Privacy Policy
Last updated: March 6, 2026
1. Introduction
Reach Flow takes personal data protection seriously. This policy explains how we collect, use, store and protect your information in accordance with the GDPR.
2. Data collected
We may collect the following categories of data:
Identification data
- First and last name
- Email address
- Payment information via Stripe
LinkedIn data
- LinkedIn profile via Unipile connection
- Connections and followers
- Messages and conversations
- Posts and interactions
Usage data
- Login logs
- Service usage statistics
- IP address and browsing data
3. Purposes of processing
Your data is used to:
- Provide and improve our services
- Manage your account and subscription
- Process payments
- Send service-related communications
- Analyze service usage and optimize user experience
- Ensure platform security
4. Legal basis
Processing is based on contract performance, your consent for certain communications, our legitimate interest and our legal obligations.
5. Data sharing
Your data may be shared with technical processors: Unipile for LinkedIn connection, Stripe for payments, Supabase for database hosting and AI providers for intelligent features.
We never sell your data to third parties.
6. Retention period
Data is kept during your subscription and for up to 3 years after termination for billing, support or legal requirements.
7. Data security
We implement appropriate technical and organizational measures:
- Encryption in transit
- Encryption of sensitive data at rest
- Secure authentication
- Limited data access
- Backups and incident monitoring
8. Your rights
Under the GDPR, you have rights of access, rectification, erasure, restriction, portability, objection and withdrawal of consent.
To exercise these rights: contact@reachflow.fr
9. Chrome extension
The Reach Flow Chrome extension may read visible information on LinkedIn profiles you visit to import prospects, generate personalized messages and analyze writing styles.
Authentication tokens are stored locally using chrome.storage.local. The extension works only on linkedin.com pages and communicates securely with our servers.
10. Cookies
We use cookies to maintain your session, analyze traffic and remember preferences. You can disable cookies in your browser.
11. International transfers
Some processors may be located outside the European Union. In that case, we ensure appropriate safeguards are in place.
12. Changes
We may update this policy. You will be informed of important changes by email before they take effect.
13. Complaints and contact
If you believe your rights are not respected, you may lodge a complaint with the CNIL.
For any question: Reach Flow - contact@reachflow.fr