Privacy Policy
Last updated: October 28, 2026.
The short version
Reachy is local-first software. Your LinkedIn session, your prospect lists, your messages and your campaign data live on your computer — we do not host a copy of your network, and we cannot read your conversations. This policy covers the limited data we do process.
Data controller
BlackZebra, a French company (SIREN N° 978381564), is the data controller. Contact: sales@reachy.ai.
What we collect and why
We collect personal information when you browse this website, contact us, purchase a license, create an account, or use the application: IP address, name and contact details, device information, and anonymized usage statistics. We process it to:
- deliver our electronic services and website content;
- respond to inquiries and provide service offers;
- register accounts and process license purchases;
- improve the product through anonymized usage analytics and error diagnostics;
- establish and defend legal claims where necessary.
Legal basis
Processing relies on contract performance (GDPR Art. 6(1)(b)), our legitimate business interests (Art. 6(1)(f)), and your consent (Art. 6(1)(a)) for optional usage data and marketing cookies.
Data retention
Personal data is retained for as long as necessary to achieve the purposes described in this policy, including our contractual obligations. Consent-based processing continues until you withdraw consent.
Processors & third-party recipients
- Lemon Squeezy (Utah, USA) — payment processing and affiliate program.
- Sentry (San Francisco, USA) — error monitoring and diagnostics.
- PostHog (USA) — product analytics and session replay for the website and desktop application. Website replays mask form fields; desktop application replays mask all text, fields and images, so they show the layout and clicks only.
- Ahrefs — cookieless website traffic analytics.
- Cloudflare (USA) — hosting of this website, its API and the Claude and ChatGPT connector.
- Meta — advertising measurement pixel, loaded only after your consent.
Transfers outside the EEA are covered by standard contractual clauses.
What we never collect
- Your LinkedIn credentials or session cookies
- Your prospects' profiles or contact data, and message content, sent or received, unless you connect the Reachy app to Claude or ChatGPT (see below)
- Your OpenAI / Anthropic / Google / OpenRouter API keys, if you bring your own (stored locally, used directly against the provider), or the included Reachy AI key issued to your licence
Claude and ChatGPT connector
When you add Reachy to Claude or ChatGPT, the assistant sends our connector
(https://reachy.ai/mcp) the inputs of the tool it calls: job titles and
locations to build a LinkedIn search, the prospects and target profile you ask it to
score, or a message draft to check. We compute the answer and return it. We do not store
these inputs, log them or use them for any other purpose, and the connector never
contacts LinkedIn.
For each request we record only which tool ran, whether it succeeded, and which assistant called it (for example "chatgpt"), in PostHog, without any conversation content or personal data. The download link the connector returns carries the same assistant name so we can count installs that came from it. Your conversations themselves are governed by the privacy policy of Anthropic or OpenAI.
When you connect the Reachy app
If you choose to connect the Reachy app to Claude or ChatGPT (in Reachy, Settings, Claude & ChatGPT), the app uploads a summary so the assistant can answer while your computer is off: your campaigns and their settings, the contacts in them (name, title, company, LinkedIn profile URL, stage, scores including how many of your campaign's posts or events they engaged with, tags), the last reply from each person who answered, your LinkedIn accounts' daily limits, and your Reachy plan (trial or subscription, and whether campaigns may send). We also store what you ask Reachy to do from the chat (for example a reply to send). We never receive your LinkedIn password or session cookies, and the connector never contacts LinkedIn: every action is still carried out by the Reachy app on your computer, within its limits.
This processing relies on your consent (GDPR Art. 6(1)(a)) and on our legitimate interest in providing the feature you turned on (Art. 6(1)(f)) for the people in your campaigns. The data is stored by Cloudflare, encrypted in transit, and used only to answer your assistant. It is replaced at every sync, deleted when you click Disconnect in Reachy, and deleted automatically after 60 days without a sync. Requests from the chat expire after 14 days.
Your rights (GDPR)
You have the right of access, rectification and deletion, the right to restrict processing, data portability, the right to object, the right to withdraw consent at any time, and the right to lodge a complaint with a supervisory authority. We respond to rights requests within one month at sales@reachy.ai.
Cookies & website analytics
Essential cookies are required for the website to function and collect no personal information. Site traffic is measured with cookieless analytics (Ahrefs) and PostHog. One marketing cookie (Meta Pixel) is loaded only after you accept it in the consent banner — declining is one click and remembered. If you arrive through an affiliate link, Lemon Squeezy stores an attribution identifier so the referrer is credited. You can also manage cookies through your browser settings.
Changes
This policy is reviewed and updated periodically; the current version is always published on this page.
Contact
BlackZebra · SIREN 978381564 · sales@reachy.ai