Privacy Policy
Last updated: May 16, 2026
Information We Collect
Account Information
When you create an account, we collect your email address, name, and any profile information you choose to provide.
Content and Brand Assets
We store the content and campaigns your AI agents create, including brand assets, images, copy variations, and any media you upload.
Posts, Schedules, and Publishing Records
We store post drafts, captions, selected platforms, scheduled publishing times, approval state, delivery status, platform response details, and error messages needed to operate your content calendar and troubleshoot publishing issues.
Connected Accounts
When you connect social media or publishing channels, we store the authentication tokens, app passwords where required, and channel metadata needed to publish on your behalf.
Google and YouTube Data
If you connect a YouTube channel, AgentReacher requests access to the YouTube Data API scopes you approve, including youtube.upload so we can upload videos and Shorts you choose to publish, and youtube.readonly so we can read basic channel information such as channel ID, channel name, custom URL, thumbnail, and subscriber count. We store OAuth access tokens, refresh tokens, token expiration times, and the connected YouTube channel metadata needed to keep the integration working.
Usage Data
We collect information about how you use AgentReacher, including pages visited, features used, agent activity, and campaign performance metrics.
AI Assistant and ChatGPT App Activity
When you use AgentReacher through an AI assistant, MCP client, or ChatGPT app, we receive the specific tool requests and resources needed to complete your request, such as a post caption, selected targets, workspace, media reference, or scheduling instruction. We do not request or reconstruct your full chat history.
Device Information
We may collect information about the device you use to access AgentReacher, including browser type, operating system, and IP address.
How We Use Your Information
Providing Our Services
We use your information to connect your AI to social media, generate and publish content, schedule posts, and provide the core functionality of our platform.
YouTube Publishing
For YouTube, we use Google user data only to connect your channel, display the connected channel in AgentReacher, refresh access when needed, create drafts in AgentReacher, and upload or schedule videos and Shorts that you explicitly create, schedule, or publish through the product or API. We do not use Google user data for advertising, sell it, or transfer it except as needed to provide and secure the integration.
Improving AgentReacher
Usage data helps us understand how brands use AgentReacher so we can improve content generation, agent performance, and develop new features.
Communication
We may send you service-related emails, updates about new features, and occasional marketing communications, which you can opt out of at any time.
Security
We use your information to detect and prevent fraud, abuse, and other harmful activities on our platform.
Support
We use support messages, contact details, account context, and relevant diagnostic information to answer questions, investigate bugs, and resolve account or publishing issues.
How We Protect Your Data
Encryption
All data transmitted between your device and our servers is encrypted using industry-standard TLS encryption.
OAuth Tokens and App Passwords
Connected-account credentials are used only to keep your publishing workflows working, refresh access when a platform requires it, and publish or manage posts you request through AgentReacher.
Google User Data Handling
Google OAuth tokens are stored with access controls and are used only by AgentReacher server-side systems to perform the YouTube actions you authorize. We do not expose Google OAuth tokens in the browser, to other workspace members, or to third parties. Disconnecting a YouTube channel removes the stored Google tokens and connected-channel record from AgentReacher.
Secure Storage
Your data is stored on secure servers with access controls. Disconnecting a social account removes the stored publishing access for that account.
Tool and App Boundaries
AgentReacher tools act only on the workspace and connected accounts authorized for your account. Tool responses are limited to information relevant to the requested action, such as connected channels, draft details, schedule status, media references, or publication results.
Access Controls
Only authorized team members have access to user data, and only when necessary for providing support or maintaining the service.
Regular Updates
We regularly update our security practices and infrastructure to protect against new threats.
Data Sharing and Third Parties
We Don't Sell Your Data
We never sell your personal information, social account tokens, app passwords, posts, or brand assets to third parties.
Service Providers
We work with trusted service providers who help us operate AgentReacher, including hosting, database storage, file storage, email delivery, payments, analytics, error monitoring, and customer support. These providers are authorized to process data only as needed to provide services to AgentReacher.
Social Platforms
When you ask AgentReacher to connect, schedule, publish, update, or delete content on a social platform, we send the required content, media, account identifiers, and publishing settings to that platform's API.
Google Data Sharing
We do not sell, rent, or share Google user data with advertisers or data brokers. We do not transfer Google user data to third parties except to service providers acting on our behalf, when required for security or legal compliance, or when you direct AgentReacher to publish content to YouTube.
Legal Requirements
We may disclose information if required by law, such as in response to a valid legal request from law enforcement.
Business Transfers
If AgentReacher is involved in a merger or acquisition, your information may be transferred as part of that transaction.
Data Retention and Deletion
Account Data
We retain account, workspace, billing, team, and support records while your account is active and as needed afterward for legal, security, accounting, and dispute-resolution purposes.
Connected YouTube Channels
We retain connected YouTube channel metadata and OAuth tokens while your YouTube channel remains connected to AgentReacher. You can disconnect the channel at any time from the dashboard, which deletes the stored YouTube tokens and connected-channel record from our active systems.
Posts, Drafts, and Media
We retain posts, drafts, schedules, publication records, and uploaded media so you can manage your content calendar and publishing history. You can delete individual posts and media from AgentReacher, or request account deletion to remove your account data.
Tool Logs and Diagnostics
We keep MCP, ChatGPT app, and API tool logs for troubleshooting, abuse prevention, security, and reliability. These logs are retained only as long as needed for those purposes unless a longer period is required by law or to resolve a dispute.
Backups
Deleted data may remain in encrypted backups for a limited period before those backups expire through our normal backup rotation. We do not restore deleted data to active systems except when needed for security, legal, or disaster-recovery purposes.
Policy Updates
If we change how AgentReacher accesses, uses, stores, or shares Google user data, we will update this policy and notify users when the change is material.
User Controls
Connected Accounts
You can disconnect linked social accounts from AgentReacher. Disconnecting removes the stored publishing credentials for that account and stops future AgentReacher publishing to that channel.
Posts and Media
You can delete posts, drafts, schedules, and uploaded media from your workspace. Deleting a record in AgentReacher does not always remove content that has already been published on an external social platform; use the platform's own controls when needed.
Workspace Access
Workspace owners and admins can manage workspace members and invitations. Removing a member stops their future access to the workspace in AgentReacher.
Account Requests
You can request access, correction, export, or deletion of personal data by contacting privacy support. We may need to verify your identity before completing the request.
Google API Limited Use Disclosure
Limited Use
AgentReacher's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Your Rights
You have the following rights regarding your personal data:
- Access and download your data
- Correct inaccurate information
- Delete your account and data
- Opt out of marketing communications
- Export your campaigns and content
- Disconnect linked social accounts at any time
- Request information about data processing
Cookies
We use cookies to provide essential functionality and improve your experience. These include:
- Essential cookies: Required for the site to function properly, including authentication and security.
- Measurement cookies: Help us understand how you use AgentReacher so we can improve.
- Preference cookies: Remember your settings and preferences.
Questions About Privacy?
If you have any questions about this privacy policy or how we handle your data, please contact us:
For product support, account access, or connection problems, email contact@agentreacher.com.