This Privacy Policy explains how BeReach handles personal data in connection with the BeReach service (the "Service"), available at bereach.ai. It should be read together with our Terms of Service.
1. Who we are
BeReach is operated by BEREACH SAS, a société par actions simplifiée (SAS) registered in Paris, France ("BeReach", "we", "us"). Our full company identification is available in our Legal Notice.
For any privacy matter, contact us at ben@berea.ch.
2. The two roles, and why they matter
BeReach handles personal data in two very different capacities. Please read this section first, it frames everything else.
a. Data about you, our customer (we are the controller). When you create an account, subscribe and use the Service, we process your own personal data (see section 3). For this data, we decide the purposes and means, so we are the data controller.
b. Prospect data you source and use (you are the controller). When you use the Service to source prospect data from third-party providers and to run outreach through your own connected account, you decide who is contacted and why. For that data, you are the data controller and you are responsible for having a lawful basis and for informing the relevant individuals. BeReach acts only as a tool and, where applicable, a processor on your behalf, under our Terms of Service and, where relevant, our Data Processing Agreement. We do not store this prospect data.
3. Data we process about you (our customer)
We process the following about account holders:
- Account data: name, email address, login details.
- Billing data: subscription and payment information, handled through our payment provider Stripe. We do not store full card details ourselves.
- Usage and technical data: log data, device and connection information, needed to operate and secure the Service.
- Support data: what you send us when you contact us.
Purposes and legal bases (GDPR Art. 6):
- Providing the Service and managing your account: performance of our contract with you.
- Billing and fraud prevention: contract and legitimate interests.
- Security, service improvement and communication about the Service: legitimate interests.
- Marketing emails, where required: your consent, which you can withdraw at any time.
4. Prospect data (data about the people you contact)
The prospect data used in the Service is sourced from third-party public-data providers and/or provided by you, and is processed through your own connected account. You are the controller of this data. You are responsible for ensuring you have a lawful basis to process it and for providing any privacy information required to the individuals concerned.
We do not store prospect data or your Third-Party Platform access credentials on our servers; they are processed in transit to provide the Service and are not retained.
If you are an individual who has been contacted through a customer's use of BeReach and you wish to exercise your rights, please contact that customer (the controller). We will assist them in responding, and you may also contact us at ben@berea.ch.
5. Sub-processors and third parties
We rely on a limited set of providers to run the Service. As of the date of this policy:
- Payments: Stripe.
- Hosting / infrastructure: Vercel.
- Third-party public-data providers: the source of public prospect data.
- Email / communication: Resend.
- Analytics: PIMMS, Vercel Analytics and Vercel Speed Insights.
- Tag management: Google Tag Manager (Google Ireland Ltd), loaded only after you accept analytics/advertising cookies.
- Advertising measurement: Meta Pixel / Conversions API (Meta Platforms, Inc.) and Google Ads conversion tracking (Google Ireland Ltd), used to measure our own ad campaigns and loaded only after you accept advertising cookies.
A current and complete list of sub-processors is available on our Sub-processors page.
6. International transfers
Where personal data is transferred outside the EEA, we rely on appropriate safeguards (such as Standard Contractual Clauses).
7. Retention
We keep your customer account and billing data for as long as you have an account, and thereafter only as required by law (for example, accounting obligations). We do not retain prospect data or session credentials.
8. Your rights
Under the GDPR you have the right to access, rectify, erase, restrict, port and object to the processing of your personal data, and to lodge a complaint with your supervisory authority (in France, the CNIL). To exercise these rights regarding data we control (your customer data), contact ben@berea.ch. For prospect data, the relevant controller is our customer, as explained in section 2.
9. Security
We implement appropriate technical and organisational measures to protect personal data. No system is perfectly secure, but we take reasonable steps to safeguard the data we process.
10. Changes
We may update this policy; material changes will be notified. This version is dated July 13, 2026.