes by posting the updated policy on this page and updating the “Last Updated” date at the top. For significant changes, we may also notify you via email or through a notice on our Service.

We encourage you to review this Privacy Policy periodically. Your continued use of the Service after any changes constitutes acceptance of the updated policy.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: