Privacy Policy

ReachlySend ("we", "us") is operated by Bezalel Digital LLC. This policy describes what data we collect, why we collect it, and how it is stored. Plain language; if anything is unclear, email [email protected].

What we collect

• Account data — email, name (optional), and a hashed password. Stored in Cloudflare D1 (US region).
• Email content you forward to your seed inbox — full raw .eml blobs are stored in Cloudflare R2 and indexed in D1. We use them solely to compute the deliverability score and placement results we show you. We never read your seed-inbox mail for any other purpose, never share it, and never train models on it.
• Connected mailbox tokens — when you connect Gmail, Outlook, etc. via OAuth, we store encrypted (AES-256-GCM) refresh tokens. We use them only to detect placement of your test sends. Revoke any time from the Integrations screen.
• DNS lookups for monitored domains — we perform regular SPF / DKIM / DMARC / BIMI checks via DNS-over-HTTPS. No personal data leaves our system in those queries.
• Usage data — Cloudflare's request logs (IP, user agent, request path) are retained for up to 7 days for security and abuse prevention.

How long we keep it

Test data (raw .eml, analysis results, placement results) is retained according to your plan: 7 days on Free, 30 on Starter, 90 on Pro, 1 year on Agency. Older data is deleted automatically by a daily cron. Account data is retained until you delete the account.

Subprocessors

• Cloudflare — Workers, D1, R2, Pages, Email Routing. Data is processed in US data centers.
• Resend — transactional email delivery (password reset, invitations).
• Stripe — payment processing for paid plans.
• Google / Microsoft / Yahoo / Zoho — when you connect a mailbox, the OAuth provider holds its own data per their terms.

Your rights

You can delete your account from Settings, which permanently deletes your workspaces, tests, analyses, raw .eml blobs, and connected-account tokens. We process these deletions within 24 hours. Email [email protected] for any request we don't handle in-product (data export, inquiries, GDPR / CCPA correspondence).

Changes

Material changes to this policy will be communicated by email to all active accounts at least 30 days before they take effect.