LEGAL
Privacy Policy
Effective July 13, 2026 · Last updated July 13, 2026
Plain-English summary. We collect very little from visitors to this site. The customer lists our clients give us are used only to run that client's campaigns — never sold, never shared with another client, never used to build a list of our own — and are deleted 30 days after the engagement ends. If someone unsubscribes, we keep a record of that forever, because forgetting it is the only way to accidentally email them again.
1. Who we are
AnchorReach Co. ("AnchorReach", "we", "us") is a customer-reactivation email service operated from Delmar, New York, serving local service businesses in the Capital Region. You can reach us at hello@anchorreachco.com about anything in this policy, including a request to access or delete your information.
2. Two very different kinds of information
This policy covers two things that are easy to confuse, so we separate them throughout:
- Visitor information — what we collect about you if you visit this website or book a call with us. We are the controller of that information.
- Client customer lists — the contact data a business gives us so we can email their past customers on their behalf. The business is the controller of that data; we are the processor, acting on their instructions.
If you received an email from us on behalf of a business you have used before, you are in the second category, and section 5 is the one that applies to you.
3. What we collect on this website
- Booking information. If you book a call, Calendly collects your name, email address, and any answers you give to its questions, and passes them to us. We use them to hold the call and to follow up.
- Email you send us. If you email hello@anchorreachco.com, we keep the message.
- Hosting logs. Our host (Vercel) records standard request logs for the site.
This site sets no advertising cookies, runs no analytics or tracking scripts, and does not build a profile of you. The only third-party request the page makes is to Google Fonts for typefaces.
4. How we use visitor information
To answer you, to hold the call you booked, to decide together whether the service fits your business, and to keep our own records. We do not sell it, rent it, or share it for anyone else's marketing.
5. Client customer lists — the data that matters most
When a client engages us, they give us a list of their own past customers, typically a first name, an email address, and the date of the customer's last visit or job. What we do with it:
- Processed solely to deliver the service. We use a client's list to run that client's reactivation campaigns and to report the results back to that client. Nothing else.
- Never sold, rented, or shared. Not with other clients, not with data brokers, not with anyone. One client's list is never used to enrich, cross-reference, or build another's, and a client's report never discloses anything about another client's contacts.
- Never used to train an AI model. See section 7.
- Deleted 30 days after the engagement ends. When we part ways with a client, their campaign data is archived and then purged after 30 days. The grace period exists so a client can request an export, or restart, before the data is gone.
- Opt-out records are kept permanently, and this is the deliberate exception to the deletion rule. If we forgot that someone unsubscribed, we could email them again. Suppression records are therefore retained indefinitely, and they hold only what is needed to honor the opt-out.
What happens when someone opts out
Every campaign email carries a one-click unsubscribe link and the standard one-click unsubscribe headers that Gmail and Yahoo require. An opt-out is honored immediately and permanently:
- The address is added to a suppression list that every future send is checked against at the moment of sending — not against a copy of the list made earlier, which could be stale.
- If that check cannot be completed for any reason, the email is not sent. The system is built to fail toward silence rather than toward an unwanted email.
- Every opt-out is written to an append-only audit log, so a client can always show when and how a contact was removed.
- Bounced and complained-about addresses are suppressed automatically, on the same list.
You can also opt out at any time by replying to any campaign email, or by emailing hello@anchorreachco.com.
6. Measurement in campaign emails
We measure two things in the emails we send, and we are precise about what each is worth:
- Clicks. Links in campaign emails are signed and routed through our own tracking address so we can count a click and send the person on to the client's website. We record that a link was clicked and by which contact. We do not record the recipient's IP address, and we do not fingerprint their browser or device.
- Opens. Campaign emails contain a standard tracking pixel. We treat open data as unreliable and we say so in every report: privacy-protecting mail apps load these images automatically whether or not a human ever read the message, so opens are inflated by an unknowable amount. We never present them as a measure of interest.
The weekly report we send our clients contains counts and, where a contact opted out, the addresses of that client's own contacts who did so — so the client can update their own records. It never contains anything about any other client's contacts.
7. AI-generated copy — stated plainly
We use Anthropic's Claude models to help draft campaign copy. Two things about that are worth saying directly rather than burying:
- Every email is approved by a human before it sends. A draft that no one has approved cannot be sent — the system refuses it. What the model writes at send time is a single personalized opening line, inside copy the client has already signed off on.
- Customer lists are not uploaded to an AI model. Drafting uses the client's business details. Personalization uses only the minimum needed for that one line — typically a first name and how long it has been since the customer's last visit. We do not use client data to train any model, and our provider does not train on it.
8. Who processes data for us
We keep this list short on purpose, and we keep it current:
| Processor | What it does for us |
|---|---|
| Supabase | Database — stores campaign queues, suppression records, and the compliance audit log. |
| Resend | Sends the email and reports deliveries, bounces, and complaints back to us. |
| Railway | Runs the application that schedules and sends the campaigns. |
| Vercel | Hosts this website. |
| Stripe | Bills our clients. Stripe handles card details; we never see or store them. |
| Calendly | Books calls, and collects the name and email you give it. |
| Anthropic | Drafts campaign copy (see section 7). Not used to train on client data. |
9. How long we keep things
- Client campaign data: for the engagement, then deleted 30 days after it ends.
- Suppression / opt-out records: permanently, to keep honoring the opt-out.
- Compliance audit log: retained as our record that opt-outs were honored.
- Booking and email correspondence: as long as needed for our business records.
10. Security
Data is encrypted in transit and at rest by the processors above; access is limited to the people who need it (today, that is the founder); credentials are rotatable and the sending system is built to refuse rather than to guess when something is wrong. No system is perfectly secure, and we will not tell you ours is. If a breach affects your information, we will notify you and any regulator as the law requires.
11. Your choices and rights
You can ask us what we hold about you, ask us to correct it, ask us to delete it, or opt out of our emails, by writing to hello@anchorreachco.com. If your information reached us through one of our clients, we will point you to that client, who controls it — and we will honor an opt-out immediately regardless.
Depending on where you live, you may have additional rights under laws such as the CCPA or the GDPR. We do not sell personal information, and we do not share it for cross-context behavioral advertising.
12. Children
This service is for businesses. It is not directed at children, and we do not knowingly collect information from anyone under 16.
13. Changes to this policy
If we change this policy we will update the date at the top. If the change is material, we will tell our clients directly rather than relying on them to re-read the page.
14. Governing law and contact
This policy is governed by the laws of the State of New York. Questions, requests, and complaints: hello@anchorreachco.com.