Privacy Policy

Last updated: 1 January 2026 · Effective worldwide

This Privacy Policy explains how ReachlyOS collects, uses, shares and protects personal data when you visit our website or use our content-repurposing service (the "Service"). It is designed to meet the EU/EEA General Data Protection Regulation (GDPR), the UK GDPR, the California Consumer Privacy Act as amended by the CPRA (CCPA/CPRA), and applicable privacy laws worldwide.

1. Who we are (Data Controller)

The data controller responsible for your personal data is:

ReachlyOS
Rua Gen. Humberto Delgado, 6, 2660-167 Loures, Portugal
Tax number (NIF): 320929205
Email: info@reachlyos.com · Phone: +351 253 284 982

For any privacy request, contact us at info@reachlyos.com.

2. Personal data we collect

Category	Examples	Source
Account data	Name, email address, password, plan	You
Billing data	Billing name, country, VAT/tax ID, last 4 digits and card type, transaction history	You / Stripe
Content data	Links, videos, audio, transcripts and text you submit for repurposing, and the outputs generated	You
Usage data	Pages viewed, features used, actions, approximate location	Automatic
Device & technical data	IP address, browser, device type, operating system, identifiers	Automatic
Communications	Support messages, emails, feedback	You

We do not intentionally collect special categories of data and ask that you do not submit them. We do not store full payment card numbers; card data is handled directly by our payment processor.

3. How and why we use your data (purposes & legal bases)

Purpose	Legal basis (GDPR)
Provide, operate and maintain the Service	Performance of a contract
Process payments and manage subscriptions	Performance of a contract
Process your content through AI to generate outputs	Performance of a contract
Improve, secure and develop the Service; prevent fraud and abuse	Legitimate interests
Send service and transactional emails	Performance of a contract / legitimate interests
Send marketing communications	Consent (you may withdraw at any time)
Analytics and non-essential cookies	Consent
Comply with legal obligations (e.g. tax, accounting)	Legal obligation

4. AI processing of your content

To deliver the Service, content you submit is processed by automated systems and trusted AI providers to analyse, split and reformat it into platform-ready posts. We do not sell your content, and we do not use the content of paying customers to train third-party foundation models without your consent. Outputs are made available to you for review before publishing.

5. Sharing your data and sub-processors

We do not sell your personal data. We share it only with service providers ("sub-processors") who process data on our behalf under contractual confidentiality and data-protection obligations:

Sub-processor	Purpose	Location
Stripe	Payment processing	EU / USA
Cloud hosting & database provider	Hosting, storage	EU / USA
AI processing provider(s)	Content analysis & generation	EU / USA
Email & analytics provider(s)	Transactional email, product analytics	EU / USA

We may also disclose data where required by law, to enforce our agreements, or in connection with a merger, acquisition or sale of assets (with notice where required).

6. International data transfers

Your data may be processed outside your country, including outside the EEA/UK. Where this happens, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses (and the UK Addendum) or an adequacy decision, to ensure your data receives an equivalent level of protection.

7. Data retention

We keep account and content data for as long as your account is active. After account closure we delete or anonymise personal data within a reasonable period, except where we must retain certain records (for example invoices for tax and accounting) for the period required by law. You may request deletion at any time (see Section 9).

8. Security

We apply technical and organisational measures appropriate to the risk, including encryption in transit, access controls and least-privilege practices. No system is perfectly secure, but we work continuously to protect your data and will notify you and the relevant authority of a personal data breach where legally required.

9. Your rights (EEA / UK)

Subject to applicable law, you have the right to: access your data; rectify inaccurate data; erase data ("right to be forgotten"); restrict or object to processing; data portability; and withdraw consent at any time. To exercise these rights, email info@reachlyos.com. We will respond within one month. You also have the right to lodge a complaint with your supervisory authority; in Portugal this is the CNPD (Comissão Nacional de Proteção de Dados).

10. Your rights (California — CCPA/CPRA)

If you are a California resident, you have the right to know, access, correct and delete the personal information we hold, and to opt out of the "sale" or "sharing" of personal information and of targeted advertising. We do not sell or share personal information as those terms are defined under the CPRA. We do not discriminate against you for exercising your rights. To submit a request, email info@reachlyos.com; you may use an authorised agent.

11. Children

The Service is not directed to children under 16 (or the minimum age in your jurisdiction). We do not knowingly collect data from children. If you believe a child has provided us data, contact us and we will delete it.

12. Cookies

We use cookies and similar technologies as described in our Cookie Policy. Non-essential cookies are used only with your consent.

13. Changes to this Policy

We may update this Policy from time to time. We will post the updated version here with a new "Last updated" date and, for material changes, provide additional notice where appropriate.

14. Contact

Questions or requests? Email info@reachlyos.com or write to ReachlyOS, Rua Gen. Humberto Delgado, 6, 2660-167 Loures, Portugal.