Privacy policy
Covers the waitlist and the app. Last updated 5 October 2026. På svenska
Who is responsible
Reachly is run by Max Cid in Stockholm, Sweden, who is the data controller. Questions about your data go to m.cidledezma@gmail.com.
What we store
- Waitlist: your email address, what you are looking for (a job, freelance work or both), the role you may have entered, the language you used and when you gave consent.
- Invites: during the beta we store the email addresses that have been invited, so only they can create an account.
- Your account: name and email address from Google, or the email address you sign in with.
- Your profile: what you tell Reachly in the interview and in settings, such as experience, projects, skills, languages, links, what you are looking for and how you usually write.
- Your leads: ads you add, the text of the ad, how to apply, your drafts, notes, status, questions from application forms and the answers to them. If an ad names a contact person, their name and email are stored as they appear in the ad.
- Events: a log of what you do in the app, such as status changes and edits to drafts and answers, so you can see the history and suggestions can improve.
- Usage: how many AI requests you made each day, to keep a daily limit, and for each request its type, how many tokens it used and what it cost. None of the request content is stored there.
- Activity report (if you turn it on): that you chose the feature and which months you marked as reported. Nothing about why you chose it or your situation otherwise.
What we don't do
- Reachly does not read your email. When you send from Gmail, Reachly only opens a ready-made draft in Gmail, and you send it yourself.
- Reachly never submits applications, never fills in forms and never creates accounts for you.
- We don't sell your data, show ads or use analytics or tracking tools.
Why we process your data
- To provide the service (contract): account, profile, leads, drafts and answers.
- To invite you to the beta (consent): the waitlist data. You can withdraw consent at any time.
- For security and operations (legitimate interest): logs, the daily AI limit and protection against abuse.
- Contact people named in ads (legitimate interest): the details come from published ads and are only used so you can contact that person about the role.
Who helps us
These providers process data on our behalf and may only use it to make Reachly work:
- Supabase: database and sign-in. Data is stored on servers in Stockholm.
- Vercel (USA): hosting. The app's server functions run in Stockholm, and pages are delivered from servers close to you.
- Anthropic (USA): the AI service that scores ads and writes drafts and answers. It receives your profile and the text of the ad in question. Anthropic does not use the data to train its models.
- Google: sign-in, if you choose to sign in with Google.
Where data is processed in the USA, it is protected by the EU Standard Contractual Clauses or the EU–U.S. Data Privacy Framework.
To work out how to apply, Reachly fetches public pages, such as the ad, the company's careers page and the Swedish Public Employment Service's open job-ad API. No data about you is sent with those requests.
How long
- Account, profile and leads: for as long as you have an account. When you delete your account in Settings, everything is deleted immediately. Data may remain in backups for a short time before they are overwritten.
- Waitlist: until the beta has started and you have received your invitation, or until you ask us to delete it.
Cookies and browser storage
Reachly only uses what is needed for the service to work, which is why there is no cookie banner:
- Sign-in cookies from Supabase (names starting with
sb-) keep you signed in. They are removed when you sign out. - Local storage (
reachly-ui) remembers the filter and view you chose in the app. It stays in your browser and is not sent to us.
We use no cookies for statistics or advertising. If that changes, we will ask you first.
Your rights
You have the right to know what data we hold about you, to have it corrected or deleted, to receive it in a machine-readable format and to object to processing based on legitimate interest. In Settings you can download all your data yourself (JSON, plus your leads as CSV) and delete your account. Deleting the account also removes your invite and your place on the waitlist. For anything else, email m.cidledezma@gmail.com and we will reply within one month.
If you are unhappy with how we handle your data, you can complain to the Swedish Authority for Privacy Protection (imy.se).
Age
Reachly is for people aged 18 or over.
Changes
If this policy changes in a way that affects you, we will tell you in the app or by email before the change takes effect. See also our terms.