1. Introduction
ReachSmart ("we," "our," or "us") operates the ReachSmart platform, an outreach automation service that helps job seekers connect with potential employers through LinkedIn and email. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service.
2. Information We Collect
2.1 Information You Provide
- Account information: name, email address, phone number
- Professional information: work history, education, skills, resume content
- LinkedIn account connection via third-party integration (Unipile)
- Email account connection via OAuth (Google Gmail, Microsoft Outlook)
2.2 Information from Connected Services
- LinkedIn: We access your LinkedIn account to send connection requests and messages on your behalf. We receive webhook notifications about connection acceptances and message replies.
- Gmail (Google): We request only the
gmail.send scope, which allows us to send emails on your behalf. We do not read, access, or store the contents of your emails. We only use Gmail to send outreach emails that you have approved. - Outlook (Microsoft): Similar to Gmail, we request only send permissions. We do not read your emails.
3. How We Use Your Information
We use the information we collect to:
- Operate and maintain the ReachSmart platform
- Send connection requests and messages on LinkedIn on your behalf
- Send follow-up emails on your behalf using your connected email account
- Track outreach progress and provide analytics
- Communicate with you about your account and our services
- Improve our platform and develop new features
4. Google API Services - Limited Use Disclosure
ReachSmart's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Specifically:
- We only request access to send emails (
gmail.send scope) - We do not request access to read, modify, or delete your emails
- We use your Gmail access solely to send outreach emails that you have reviewed and approved
- We do not use Gmail data for advertising purposes
- We do not sell Gmail data to third parties
- We store OAuth tokens securely using encryption at rest
5. Data Sharing and Disclosure
We do not sell your personal information. We may share your information in the following circumstances:
- Service Providers: We work with third-party service providers (such as Unipile for LinkedIn integration, cloud hosting providers) who assist in operating our platform. These providers are bound by confidentiality obligations.
- Legal Requirements: We may disclose information if required by law, subpoena, or other legal process.
- Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of the transaction.
6. Data Retention
We retain your information for as long as your account is active or as needed to provide you services. OAuth tokens are stored securely and can be revoked at any time by disconnecting the service in your account settings. Upon account deletion, we will delete or anonymize your personal information within 30 days, except where retention is required by law.
7. Data Security
We implement industry-standard security measures to protect your information, including:
- Encryption of sensitive data at rest and in transit (TLS/SSL)
- Secure storage of OAuth tokens using AES-256 encryption
- Regular security audits and monitoring
- Access controls limiting who can view your data
8. Your Rights and Choices
You have the right to:
- Access: Request a copy of the personal information we hold about you
- Correction: Request that we correct inaccurate information
- Deletion: Request that we delete your account and personal information
- Disconnect Services: Revoke access to your LinkedIn, Gmail, or Outlook accounts at any time through your account settings
- Opt-out: Unsubscribe from marketing communications
To exercise any of these rights, please contact us at evan@co-op.fyi.
9. Third-Party Services
Our platform integrates with third-party services including LinkedIn (via Unipile), Google Gmail, and Microsoft Outlook. Your use of these services is governed by their respective privacy policies:
10. Children's Privacy
ReachSmart is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. We encourage you to review this policy periodically.
12. Contact Us
If you have any questions about this Privacy Policy or our data practices, please contact us at:
Email: evan@co-op.fyi
Website: https://co-op.fyi