Privacy policy

Account information. When you sign in with Google, we receive your name and email address from your Google account. We do not receive your Google password and we request no other Google data.

Your company profile.The company website URL you give us, the results of scanning that public website, and the service selections you confirm or correct during onboarding (what your company does and doesn’t do).

Your work in the product. Annotations and labels on prospects, notes, pipeline stages and outcomes, and drafted outreach you edit.

Usage data. Standard operational logs (pages requested, errors, timestamps) needed to run and debug the service.

The opportunities in your feed are derived from public government records (procurement databases, budget documents, permits, and similar public filings) — not from data about you.

We use your data for one purpose: making the product work for you — building and personalizing your feed, applying your corrections, drafting outreach for your review, and sending you the product emails you expect (such as your daily digest).

Your workspace is isolated. Your labels, annotations, win history, routing decisions, and pipeline are scoped to your workspace at the database level. They are never shown to, shared with, or used to serve another customer.

We never train AI models on your data. When you correct the system, the correction becomes an explicit, inspectable rule in your configuration — not training material for a model. Your data is not used to fine-tune any AI model, ours or anyone else’s.

We do not sell your data. Not to advertisers, not to data brokers, not to anyone.

Longlead drafts introductions; it never sends them. No outreach leaves the system without a human at your company reviewing and sending it. Emails we send you about your own account and feed are product emails; where marketing email applies, it complies with CAN-SPAM, including a working unsubscribe.

We run on a small set of infrastructure providers (subprocessors):

• Vercel — application hosting
• Supabase — database and authentication
• Anthropic — AI inference (under terms that do not permit training on the data)
• Resend — transactional email delivery
• Google — OAuth sign-in

Each receives only what it needs to perform its function. We will update this list if it changes.

We keep your data while your account is active. To have your account and its data deleted, email david@reerah.com from your account address and we will delete it within 30 days, except where we are legally required to retain records (such as billing).

If this policy changes materially, we will update the date above and notify active customers by email. Questions, requests, or complaints: david@reerah.com.