At Custom Reach AI ("we", or "us"), we prioritize our Customers ("you", or "your") privacy and are committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your data when you use our services. It applies to all information collected through our website, applications, and any related services provided by us.

If you do not agree to this privacy policy, please do not use our services. By accessing or using our services, you agree to this privacy policy and the collection and use of your information as described herein.

2. Personal information collection

We collect various types of personal information to provide and improve our services. The information we gather includes, but is not limited to, your name, email address, payment information, IP addresses, and product usage metrics. Additionally, users may voluntarily provide special categories of data, such as information about hearing or vision impairments, which are collected only if explicitly opted-in by the user.

Our data collection methods include direct inputs through forms on our platforms, as well as automated processes via cookies and other tracking technologies. We ensure that all data collected is relevant and necessary for the purposes for which it is collected.

3. Purpose and Legal Basis for Processing

The data we collect serves multiple purposes:

1. Service Provision: We use personal data to deliver our services to you, including account management, customer support, and service updates.

2. Service Improvements: Understanding how our users interact with our services helps us enhance and refine our offerings.

3. Marketing: We may use your information to inform you about new features, promotions, and other news related to our services.

We process personal data under various legal bases as required by the General Data Protection Regulation (GDPR). The primary bases include user consent (for cookies and sensitive data), contractual necessity (for account and billing information), and legitimate interest (for certain analytics and service improvements). Users have the right to withdraw their consent at any time, although this may affect the availability and functionality of certain services.

4. User Rights

As a user, you have several rights under GDPR, which include:

• Access: You can request access to the personal data we hold about you.

• Rectification: You have the right to correct any inaccuracies in your personal data.

• Erasure: You can request the deletion of your personal data.

• Restriction of Processing: You may request the restriction of processing your data in certain circumstances.

• Data Portability: You have the right to receive your data in a structured, commonly used, and machine-readable format.

• Objection: You can object to the processing of your personal data based on our legitimate interests.

To exercise these rights, please contact us at support@custom-reach.com. We will respond to your requests promptly and in accordance with GDPR guidelines.

5. Data Security

We implement robust security measures, including industry-standard encryption and access control mechanisms, to protect your personal data from unauthorized access, disclosure, alteration, and destruction. In the event of a data breach, we will notify affected individuals and the relevant authorities within 72 hours, in compliance with GDPR requirements.

6. Cookies and Tracking Technologies

Our website uses cookies and local storage to enhance your user experience. We also use tracking mechanisms from HubSpot, Google Analytics and PostHog to analyze traffic and usage patterns. While you can manage your cookie preferences through your browser settings, please note that certain cookies are essential for the website's functionality. Unfortunately, we currently do not offer a more granular level of cookie consent management.

7. Data Retention

We retain your personal data for as long as necessary to fulfill the purposes outlined in this Privacy Policy, or as required by law. Specifically, personal data is stored until 30 days after the deletion of your user account. After this period, your data will be securely deleted or anonymized.

8. Children's Privacy

Our services are not intended for children under the age of 16. We do not knowingly collect personal information from children. If we become aware that we have inadvertently collected data from a child under this age, we will take steps to delete the information as soon as possible.

9. Legal Compliance

We are committed to complying with the GDPR and other applicable data protection laws. This includes adhering to all regulations concerning the processing and safeguarding of personal data.

10. Changes to the Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be communicated directly via email to ensure that you are always informed about how your information is being protected. The latest version of our Privacy Policy will also be available on our website and the date of the latest change will be stated at the top.

11. Contact Information

For any questions or concerns regarding this Privacy Policy or your personal data, please contact our privacy officer, Luca Sander, at support@custom-reach.com. We are here to assist you with any inquiries you may have.