Legal
Privacy Policy
Last updated: May 11, 2026 · Effective: May 11, 2026
NgsReach ("we", "us", or "our") operates ngsreach.com and the associated dashboard, API, and related services (collectively, the "Service"). This Privacy Policy explains what information we collect, how we use it, and your rights regarding that information. By using the Service, you agree to the practices described here.
Information We Collect
We collect information in the following categories:
Account information
- Name, email address, and profile picture provided through our authentication provider when you create an account.
- Password credentials are managed exclusively by our authentication provider (Clerk) — we never store raw passwords.
Workspace and usage data
- Workspaces, campaign names, template content, and configuration settings you create or upload.
- Log data: IP addresses, browser type, pages visited, and actions taken within the dashboard, used for security and improving the Service.
- Error reports and performance metrics to identify and fix issues.
Email delivery data
- Delivery logs and statistics for campaigns you send, including delivery status, bounce classifications, open and click events (where available from your email provider), and unsubscribe actions.
- This data is generated from campaigns you operate and is stored in your workspace.
Subscriber data (processed on your behalf)
When you import or add subscribers to your workspace, that data (email addresses, names, custom fields, and subscription status) is stored by NgsReach on your behalf. See Section 4 for your responsibilities regarding this data.
Payment data
NgsReach is currently free during Early Access. We do not collect payment card information at this time.
How We Use Your Information
We use the information we collect to:
- Create and maintain your account and workspaces.
- Provide, operate, and improve the Service.
- Send you transactional emails related to your account (e.g., authentication emails, account notifications). We do not send marketing emails without your explicit consent.
- Generate delivery reports and analytics for your campaigns.
- Detect and prevent fraud, abuse, and security incidents.
- Comply with legal obligations.
We do not sell your personal data. We do not use your data or your subscribers' data for advertising purposes.
Third-Party Services We Use
The Service relies on the following third-party providers to operate. Each has its own privacy policy, and by using NgsReach you acknowledge that data may be processed by these providers:
Authentication (Clerk)
We use Clerk for user authentication and session management. Clerk processes your email address, name, and authentication credentials. Refer to Clerk's Privacy Policy.
Email delivery (your choice)
NgsReach connects to the email provider you configure in your workspace settings (e.g., Resend, AWS SES, or a custom SMTP provider). When you send a campaign, your subscriber data is transmitted to that provider to deliver the emails. The email provider you choose processes subscriber data under their own terms. You are responsible for reviewing and accepting those terms.
Asset storage (AWS S3, optional)
If you upload images or files through the asset manager, they are stored in Amazon Web Services S3. AWS processes this data under their Privacy Notice.
Subscriber Data — Your Responsibilities
As the data controller, you are solely responsible for:
- Having a valid lawful basis (e.g., consent, legitimate interest) for collecting and emailing each subscriber.
- Complying with applicable email marketing laws, including but not limited to GDPR, CAN-SPAM, CASL, and any other regulations applicable in the jurisdictions where your subscribers reside.
- Providing clear opt-in mechanisms and honouring unsubscribe requests promptly. NgsReach provides a built-in unsubscribe mechanism; you are responsible for ensuring its correct use.
- Executing data processing agreements with your subscribers where required.
- Responding to data subject requests (access, deletion, correction) relating to your subscribers' data. Contact us at [email protected] if you need us to assist with deletion from our storage systems.
Data Security
We implement industry-standard technical and organisational measures to protect your data, including encrypted transport (TLS), access controls, and encrypted storage of sensitive credentials (such as API keys and SMTP passwords stored per workspace).
However, no system is completely secure. We cannot guarantee that unauthorised third parties will never be able to defeat our security measures. You use the Service at your own risk.
Data Retention
We retain your account and workspace data for as long as your account is active. If you delete your account, we will delete or anonymise your personal data within a reasonable period, except where we are required to retain it by law.
Delivery logs and campaign statistics are retained for the duration of your account to allow you to review historical performance.
You may request deletion of your account and associated data at any time by contacting [email protected].
Cookies and Tracking
We use a limited number of cookies necessary to operate the Service. For full details, see our Cookie Policy.
We do not use advertising or cross-site tracking cookies.
Your Rights
Depending on your jurisdiction, you may have rights regarding your personal data, including the right to access, correct, or delete information we hold about you. To exercise any of these rights, contact us at [email protected].
If you are in the European Economic Area, you have the right to lodge a complaint with your local data protection authority.
Children's Privacy
The Service is not directed to individuals under the age of 16. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us immediately.
Changes to This Policy
We may update this Privacy Policy from time to time. We will notify registered users of material changes via email or a prominent notice in the dashboard. Continued use of the Service after changes constitutes your acceptance of the updated policy.
Contact
For privacy-related questions or requests, contact us at: