GillyReachGillyReach

Privacy Policy

GillyReach, Inc.

Last updated: June 12, 2026

Google API Disclosure

GillyReach's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

GillyReach provides company research, contact intelligence, email drafting, and sequencing tools that help users manage outreach workflows across connected platforms.

GillyReach, Inc. ("GillyReach," "we," "our," or "us") values your privacy. This Privacy Policy explains how we collect, use, disclose, and protect personal information when you use our website, platform, and related services (collectively, the "Services").

By using GillyReach, you agree to the practices described in this Privacy Policy.

1. Scope

This Privacy Policy applies to information we collect through:

  • our website,
  • our application and platform,
  • integrations you connect to GillyReach,
  • communications with us,
  • and information we collect in connection with providing research, outreach, and sequencing tools.

It does not apply to third-party websites, services, or platforms that are not controlled by GillyReach.

2. Information We Collect

We may collect the following categories of information:

A. Information you provide directly

When you use GillyReach, you may provide:

  • your name,
  • email address,
  • company name,
  • account login details,
  • billing information,
  • campaign settings,
  • prompts, notes, and workflow inputs,
  • email drafts, templates, and outreach content,
  • messages you send through connected integrations,
  • support requests and other communications with us.

B. Contact, company, and research data

GillyReach does not collect all business contact information directly from individuals. In many cases, we receive, license, purchase, access, enrich, or derive business contact and company information from third-party providers, public sources, customer-provided data, and integrations. We use this information to provide business research, prospecting, enrichment, outreach, and campaign workflow tools.

Business and professional data we process may include, depending on the source and use case:

  • name;
  • business email address;
  • phone number;
  • mailing address or business address;
  • employer or company affiliation;
  • job title, role, department, seniority, and professional function;
  • company name, domain, industry, size, location, revenue range, and other firmographic attributes;
  • social or professional profile URLs;
  • publicly available professional profile information;
  • inferred professional attributes, such as likely role, persona, industry fit, or relevance to a campaign;
  • enrichment, validation, deliverability, and data quality signals;
  • source, timestamp, and provenance metadata;
  • research notes and AI-generated summaries;
  • and other professional or business-context information.

C. Connected account and integration data

If you connect third-party services such as Gmail, Microsoft Outlook, Smartlead, HeyReach, or other integrations, we may access and process information needed to provide the Services, including:

  • account identifiers,
  • email metadata,
  • email content and threads,
  • draft content,
  • sending history,
  • mailbox connection status,
  • token and authentication information,
  • contact or campaign sync data,
  • and sequencing or outreach activity.

We only access the data necessary to provide the features you enable.

D. Automatically collected information

When you use the Services, we may automatically collect:

  • IP address,
  • browser type,
  • device information,
  • operating system,
  • usage logs,
  • pages viewed,
  • session data,
  • timestamps,
  • referring URLs,
  • and product interaction events.

We may use cookies, local storage, and similar technologies for authentication, performance, analytics, and product functionality.

3. How We Use Information

We use information we collect to:

  • provide, operate, and improve GillyReach,
  • create and manage user accounts,
  • research companies and contacts,
  • generate and assist with writing emails,
  • power sequencing, automation, and outreach workflows,
  • send messages through connected email providers and integrations,
  • synchronize activity with connected services,
  • verify contacts and improve deliverability,
  • provide analytics, reporting, and campaign insights,
  • personalize user experience,
  • maintain security and prevent fraud, abuse, or misuse,
  • troubleshoot issues and provide customer support,
  • comply with legal obligations,
  • and enforce our Terms and other platform policies.

4. Marketing and Outreach Data

GillyReach may use business contact, company, address, enrichment, and research data to help users identify prospective business contacts, build audience lists, personalize outreach, invite recipients to events, verify deliverability, manage suppression lists, and measure campaign activity.

GillyReach is designed for business-to-business outreach. Our tools are not intended for targeting consumers based on sensitive personal characteristics, and we do not knowingly facilitate outreach to individuals in their personal (non-professional) capacity.

Users are responsible for reviewing and approving their campaigns and for ensuring that their use of GillyReach complies with applicable marketing, privacy, anti-spam, financial services, and industry-specific rules, including rules governing registered investment advisers and broker-dealers where applicable.

5. How Connected Email Data Is Used

If you connect Gmail or Microsoft Outlook to GillyReach, we may use authorized access to:

  • send emails and schedule outbound messages on your behalf,
  • save or manage message drafts,
  • read authorized mailbox data needed to support reply handling, thread continuity, and sequencing workflows,
  • detect responses related to outreach sent through GillyReach,
  • and display or analyze outreach performance inside the platform.

GillyReach does not use Google Workspace APIs to develop, improve, or train generalized AI or machine learning models unrelated to providing the user-facing functionality you request.

Google Workspace and Google Account Data

If you connect your Google account to GillyReach, GillyReach may access and process certain Google account data and data obtained through Google Workspace APIs that you authorize through Google's OAuth consent flow. Depending on the features you use, this may include your Google account identity information, email metadata, draft content, sent messages, reply-thread data, and other data necessary to provide GillyReach's drafting, sending, sequencing, reply detection, and workflow continuity features.

GillyReach uses Google account data and data obtained through Google Workspace APIs only to provide and support user-facing features that are visible and prominent within the GillyReach application, such as drafting emails, sending emails, scheduling outbound sequences, detecting replies, and maintaining continuity within workflows initiated or managed through GillyReach.

GillyReach does not sell Google account data or data obtained through Google Workspace APIs. GillyReach does not use such data for advertising, including personalized, retargeted, or interest-based advertising. GillyReach does not use such data to determine creditworthiness or for lending purposes.

GillyReach does not use Google account data or data obtained through Google Workspace APIs to train generalized artificial intelligence or machine learning models. Any processing of such data is limited to providing the user-requested functionality within GillyReach.

GillyReach may store authorized Google account connection information, including OAuth tokens and related account metadata, and may store or cache limited data obtained through Google Workspace APIs as necessary to provide the requested features, maintain workflow state, support thread continuity, secure the Services, prevent abuse, and comply with legal obligations.

GillyReach does not transfer Google account data or data obtained through Google Workspace APIs to third parties except as necessary to provide the user-requested functionality, for security purposes, to comply with applicable law, or as otherwise permitted by the Google API Services User Data Policy.

GillyReach personnel do not access the content of Google account data or data obtained through Google Workspace APIs except with the user's explicit request or consent, when necessary for security, fraud prevention, abuse investigation, technical troubleshooting, or where required by law.

If you disconnect your Google account from GillyReach, GillyReach will stop new access to Google account data and data obtained through Google Workspace APIs through that connection, subject to any retained records necessary for security, compliance, dispute resolution, or operation of user-requested workflows already in progress.

6. Legal Bases for Processing

Depending on your location, we may process personal information on one or more of the following bases:

  • your consent,
  • performance of a contract,
  • compliance with legal obligations,
  • and our legitimate interests, such as operating, securing, and improving the Services.

7. How We Share Information

We may share information in the following circumstances:

A. Service providers and subprocessors

We may share information with vendors and service providers that help us operate the Services, such as:

  • hosting providers,
  • infrastructure providers,
  • analytics providers,
  • payment processors,
  • authentication providers,
  • email and messaging providers,
  • contact verification vendors,
  • enrichment providers,
  • CRM and outreach integrations,
  • and customer support tools.

B. Connected integrations

If you choose to connect third-party services, information may be shared with and received from those services as needed to perform the requested workflow.

C. Business transfers

If GillyReach is involved in a merger, acquisition, financing, reorganization, sale of assets, or similar transaction, information may be transferred as part of that transaction.

D. Legal and safety reasons

We may disclose information if required to do so by law, subpoena, legal process, or if we believe disclosure is reasonably necessary to:

  • comply with law,
  • protect our rights,
  • investigate fraud or abuse,
  • enforce our agreements,
  • or protect the safety of users or others.

E. With your direction

We may share information when you instruct us to do so or when you intentionally use a feature that requires such sharing.

F. Potential sale or sharing disclosures

Depending on applicable law, some disclosures of business contact information to customers, service providers, or partners may be considered a "sale," "sharing," or disclosure of personal information under applicable privacy law. Where required, GillyReach provides individuals the ability to opt out of such uses by contacting support@gillyreach.io or submitting a request at gillyreach.io/opt-out.

8. Data Sources

GillyReach obtains business and professional contact information from several categories of sources, including:

  • information provided by users and customers;
  • licensed third-party business data providers, including providers of company, professional contact, email, phone, mailing address, firmographic, and demographic data;
  • data enrichment providers that append, verify, normalize, or update contact, company, address, and firmographic information;
  • publicly available websites and online sources;
  • professional and social networking sources, where permitted by applicable law and provider terms;
  • connected integrations, such as email, CRM, sequencing, or outreach tools; and
  • AI-generated summaries, classifications, and research outputs derived from the foregoing sources.

GillyReach works with a variety of third-party data providers and enrichment services, which may change over time. These providers may include business contact data licensors, address and identity enrichment providers, and data collection or enrichment providers that obtain publicly available professional profile information from public web sources.

9. Data Retention

We retain information for as long as reasonably necessary to:

  • provide the Services,
  • maintain account functionality,
  • comply with legal obligations,
  • resolve disputes,
  • enforce agreements,
  • and support legitimate business and security needs.

GillyReach may store licensed, enriched, verified, or publicly available business contact and company data in our internal databases, search indexes, and infrastructure systems to provide company research, contact discovery, enrichment, suppression, compliance, and outreach workflow functionality.

Retention periods may vary depending on the type of information, the feature used, and applicable legal requirements.

10. Security

We use reasonable administrative, technical, and organizational safeguards designed to protect personal information. However, no internet transmission or storage system is completely secure, and we cannot guarantee absolute security.

10a. Data Breach Notification

In the event of a security incident involving unauthorized access to, or disclosure of, personal information or prospect data maintained by GillyReach, we will:

  • Investigate promptly. Upon becoming aware of a potential security incident, GillyReach will promptly assess the nature and scope of the incident.
  • Notify affected parties within 72 hours. Consistent with applicable law and our contractual commitments, GillyReach will provide notice of a confirmed data breach to relevant parties — including financial advisors, customers, and applicable regulators — within 72 hours of determining that a breach has occurred, to the extent practicable.
  • Provide meaningful notice. Notice will describe, to the extent known, the nature of the incident, the categories of information involved, and steps being taken to address the breach and prevent recurrence.

Individuals whose personal information may have been affected by a breach may receive direct notification as required by applicable law. If you believe your information has been compromised, please contact us at support@gillyreach.io.

GillyReach complies with applicable federal and state data breach notification requirements, including, where applicable, the requirements of SEC Regulation S-P.

11. Sensitive Information and Restricted Targeting

GillyReach is designed for business and professional use. We do not knowingly use sensitive personal information — such as health status, religion, ethnicity, precise geolocation, children's information, financial account information, creditworthiness, insurance eligibility, employment eligibility, housing eligibility, or similar sensitive categories — to build outreach audiences unless expressly authorized by law and by written agreement.

Users may not use the Services to make decisions about credit, lending, insurance, employment, housing, or other regulated eligibility determinations.

12. Privacy Choices and Do Not Contact

Individuals may request to:

  • opt out of future outreach,
  • suppress their email address or mailing address,
  • request deletion of personal information we maintain,
  • request correction of inaccurate information,
  • or ask for information about the source of their data.

To submit any of these requests, contact support@gillyreach.io or visit gillyreach.io/opt-out.

If we receive an opt-out or do-not-contact request, we may retain limited information necessary to maintain suppression records and prevent future outreach.

Where appropriate, we may direct individuals to the relevant third-party data provider's privacy request process or forward requests to such providers when required by law, contract, or our internal procedures. Note that opting out from GillyReach controls our use of your information; it does not automatically remove your data from third-party providers' databases. You may separately contact those providers to exercise your rights under their respective privacy policies.

Depending on your location, you may also have rights under applicable privacy law, including the right to:

  • access,
  • correct,
  • delete,
  • restrict,
  • object,
  • or request portability of certain information.

To exercise any of these rights, contact us at support@gillyreach.io.

13. Cookies and Similar Technologies

We may use cookies and similar technologies to:

  • keep you signed in,
  • remember preferences,
  • analyze usage,
  • improve performance,
  • and support security and fraud prevention.

You can control cookies through your browser settings, but some features may not function properly if cookies are disabled.

14. International Data Transfers

Your information may be processed and stored in countries other than your own. Where required, we take steps designed to provide appropriate safeguards for cross-border data transfers.

15. Children's Privacy

GillyReach is intended for business and professional use and is not directed to children under 13. We do not knowingly collect personal information from children.

16. Third-Party Services

Our Services may link to or integrate with third-party services. Their privacy practices are governed by their own policies, and we are not responsible for those third-party practices.

17. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we will update the "Last updated" date and may provide additional notice where required.

18. Additional Product Disclosures

Depending on how you use GillyReach, the following may also apply:

  • Uploaded lists. If you upload CSV files or contact lists, we process that information to run campaigns, enrichment, verification, and related workflows you initiate.
  • AI-assisted features. We may use AI and machine learning subprocessors to process prompts, drafts, research outputs, and similar content to deliver product features you use. Such processing is subject to our agreements with those providers and this Policy.
  • Marketing engagement metrics. Where available and permitted, campaign reporting may include signals such as opens, clicks, replies, or other engagement indicators. Availability and implementation depend on your settings, integrations, and applicable provider capabilities.
  • Address enrichment. Where enabled, GillyReach may use third-party providers to append or verify mailing address information associated with business contacts. This enriched address data may be used for postal outreach, event invitations, and suppression workflows.

19. Contact Us

If you have questions or requests regarding this Privacy Policy, contact us at:

GillyReach, Inc.
1700 Washington Ave
Golden, CO 80401

Email: support@gillyreach.io
Website: https://gillyreach.io