Draft for legal review. The owner has not approved this page yet.
Privacy Policy
Last updated 5 November 2026
This page explains what Reach collects, why, and what you can do about it. It covers the data Reach gets from TikTok and from the other channels you connect.
What we collect
When you sign in, we get your name, your email address and your profile picture from Google or Apple.
We store the posts, media and plans you make in Reach. We store the setup and status records that show how each channel connection is going.
When you connect a channel, we store the account identifiers the channel gives us, such as the display name and the avatar. We store access tokens encrypted. The raw tokens are never shown on a screen or written to a log.
Data from TikTok
When you connect TikTok, Reach asks for four permissions. Each one has one purpose.
Your TikTok display name and avatar (user.info.basic) show which TikTok account is connected.
Posting permission (video.publish) sends a video or photo set to your TikTok profile, only after you pick the settings and click Post.
Inbox permission (video.upload) saves a video to your TikTok inbox as a draft, only when you choose that option.
Video list permission (video.list) reads your own videos and their view and like counts, so your Reach analytics can show how each post did.
Reach does not read other people’s videos or messages through TikTok. Reach uses TikTok data only for these purposes. Reach does not sell TikTok data and does not use it for advertising.
How we use it
We use your data to run Reach: to show your content and your channels, to send posts you approve, to show analytics for your own accounts, and to warn you before a channel connection breaks.
We use technical records to keep Reach secure and to find faults.
Who we share it with
We share data with the channel you choose when you post or connect. We share data with the service providers that run Reach, such as hosting, storage and email sending. They may use it only to run that service for us.
We do not sell your personal data.
Your choices
You can ask to see the data we hold about you. You can ask us to correct it or delete it. You can remove a channel connection.
Owner decision: the contact address and the process for data requests and account deletion are not set yet.
How long we keep data
We keep data while your account is active and for the time the law requires.
Owner decision: exact retention periods for posts, analytics and logs.
Security
Tokens and keys are encrypted at rest. Access to data is limited to the people and services that need it, and every workspace is kept separate from the others.
No system is perfectly secure. Tell us if you find a problem.
Who may use Reach
Reach is for adults. Do not use Reach if you are under 18.
Legal review: the minimum age must match the rules of the sign-in providers and the law where the owner operates.
Changes to this policy
We may change this policy. We will show the new date at the top of the page. For a big change we will tell you before it takes effect.
Contact
Questions about privacy go to the address below.
Owner decision: the privacy contact address is not set yet.