Privacy Policy

This Privacy Policy explains how Reachly ("we," "us") collects, uses, and shares information when you use our Service.

1. Information we collect

• Account data: name, email, and authentication identifiers from Clerk when you sign in (e.g. with Google).
• Profile data: school, grade, interests, draft context, and similar fields you enter in Settings or onboarding.
• Resume: PDF files you upload, stored in private cloud storage.
• Email drafts and draft queue history: subjects, bodies, professor contacts, and send status we log when you prepare drafts or send from your draft queue.
• Usage data: basic logs needed to operate and secure the Service (e.g. errors, request metadata).

2. How we use information

• Provide, maintain, and improve Reachly.
• Authenticate you and connect to Gmail to send academic inquiry drafts you personally approve.
• Personalize academic inquiry drafts using your profile, resume, and templates via AI providers.
• Prevent abuse, enforce our Terms, and comply with law.

3. How we share information

We do not sell your personal information. We share data only with:

• Service providers that help us run the product (e.g. hosting, database, authentication, email APIs, AI inference), under contracts that limit their use.
• Legal requirements when required by law or to protect rights and safety.

Professor contact records in our database are not exposed to other users; we use them only server-side to help you find research-fit faculty.

4. Google user data

Reachly uses Google OAuth so you can sign in and send individual academic inquiry drafts you review from your draft queue through your Gmail account. Reachly never automatically sends email. This section describes how we access, use, store, and share Google user data, in line with the Google API Services User Data Policy (including Limited Use requirements).

Scopes we request

• Sign-in: openid, email, and profile — to identify your account (name and email address).
• Gmail send: https://www.googleapis.com/auth/gmail.send — to send a message from your Gmail account when you explicitly confirm Send after reviewing a single draft in your Reachly draft queue.

What we do with Google data

• Store prepared drafts (subject, body, recipient) in your Reachly draft queue so you can review before sending.
• Send email through the Gmail API only when you confirm Send in Reachly for one message at a time, using content you have reviewed.
• Store draft subjects, bodies, and send status in our database as part of your history so you can see what was prepared and sent.
• Use your name and email from Google sign-in to operate your Reachly account.

What we do not do

• We do not read, scan, or download your existing Gmail messages or mailbox contents.
• We do not send email without you explicitly choosing Send in Reachly.
• We do not sell Google user data, use it for advertising, or allow humans to read it except as needed for security, abuse investigation, or legal compliance.
• We do not use Google user data to train generalized AI models. Profile and resume text you provide may be sent to our AI provider only to personalize drafts you ask us to generate.

How Google data is handled

Sign-in and OAuth tokens are managed through Clerk. When you send from your draft queue, our servers use your authorized Gmail access only to call the Gmail API send endpoint for a single message you approved. Access is limited to what is needed for the features shown in the app. Reachly never automatically sends email.

Your controls

• Revoke Reachly's Google access anytime in Google Account permissions.
• Request deletion of your Reachly data by emailing rageout000@gmail.com.

5. Retention

We retain your data while your account is active and as needed for legal, security, or operational purposes. You may request deletion by contacting us; some logs may persist in backups for a limited time.

6. Security

We use industry-standard measures such as encrypted connections and restricted database access. No method of transmission or storage is 100% secure.

7. Your choices

• Update profile and draft settings in the app.
• Delete draft-queue records where the app provides that option.
• Disconnect Google or delete your Clerk account to end access.

8. Children

Reachly is aimed at high school students but is not directed at children under 13. We do not knowingly collect data from children under 13. Contact us to request deletion if you believe we have.

9. International users

If you access Reachly from outside the United States, your information may be processed in the U.S. or other countries where our providers operate.

10. Changes

We may update this Policy. Material changes may require renewed acceptance through the app.

11. Contact

Privacy questions: contact the operator of Reachly at rageout000@gmail.com.