Legal

Privacy Policy

How we collect, use, and protect personal information across Reachase products.

Last updated August 7, 2026

Overview

This Privacy Policy explains how Reachase collects, uses, shares, and protects personal information when you use our website, dashboard, APIs, and related services.

Reachase provides embeddable tools for contact forms and scheduling. This policy covers information we process as a service provider and information we collect directly from account holders.

Controller

netchase UG

Kolonnenstr. 8

D-10827 Berlin

Germany

Email: [email protected]

Hosting and server log files

Personal data is processed when you visit this website.

Processed data categories: technical connection data of the server access (IP address, date, time, requested page, browser information).

Purpose of processing: monitoring of the technical function and increasing the operational security of our web server, delivery and provision of the website, and anonymization and creation of statistics.

Legal basis for processing: a legitimate interest that overrides the rights and freedoms of the data subject (Art. 6 (1) f GDPR).

Legitimate interests: strong economic interest in safe and functioning operation of the technical systems.

Data is transmitted to the data processor netcup GmbH, Daimlerstrasse 25, 76185 Karlsruhe, Germany.

Log data is typically deleted automatically after a short period unless longer retention is required to investigate security incidents.

Cookies and local storage

We use essential cookies for dashboard authentication and optional local storage for your theme preference (light or dark) when you accept functional cookies.

Legal bases: essential cookies to provide the service you request (Art. 6 (1) f GDPR and Section 25 (2) no. 2 TDDDG); functional storage only with your consent (Art. 6 (1) a GDPR, Section 25 (1) TDDDG).

See our Cookie Policy at /cookies for details.

Registration and account

When you create an account, we process the information you provide (such as name, email address, and organization) and usage and log data required to operate the service.

Purpose: providing and managing your account, authentication, support, and billing.

Legal basis: contract performance and pre-contractual measures (Art. 6 (1) b GDPR) and legitimate interest in secure operation (Art. 6 (1) f GDPR).

Retention: for the duration of the contract and thereafter according to legal retention requirements or until you delete your account.

Contact form

When you send us a message through the contact form at /contact, we process the data you enter (such as name, email, and message).

Purpose: handling your inquiry and communicating with you.

Legal basis: contract performance or pre-contractual measures (Art. 6 (1) b GDPR), or legitimate interest in responding to inquiries (Art. 6 (1) f GDPR) where no contract relationship exists.

Using Reachase as a service

As a customer, you may process data of your end users through Reachase (such as form submissions and bookings). You are the controller for that data; Reachase processes it as a processor under our DPA at /dpa.

  • Account and project information: configuration, API keys, webhook settings, and dashboard activity.
  • Support communications and feedback you send to us.
  • Technical data such as IP address, browser type, and log data where required for security and operation.
  • End-user content submitted through your Reachase projects.
  • Records of your acceptance of our Terms and this Privacy Policy at signup.

Sharing and subprocessors

We share personal information only as described in this policy or at your direction.

A current list of subprocessors is available at /subprocessors. This includes netcup GmbH (Daimlerstrasse 25, 76185 Karlsruhe, Germany) for website hosting, server log files, and PostgreSQL database hosting.

Other recipients may include professional advisors where reasonably necessary; authorities when required by law; and webhook and integration endpoints you configure.

We do not sell personal information. We do not use third-party advertising trackers on our marketing website.

Data location and retention

Primary hosting and database storage is in European Union (Germany) with netcup GmbH.

We retain account information for as long as your account is active and for a reasonable period afterward to meet legal, security, and business needs.

Data collected through your projects is retained until you delete it from the dashboard or close your account. Webhook delivery logs are automatically deleted after 90 days.

You may export account and project data from the dashboard.

International transfers

Our subprocessors process data in the European Union. Data may be transferred to recipients outside the EU when you configure webhooks or integrations. In those cases, we use appropriate safeguards where required.

See /subprocessors for details.

SSL/TLS encryption

This website uses SSL/TLS encryption to protect transmitted content. You can recognize an encrypted connection by https:// in your browser address bar.

Account deletion

You can delete your account from the dashboard under Account settings. Deletion requires email confirmation and permanently removes your account data.

If you are the only member of a workspace, that workspace and all project data within it are permanently deleted. Active subscriptions on those workspaces are canceled immediately.

If you own a workspace with other members, you must transfer ownership before deleting your account.

You can export a copy of your account data from the dashboard before requesting deletion.

Your rights

Under the GDPR, you have the following rights where the legal requirements are met:

  • Access to your personal data (Art. 15 GDPR).
  • Rectification of inaccurate data (Art. 16 GDPR).
  • Erasure (Art. 17 GDPR).
  • Restriction of processing (Art. 18 GDPR).
  • Data portability (Art. 20 GDPR).
  • Object to processing (Art. 21 GDPR).
  • Withdraw consent (Art. 7 (3) GDPR) without affecting the lawfulness of processing before withdrawal.

Objection to processing

Where we process data on the basis of Art. 6 (1) f GDPR, you may object on grounds relating to your particular situation. We will then no longer process the data unless we demonstrate compelling legitimate grounds that override your interests, or processing is necessary for the establishment, exercise, or defense of legal claims.

Objections and privacy requests can be sent to [email protected]. We may need to verify your identity before responding.

Right to lodge a complaint

You have the right to lodge a complaint with a supervisory authority, in particular in the member state of your residence, workplace, or the place of the alleged infringement.

Berlin Commissioner for Data Protection and Freedom of Information

Friedrichstrasse 219, 10969 Berlin, Germany

https://www.datenschutz-berlin.de

Children

Reachase is not directed to children under 16, and we do not knowingly collect personal information from children. If you believe a child has provided us personal information, contact [email protected].

Updates to this policy

We may update this Privacy Policy from time to time. If we make material changes, we will provide notice through the dashboard, by email, or on this page.

Questions about this policy can be sent to [email protected].