Privacy Policy

Last updated: 14 July 2026

1. Who we are

Reach360 CRM is a product of HRX360 LTD (United Kingdom), which acts as the data controller for the personal data described in this policy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our CRM platform, website, and related services.

A note on your customers' data: the contacts, conversations and deals that you store inside your Reach360 workspace belong to your business. For that data, you are the controller and we act as a processor on your instructions — we never sell it, mine it, or use it for anything other than running the service for you.

2. Information We Collect

We may collect the following types of information:

  • Account information: Name, email address, company name, phone number, and password when you register.
  • Billing information: Handled by Stripe — we receive your plan, billing status and invoice history, but full card numbers never touch our servers.
  • Usage data: How you use our platform, including features used and interaction data.
  • Contact and CRM data: Information you store in Reach360, such as contacts, deals, quotes and communications (including WhatsApp and web-chat messages routed through the platform).
  • Technical data: IP address, browser type, device information, and log data.

3. How We Use Your Information

We use your information to:

  • Provide, maintain, and improve our services
  • Process transactions and send related information
  • Send support, security, and product updates, and onboarding emails during your trial (each marketing-style email includes an unsubscribe link)
  • Respond to your requests and comply with legal obligations
  • Analyze usage to improve our product and experience

4. AI processing

Reach360 includes AI features — the AI sales assistant on WhatsApp and web chat, AI-drafted content, and in-app help. To power these, relevant message content and business-profile context are processed by our AI providers (currently Anthropic, and Google for selected insight features) under agreements that prohibit them from using your data to train their models. AI replies can be configured to require human approval, and every AI conversation is visible to your team in the inbox. We do not use your CRM data to train AI models.

5. Data Sharing and Subprocessors

We do not sell your personal data. We share information only with service providers who assist us in operating the platform, and when required by law or to protect our rights and safety. Our main subprocessors are:

  • Amazon Web Services — cloud hosting and transactional email
  • Stripe — subscription payments
  • Meta Platforms — WhatsApp Business Platform messaging
  • Anthropic — AI assistant processing
  • Google — sign-in, analytics, Search Console/Analytics integrations and selected AI insights
  • Microsoft — optional Microsoft 365 mailbox integration

6. International transfers

Our primary infrastructure is hosted in the United Kingdom (AWS London region), with email infrastructure in the United States. Because our subprocessors operate globally, your data may be processed in the UK, EU, US and UAE. We rely on our subprocessors' standard contractual safeguards for these transfers.

7. Data retention

We keep your data for as long as your account is active. If your subscription or trial ends, your workspace data is retained so you can pick up where you left off if you return. You can request deletion of your account and workspace at any time; we delete or anonymize the data within 90 days of a verified request, except where law requires longer retention (e.g. invoicing records).

8. Data Security

We implement appropriate technical and organizational measures to protect your data against unauthorized access, alteration, disclosure, or destruction — including encryption in transit, role-based access controls with optional login OTP, and login audit trails. Data is stored on secure servers and access to production systems is restricted.

9. Your Rights

Depending on your location, you may have the right to access, correct, delete, or export your personal data, or to object to or restrict certain processing. Contact us at hello@reach360crm.com to exercise these rights.

10. Billing

Subscription payments are processed securely by Stripe on behalf of HRX360 LTD — charges appear as "HRX360" on card statements. Full card details are handled by Stripe and never stored on our servers.

11. Contact Us

For questions about this Privacy Policy or our data practices, contact us at hello@reach360crm.com.