Privacy Policy

1. Who we are

ReachOutEasy (reachouteasy.com and app.reachouteasy.com) is a software-as-a-service platform owned and operated by EORBITAL FZ LLC, United Arab Emirates ("EORBITAL", "we", "us"). This policy explains how we collect, use, share and protect personal data when you visit our website or use the ReachOutEasy platform.

Contact for all privacy matters: support@reachouteasy.com

2. Our role: controller and processor

• Data controller — EORBITAL FZ LLC is the controller for data about our own customers: account holders, their team users, billing details and website visitors.
• Data processor — For the contacts our customers import and message, and the content of those WhatsApp conversations, the customer (the business using ReachOutEasy) is the controller. EORBITAL processes that data only on the customer's instructions to provide the service.

3. Data we collect

3.1 Account and business data

• Business name, contact name, email address, phone number
• User login details (passwords are stored only as one-way hashes)
• Billing information — card payments are handled by our payment processor; we do not store full card numbers
• Records of when you accepted our Terms and this Privacy Policy

3.2 WhatsApp Business Platform data

When a customer connects their WhatsApp Business Account (WABA) to ReachOutEasy through Meta's Embedded Signup, we process:

• Account identifiers — the customer's Meta business portfolio ID, WABA ID, phone number ID, display name and phone number, plus the access token Meta issues to us to manage that account on the customer's behalf (stored encrypted)
• Message templates — templates the customer creates and their Meta approval status
• Messages — outgoing messages sent by the customer, incoming messages from the customer's own contacts, and media attached to them
• Delivery data — sent, delivered, read and failed statuses and timestamps received via Meta webhooks
• Contact data — recipients' WhatsApp phone numbers, profile names and any fields the customer adds, including opt-in and opt-out status

We use WhatsApp data only to provide the service to the customer who connected that account: sending their messages, showing their conversations in their team inbox, running their auto-replies and showing their delivery reports. We do not use it for advertising, we do not sell it, and we do not share it with other customers.

3.3 Usage and technical data

• IP address, browser and device information, login times
• API request logs, error logs and security events

4. How we use data

• To provide, operate, secure and support the ReachOutEasy platform
• To send service emails (account verification, billing receipts, security alerts)
• To detect and prevent spam, fraud and misuse, including enforcing opt-in and opt-out rules
• To screen messages written by our customers' team members against conduct rules (for example abusive language, harassment, or requests for OTPs or payment to personal accounts). When a message matches, we block or record it and alert the customer's admins and our platform team. See section 7 of our Terms of Service.
• To meet legal, tax and accounting obligations

Legal bases (where GDPR or similar laws apply): performance of a contract, legal obligation, legitimate interests (security, fraud prevention, service improvement) and consent (marketing emails, which you can withdraw at any time).

5. Who we share data with

• Meta Platforms (WhatsApp) — message content and recipient numbers are sent through the WhatsApp Business Platform (Cloud API) so messages can be delivered. Meta's own terms and privacy policy apply to its processing.
• Payment processor — to take subscription payments.
• Hosting and infrastructure providers — servers, databases, email delivery and backups, under confidentiality and data-protection obligations.
• Authorities — only where required by law or to protect the safety of people or the service.

We do not sell personal data.

6. Opt-in and customer responsibilities

Customers may only message people who have opted in to receive WhatsApp messages from them, and must use Meta-approved templates for business-initiated messages. Customers must honour opt-out requests; ReachOutEasy automatically marks a contact as opted out when they reply with STOP. See our Terms of Service.

7. How long we keep data

• Account data — while the account is active, then up to 90 days after closure
• Contacts, messages and templates — until the customer deletes them or closes their account; deleted within 90 days of closure
• Security and audit logs — up to 12 months
• Conduct records (flagged team-member messages and their review) — up to 12 months, or longer while a dispute or legal matter is open
• Billing records — as long as tax and accounting law requires

8. Deleting your data

You can ask us to delete your account and associated data, including WhatsApp data, at any time. See Data Deletion Instructions. If you are a contact of one of our customers, please contact that business first. You can also write to us and we will forward your request.

9. Your rights

Depending on where you live (including under GDPR, the UAE PDPL and India's DPDP Act), you may have the right to access, correct, delete, export or restrict the use of your personal data, to object to processing, and to withdraw consent. To exercise any of these rights, email support@reachouteasy.com. We reply within 30 days. You may also complain to your local data-protection authority.

10. Security

We use TLS encryption in transit, encrypt access tokens and secrets at rest, restrict access by role, log administrative actions, rate-limit logins, and verify the signature of every webhook Meta sends to us.

11. International transfers

Our servers and service providers may be located outside your country. When we transfer personal data internationally, we use appropriate safeguards such as contractual data-protection clauses.

12. Cookies

The website uses a small number of cookies to remember your cookie choice and understand site traffic. The ReachOutEasy app uses only essential cookies needed for sign-in and security. We do not use advertising cookies.

13. Changes to this policy

We may update this policy. If we make material changes, we will notify account holders by email or in the app. The date at the top shows the latest version.

14. Contact

EORBITAL FZ LLC — https://e-orbital.com
Email: support@reachouteasy.com