Privacy

Your account: your name, your email address, and either a password we store hashed or a link to the Google account you signed in with.

The country you signed up from, worked out the same way as above and recorded once. It tells us which countries the product is reaching; it is not updated as you travel, and it is never narrower than a country.

Your sender profile, because the drafting tool needs it: what you sell, your price range, proof you can cite, who you target, your preferred call to action, your sign-off, the tone and language you want, and any examples of your own writing you paste in to have your voice matched.

What you do in the product: the areas and trades you scan, the businesses you reveal, notes you write on them, the messages drafted for you, and a ledger of every credit granted and spent.

Your sessions, so you stay signed in. That record includes the IP address and browser the session was created from.

Payment records: the amount, currency and status of each checkout, plus the identifiers Bachs gives us so we can match a payment to your account.

We count how often each page is opened, from which country, and what sent you here. One number per page, per day, per country, per source.

No visitor identifier, no IP address and no session is recorded against a page view, which means we cannot tell who viewed what — only that a page was viewed, roughly where from, and roughly what led to it. Admin pages are excluded entirely.

The country comes from the network that delivers the page, which has to know where to send it. We do not read or keep the address it worked that out from, and we never narrow it below a country.

The source is a label, not a link. Your browser tells every site you visit which page you came from; we turn that into one word from a fixed list — “google”, “linkedin”, “direct” — and store only the word. The address itself is never written down, so anything it carried, including what you searched for, is discarded rather than kept. Nothing about this identifies you, and it is recorded once per visit rather than as you move around.

Bachs processes payments. They receive your email and name to attach to a checkout, and they handle card details directly — those never reach us.

Google Gemini drafts messages. The request sent to it contains your sender profile and a brief about the business being written to. It does not contain your password, your payment details or your other leads.

Resend sends transactional email, such as a password reset, when email is configured.

Vercel hosts the application and our database provider stores the data. Both see it in the ordinary course of running the service.

That is the whole list. We do not sell your data, we do not share it for advertising, and we do not use one customer’s leads or notes to serve another.

Account data, leads and notes are kept while your account exists, because a revealed lead staying yours is something we promise.

Payment records are kept as long as we need them for accounting.

Cached business listings are refreshed on a rolling window and re-fetched when stale.

Ask us to delete your account and we delete it, along with the organisation it belongs to and everything in it: scans, leads, notes, drafted messages and credit history.

You can ask what we hold about you, ask for a copy, ask us to correct it, or ask us to delete it.

Your sender profile and notes are editable in the product at any time.

Passwords are stored hashed, never in a form we could read. Connections are encrypted in transit. Access to the production database is limited to the people who run the service.

Every part of the product scopes data to one organisation, so one customer’s leads are not reachable from another’s account. The one exception is a staff view of platform totals, which exists to run the business and is restricted to a specific account rather than to a role anybody can obtain.

Map tiles are served by OpenFreeMap and carry their own attribution on the map itself.

If we start collecting something new, or send data somewhere new, this page changes and the date at the top changes with it.