ReClip Reach ("we", "us", or "our") is the data controller responsible for your personal data. We are committed to protecting your privacy and handling your data in accordance with the General Data Protection Regulation (GDPR) and the UK Data Protection Act 2018.
Contact: privacy@civic-reach.com
2. Data We Collect
We collect and process the following categories of personal data:
Account Information
Name and email address
Password (encrypted)
Profile picture (if provided via Google Sign-In)
YouTube Channel Information
Channel name and URL
Subscriber count
Content niche/category
Service Data
Brand contact information you add
Pitch content and templates
Deal information and values
Usage statistics (pitches sent, AI generations used)
Technical Data
IP address and browser type
Device information
Access times and pages viewed
3. Purpose of Processing
We process your personal data for the following purposes:
Service Delivery: To provide our pitch management, AI generation, and deal tracking features
Account Management: To create and manage your account, authenticate your identity
Communication: To send service-related notifications, respond to inquiries
Improvement: To analyse usage patterns and improve our service
Billing: To process subscription payments and manage billing
Legal Compliance: To comply with legal obligations
4. Legal Basis for Processing
We process your data based on the following legal grounds:
Contract Performance: Processing necessary to provide our services to you
Consent: Where you have given explicit consent (e.g., marketing communications)
Legitimate Interests: For service improvement and fraud prevention, where balanced against your rights
Legal Obligation: Where required by law
5. Data Retention
We retain your personal data for as long as necessary to:
Provide our services while your account is active
Comply with legal obligations
Resolve disputes and enforce agreements
Account Data: Retained while your account is active and for 30 days after deletion request.
Billing Records: Retained for 7 years for tax and legal purposes.
Usage Logs: Retained for 12 months for analytics purposes.
6. Your Rights (GDPR)
Under GDPR, you have the following rights:
Right of Access: Request a copy of your personal data
Right to Rectification: Request correction of inaccurate data
Right to Erasure: Request deletion of your data ("right to be forgotten")
Right to Restrict Processing: Request limitation of processing
Right to Data Portability: Receive your data in a structured, machine-readable format
Right to Object: Object to processing based on legitimate interests
Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent
To exercise these rights, contact us at privacy@civic-reach.com. We will respond within 30 days.
7. Cookies & Tracking
We use the following types of cookies:
Essential Cookies
Required for the service to function (authentication, security). Cannot be disabled.
Analytics Cookies (Optional)
Help us understand how you use our service. You can opt out via browser settings.
We do not use tracking cookies for advertising purposes.
8. Third-Party Services
We use the following third-party services that may process your data:
Google OAuth: For authentication (Google Privacy Policy applies)
Gumroad: For payment processing and subscription management
OpenAI: For AI pitch generation (data processed per OpenAI API terms)
Neon: Database hosting (data stored in EU/UK regions)
Vercel: Application hosting
Each third party processes data in accordance with their own privacy policies. We have appropriate data processing agreements in place.
9. Data Security
We implement appropriate security measures including:
Encryption of data in transit (TLS/HTTPS)
Encryption of sensitive data at rest
Secure password hashing (bcrypt)
Access controls and authentication
Regular security assessments
Secure hosting infrastructure
10. International Transfers
Your data may be processed in countries outside the UK/EEA. Where this occurs, we ensure appropriate safeguards are in place:
Standard Contractual Clauses (SCCs)
Adequacy decisions by the UK/EU Commission
Binding corporate rules where applicable
11. Children's Privacy
ReClip Reach is intended for users aged 18 and over. We do not knowingly collect personal data from children under 18. If we become aware of such collection, we will delete the data immediately.
12. Policy Updates
We may update this Privacy Policy from time to time. We will notify you of significant changes via email or through the service. The "Last updated" date at the top indicates when the policy was last revised.
13. Contact Us
For privacy-related inquiries or to exercise your rights, contact us:
Email: privacy@civic-reach.com
Subject Line: "Privacy Inquiry" or "GDPR Request"
You also have the right to lodge a complaint with a supervisory authority. In the UK, this is the Information Commissioner's Office (ICO) at ico.org.uk.