Privacy

Your account: your name, your email address, and either a password we store hashed or a link to the Google account you signed in with.

Your sender profile, because the drafting tool needs it: what you sell, your price range, proof you can cite, who you target, your preferred call to action, your sign-off, the tone and language you want, and any examples of your own writing you paste in to have your voice matched.

What you do in the product: the areas and trades you scan, the businesses you reveal, notes you write on them, the messages drafted for you, and a ledger of every credit granted and spent.

Your sessions, so you stay signed in. That record includes the IP address and browser the session was created from.

Payment records: the amount, currency and status of each checkout, plus the identifiers Bachs gives us so we can match a payment to your account.

We count how often each page is opened, and that is all. One number per page per day.

No visitor identifier, no IP address, no referrer and no session is recorded against a page view, which means we cannot tell who viewed what — only that a page was viewed. Admin pages are excluded entirely.

Bachs processes payments. They receive your email and name to attach to a checkout, and they handle card details directly — those never reach us.

Google Gemini drafts messages. The request sent to it contains your sender profile and a brief about the business being written to. It does not contain your password, your payment details or your other leads.

Resend sends transactional email, such as a password reset, when email is configured.

Vercel hosts the application and our database provider stores the data. Both see it in the ordinary course of running the service.

That is the whole list. We do not sell your data, we do not share it for advertising, and we do not use one customer’s leads or notes to serve another.

Account data, leads and notes are kept while your account exists, because a revealed lead staying yours is something we promise.

Payment records are kept as long as we need them for accounting.

Cached business listings are refreshed on a rolling window and re-fetched when stale.

Ask us to delete your account and we delete it, along with the organisation it belongs to and everything in it: scans, leads, notes, drafted messages and credit history.

You can ask what we hold about you, ask for a copy, ask us to correct it, or ask us to delete it.

Your sender profile and notes are editable in the product at any time.

Passwords are stored hashed, never in a form we could read. Connections are encrypted in transit. Access to the production database is limited to the people who run the service.

Every part of the product scopes data to one organisation, so one customer’s leads are not reachable from another’s account. The one exception is a staff view of platform totals, which exists to run the business and is restricted to a specific account rather than to a role anybody can obtain.

Map tiles are served by OpenFreeMap and carry their own attribution on the map itself.

If we start collecting something new, or send data somewhere new, this page changes and the date at the top changes with it.