Privacy Policy
Last updated: October 30, 2026
1. Responsibility and contact
ReachOut’s sole owner is responsible for personal information under ReachOut’s control. Send privacy questions, requests and complaints to the Owner and Privacy Officer at ReachOut’s existing support email, linked below.
2. Information collected and purposes
Account details support registration, sign-in and account management. Profile names, profession, email, telephone, photographs, colors and links support digital profiles. Order selections, artwork, engraving, shipping details and payment status support card production, payment verification, delivery and customer service. Contact exchanges collect the visitor’s name, email and optional telephone number for the chosen profile owner. Support messages and AI-chat conversations are processed to respond to requests. Technical requests to the app and external media services can also involve IP addresses, device/browser information and request logs.
3. Public information and contact exchanges
Saved digital profiles are public to anyone who accesses their link, including via a physical card. Profile photos are uploaded to public storage and may be accessible directly by URL. Public information may be copied or shared by others. Custom order logos are uploaded privately for fulfillment. When a visitor submits a contact exchange with consent, the selected profile owner receives those details and is responsible for their subsequent use. Do not provide confidential or sensitive information in a public profile or AI chat.
4. Providers and recipients
Base44 supports hosting, accounts, stored app data and AI-assisted support. Stripe processes checkout and payments; payment credentials are entered with Stripe rather than stored in ReachOut profile records. Google Sheets is used for order tracking and Gmail for order communications. Shipping providers receive information needed to deliver orders. External image and icon hosts, booking sites, review sites and social platforms receive requests when their resources are loaded or their links are opened. Their own policies also apply. ReachOut remains responsible for personal information under its control when using providers.
5. Processing outside Québec
Providers may process personal information outside Québec. Exact processing countries, subprocessor locations and provider-specific retention periods have not been confirmed in this notice. Contact the Privacy Officer for information about a particular transfer. This notice does not represent that information stays in Québec or Canada, or that a privacy impact assessment has already been completed.
6. Cookies, local storage and analytics
The app stores language and country/currency preferences in your browser and temporarily stores an unfinished customization draft for continuity. Authentication also uses browser storage to maintain sign-in. Clearing storage may reset preferences or sign you out. Our cookie banner saves your optional-storage choice in your browser and communicates it through Google Consent Mode. You can accept or decline optional cookies and change your choice through Cookie settings. Essential storage remains available regardless of this choice. Accepting does not enable the app analytics that ReachOut has disabled. ReachOut has chosen to disable optional visitor tracking and has disabled analytics in the app’s client configuration. Session recording is controlled separately by the hosting platform; its disabled status has not yet been confirmed. Platform page-view and sign-in events may continue even when app analytics is disabled. This does not disable operational or security logs, or third-party processing needed for requested services. This policy is not consent to optional tracking, and no claim is made that visiting the app is tracking-free.
7. Retention and deletion
Specific retention schedules for accounts, orders, uploads, contact exchanges, conversations, logs and backups have not yet been confirmed in this notice. We do not promise a fixed deletion deadline. You may request deletion or account closure; legal accounting obligations, disputes and provider backup processes may limit immediate erasure. Applicable law requires information no longer needed for its purposes to be destroyed or lawfully anonymized, subject to required retention. Ask the Privacy Officer which records must be retained and why.
8. Your choices and rights
You may edit your profile information in the account tools and choose what to publish. You may request access, correction, deletion where available, withdrawal of consent for consent-based uses, and a copy in a structured, commonly used technological format where the law provides it. Send a written request to the Privacy Officer identifying the information concerned; proportionate identity verification may be needed. Access and correction requests are subject to the statutory 30-day response period and lawful exceptions. Withdrawal may prevent us from providing a feature that needs the information.
9. Security, incidents and complaints
No online service can guarantee absolute security. Do not send passwords or payment-card details in support messages. Report suspected unauthorized access or a privacy incident to the Privacy Officer. Applicable law requires assessment of confidentiality incidents and notification to the Commission d’accès à l’information and affected individuals where there is a risk of serious injury, as well as required incident records. You may complain to the Privacy Officer or seek recourse from the Commission d’accès à l’information du Québec. This notice does not claim a security certification or a verified internal incident-management process.
10. Policy updates
The date above identifies this version. Changes will be reflected on this page, with additional notice or consent where required. Continued browsing alone does not provide consent for a new use that legally requires separate consent.
ReachOut
Owner and Privacy Officer, ReachOut
Laval, Quebec, Canada
reachoutlivesupport@gmail.com