Privacy Policy
Overview
AutoReach is open-source software designed to be self-hosted. This means you run AutoReach on your own server — your data never passes through any server we control. This privacy policy explains what data the AutoReach software handles and how.
Data We Do Not Collect
Because AutoReach is self-hosted, we (the AutoReach project) do not collect, store, or have access to:
- Your leads or business contacts
- Emails you send or receive
- Your API keys (Google Maps, Groq, Gmail)
- Your usage statistics or activity
- Any personal information you enter into the dashboard
Data Stored on Your Server
When you run AutoReach, the following data is stored on your own server or hosting environment:
- businesses.csv — your lead database (business names, addresses, emails)
- sent_log.csv — log of emails you have sent
- followup_log.csv — log of follow-up emails sent
- autoreach_users.db — user accounts (email addresses, hashed passwords)
- Environment variables — API keys and credentials you configure
You are responsible for securing this data on your own server.
Third-Party Services
AutoReach integrates with the following third-party services. Their own privacy policies apply when you use them:
- Google Maps Places API — used to find businesses. Google Privacy Policy
- Groq AI — used to generate email content. Groq Privacy Policy
- Gmail (SMTP) — used to send emails. Google Privacy Policy
- GitHub, Discord, Google OAuth — optional login methods for the mobile app. Standard OAuth flows apply.
This Website (autoreach.dev)
The autoreach.dev landing page is a static site hosted on GitHub Pages. It does not set cookies, collect personal data, or use analytics. The only third-party content is Google Fonts (loaded for typography).
Cold Email Compliance
AutoReach is a tool for sending cold outreach emails. You are responsible for ensuring your use of AutoReach complies with applicable laws in your jurisdiction, including:
- GDPR (European Union)
- CAN-SPAM Act (United States)
- CASL (Canada)
- Any other applicable anti-spam or data protection laws
Only contact businesses that may have a legitimate interest in your services, always include an unsubscribe mechanism, and honour opt-out requests promptly.
Contact
For questions about this privacy policy, open an issue on GitHub.