Privacy notice
This notice covers the GreenReach website and app. It describes what we collect, why, who else it reaches and what you can require us to do about it. It is specific rather than generic: everything named here is something the software actually does.
Who we are
GreenReach is the data controller for the personal data described here. For anything in this notice, including a request to see or delete your data, email billing@greenreach.app.
What we collect, and why
Your account
Your email address, your name, a password, and the account name you chose. Passwords are never stored — we keep a salted scrypt hash, which can verify a password but cannot be reversed into one. You can optionally upload a profile photo. Legal basis: contract — we cannot give you an account without it.
Your connected channels
When you connect a YouTube, Instagram, TikTok or Facebook account we store the platform's own identifier for it, the channel name, the follower or subscriber count, and the access and refresh tokens that let us read it. Legal basis: contract.
Every scope we request is read-only. We ask for analytics and content-listing permissions only — there is no publishing, posting, messaging or deletion permission in any of the four integrations. We cannot post as you, and could not if we wanted to. You can revoke our access from the platform's own settings at any time, independently of us.
Your content and its metrics
For each post the platform reports: its title or caption, its thumbnail image URL, its permalink, the campaign or ad-set name where there is one, and the daily impressions, watch time and device breakdown. From those we derive an estimated CO2e figure. Legal basis: contract — this is the product.
Payments
Card details never reach us. Payment is handled entirely by Stripe, either on Stripe's own page or in a Stripe-hosted iframe embedded in ours; the card number is typed into Stripe's form and our servers never see it. We store what a purchase was — tree count, amount, currency, Stripe's reference, and an invoice number — because we have to be able to prove and invoice it. Legal basis: contract, and legal obligation for the invoice records.
Messages you send us
The contact form stores your name, email, chosen topic and message so we can reply and so we can tell whether we already have. Legal basis: legitimate interests — answering someone who asked us a question.
Cookies
Two strictly necessary cookies, and no others in use today. The full list is in the cookie policy. There is no analytics, advertising or tracking cookie on this site, and no third-party script loads before you have chosen — the webfonts are served from our own servers precisely so that visiting a page discloses nothing to anyone else.
Who else sees it
These are every third party that receives personal data, what they get, and why. We do not sell data, and we do not share it for anyone else's marketing.
| Who | What they receive | Why |
|---|---|---|
| Stripe | Your card details (directly, never via us), the amount, and an internal account reference | To take the payment |
| Ecologi© | A number of trees and your account name. No email, no card data, nothing about your content | To buy and attribute the planting |
| Resend | Your email address, your name where the message uses it, and the text of the message itself. No card data, nothing about your content | To deliver email we send you |
| YouTube, Meta, TikTok | Nothing about you that they did not already have — we only read | To fetch the analytics you asked us to |
| Our hosting and database providers | Everything above, at rest and in transit, as processors under contract | To run the service at all |
One outbound call carries no personal data at all: a weekly exchange-rate fetch, made by our server on its own behalf so prices can be shown in your currency. Your browser never contacts it and nothing about you is sent.
Email we send you
Two messages are part of the service and have no opt-out: confirming your address, and a receipt when you pay for something. Everything else — two setup emails in your first week, a weekly report of your estimated emissions and funding, and occasional product updates — can be turned off from Settings or from the unsubscribe link in the message itself, which works without signing in.
No message contains a tracking pixel, and none loads a remote image. That means we cannot tell whether you opened an email, when, where, or on what — and we would rather not know than ask you to trust that we don't look.
Us
Named staff at GreenReach can see your account through an internal admin panel: your account and business name, the email address you signed up with, which channels you have connected and how much they have published, your estimated emissions, and every purchase with its invoice. It is how we answer a question about a payment or work out why a channel has stopped syncing.
What that panel deliberately cannot do: it cannot show your password, which is stored only as a hash and is not readable by anyone; it cannot show the access tokens for your connected channels; it cannot sign in as you or act on your behalf; and apart from marking a message from you as answered, it cannot change your data at all. Access is limited to specific addresses set in our deployment configuration, not granted by anything inside the app.
How long we keep it
- Account and channel data — until you delete the channel or the account. Removing a channel deletes its posts, metrics and estimates immediately and permanently.
- Purchase and invoice records — kept after account deletion, for as long as tax law requires us to be able to produce them. These are the one category we cannot delete on request.
- Sessions — 30 days, or until you log out. Changing your password ends every other session immediately.
- Contact messages — kept while we may still need the thread, then deleted.
- A record of email we sent you — the address, the subject, the time and whether the provider accepted it, plus a note of which automated messages you have already had, so none of them is sent twice. Not the contents: the body of a sent message is not stored.
Your rights
Under the UK GDPR and EU GDPR you can ask us to give you a copy of your data, correct it, delete it, restrict or object to our use of it, or hand it to another provider. Email billing@greenreach.app and we will respond within one month. You do not need to give a reason and we will not charge you.
You can also do several of these yourself, immediately, without asking: remove a channel and its whole history from Settings, change your notification preferences there, export your content data as CSV or XLSX from Campaigns, or change your cookie choice from the link in the footer.
If you think we have handled your data badly, please tell us first — but you have the right to complain to a supervisory authority regardless. In the UK that is the Information Commissioner's Office (ico.org.uk).
Where your data goes
Our providers may process data outside the UK and EEA. Where they do, the transfer relies on the receiving country having an adequacy decision, or on standard contractual clauses in our agreement with that provider.
Automated decisions
None. The CO2e figures are calculated automatically, but they are estimates presented to you — nothing decides anything about you, and no profiling is done.
Changes
If we change this notice we will update the date at the top, and for anything that materially affects you we will tell account holders directly rather than relying on you re-reading this page.