Privacy Policy
Last updated October 10, 2026
Reach is a young product. It is evolving quickly, and these terms and practices may change as it does. When they change we will update the date above, and your continued use means you accept the update.
Reach ("Reach", "we", "us"), a service by Vine AI, finds jobs for you and applies to them on your behalf. This policy explains what we collect, how we use it, who we share it with, and the choices and rights you have. We will update this policy as the product matures and will note the date above.
What we collect
Account details. When you sign up we use Clerk to handle sign-in, which gives us your name and email address and manages your login.
Profile and resume data. The resume, work history, skills, and job preferences you add to each persona, the contact details you provide, and the answers you give to employer application questions. This is the information we use to match you to jobs and to apply for you. If you choose to set accessibility preferences such as a preference for disability-inclusive employers or Schedule A eligibility, we use them only to filter and source matches; they are never written into your resumes, cover letters or application answers.
Application materials we generate. The tailored resumes and cover letters we produce for specific jobs from your profile data, which we store so you can review, download, and reuse them.
Your Reach apply address and its mail. We create a dedicated email address for you on a domain we operate and use it as your contact on applications. We receive and process the mail sent there (verification codes, job alerts, and recruiter replies) and we keep a record of the application emails we send from it on your behalf.
Billing data. If you buy a paid plan, payment is handled by Stripe. We never see or store your full card number; we keep only a Stripe customer and subscription reference and a record of payments and refunds.
Usage data. Basic logs and metrics needed to run, secure, and improve the service. Our marketing pages use first-party, cookieless view counting: we record the page, the referring site, and a one-way hash that resets daily, so we can count visitors without storing your IP address or tracking you across days or sites. No third-party analytics or advertising trackers are used.
What we do not collect
We never access your personal email inbox. We only ever see messages sent to the Reach apply address we provide. We do not sell your personal information.
Sensitive and demographic data
Many applications include optional equal-employment-opportunity and diversity questions (for example race, ethnicity, gender, disability, or veteran status). Reach always answers these with "decline to self-identify." We do not ask you for this information, and we do not collect, store, or process this kind of special-category data.
The Reach Autofill browser extension
The optional Reach Autofill extension fills employer application forms in your browser with the profile data and application materials described above, fetched from your Reach account. It sends back to Reach the details of the job posting you are applying to and the outcome of the fill so your application history stays accurate. Passive job capture on job-board sites is strictly opt-in, off by default, and only records job postings, never your browsing. The extension does not collect your browsing history, does not read pages beyond the application forms and job postings you use it on, and sends data only to Reach. We do not sell or transfer this data to third parties except the service providers listed below, we do not use it to determine creditworthiness or for lending purposes, and we do not use it for any purpose unrelated to operating Reach.
How we use your information
We use your information to score open jobs against your personas; to generate a tailored resume and cover letter for a job; to submit applications on your behalf from your apply address; and to forward recruiter replies to your real inbox so you never miss one.
Generating your resume and cover letter and scoring jobs involves sending your relevant profile and resume text to third-party large language model providers, reached through a gateway we operate. Those providers process the text to return the result. We send only what is needed for the task and do not use your data to train public models.
Research use
Reach's founder is a graduate student and may use Reach data in non-commercial academic research, for example to study how job searches, applications, and hiring outcomes unfold. Research only ever uses data that has been de-identified first: your name, email addresses, phone numbers, street address, profile links, and other details that could identify you are removed or redacted, and the data is analyzed in aggregate or as anonymized records.
Research data is never sold, licensed, or used for any commercial purpose, such as advertising or sale to employers, recruiters, or data brokers. Published results (for example papers, a thesis, or presentations) report only aggregate or anonymized findings and never identify you. If you would prefer that your data not be included, contact us at the address below and we will exclude it from future research datasets; deleting your account does the same. Records already de-identified cannot be traced back to you.
Our legal basis
For people in the EEA and UK, our main legal basis for handling your data is the performance of our contract with you: you ask Reach to find jobs and apply to them for you, and we cannot do that without processing the information above. We also rely on our legitimate interest in keeping the service secure and improving it and in non-commercial academic research on de-identified data, and, where a specific use needs it, your consent, which you can withdraw at any time.
Service providers
We share data with a small set of vendors only to run Reach:
- Clerk for account sign-in and identity.
- Stripe for payment processing if you buy a paid plan.
- Amazon Web Services (SES) and Resend to send and receive mail on your apply address. If you connect your own email domain (Microsoft 365), that mail is sent and received through your own mailbox instead.
- Large language model providers, reached through a gateway we operate, to generate resumes and cover letters and to score jobs. Your resume and cover-letter text is sent to these third-party providers so they can produce the result.
- Cloudflare for content delivery and the secure network tunnel that fronts the app.
- Our own hosting. Reach runs on a private server we operate.
These providers process data on our behalf under their own terms.
When you apply to a job, the resume, cover letter, and contact details for that application are sent to that employer or its applicant-tracking system, at your direction.
Retention and deletion
We keep your data while your account is active. You can delete your account yourself at any time from the Settings page. Deletion is permanent and removes your personas, resumes, generated documents, application history, matches, your Reach apply address and its messages, and your billing record, and it ends any active subscription. We also make a best-effort request to remove your sign-in record at Clerk and your customer record at Stripe. The shared job listings we scrape are not personal to you and are not affected.
You can also remove individual personas, resumes, and generated documents yourself. We may keep limited records where the law requires it (for example, tax and payment records).
Security
We protect data in transit with encryption and limit access to it. No system is perfectly secure, so do not upload information you are not comfortable entrusting to an online service.
Your choices
You can review and edit your profile data, disable auto-apply at any time (it is off until you turn it on), delete your account from Settings, and stop using the service. To request a copy of your data (data portability), contact us at the address below.
Your privacy rights (EEA, UK, and California)
Depending on where you live, you may have additional rights over your personal information.
EEA and UK (GDPR). You have the right to access, correct, delete, restrict, or object to our processing of your data, and to data portability. Our legal bases are the performance of our contract with you (finding and applying to jobs for you), our legitimate interests in operating and securing the service and in non-commercial academic research on de-identified data, and, where a use needs it, your consent, which you can withdraw. You may lodge a complaint with your local data protection authority.
California (CCPA/CPRA). You have the right to know what personal information we collect and how we use it, to request its deletion or correction, and to not be discriminated against for exercising these rights. We do not sell or share your personal information as those terms are defined under California law.
To exercise any of these rights, contact us at the address below.
Children
Reach is not intended for anyone under 18, and we do not knowingly collect their data.
Contact
Questions or requests: [email protected]. Reach is operated by Vine AI (vineai.tech).