Legal
Privacy Policy
Last updated: March 2026
01
Data controller
ReachForge is the data controller for personal data processed through this service and is operated from Luxembourg. For privacy requests, please use the feedback form in your dashboard.
02
Legal basis for processing (GDPR Article 6)
Account data is processed under Article 6(1)(b) to provide the service contract. Security and fraud-prevention data is processed under Article 6(1)(f) legitimate interests. Financial record data is processed under Article 6(1)(c) legal obligation. Optional actions that depend on permission are processed under Article 6(1)(a) consent.
03
Data we collect
We collect account data (email address only), billing reference data (a processor reference ID only), usage data (generation counts per day), and technical security data (IP address for rate-limiting and abuse prevention only). Message inputs are processed temporarily to produce results and are not retained after processing.
04
Data retention periods
Account data is retained until account deletion. Billing references are retained for 7 years to meet Luxembourg legal requirements. Usage data is retained on a 90-day rolling basis. IP addresses are retained for a maximum of 24 hours for security controls. Message inputs are not retained after processing.
05
Your GDPR rights
You have the right to access, rectification, erasure, restriction of processing, data portability, objection, and the right not to be subject solely to automated decision-making. You also have the right to lodge a complaint with the CNPD (Luxembourg supervisory authority).
06
Third-party services
We work with carefully selected infrastructure partners for authentication, payment processing, and core engine functionality. These partners are bound by data processing agreements and may only process your data as strictly necessary. Message inputs you provide are processed server-side to generate your results and are not retained or used for training purposes.
07
International data transfers
Some data may be processed in the United States by infrastructure partners. Where required, transfers are protected through Standard Contractual Clauses (SCCs) and equivalent safeguards.
08
Cookies
We use essential session cookies only. We do not use advertising cookies and we do not use non-essential tracking cookies.
09
Changes to this policy
If we make material changes, we will notify users through the service. Continued use of ReachForge after the effective date of changes constitutes acceptance of the updated policy.
Questions?
Have questions? Visit our FAQ or use the feedback form in your dashboard.