Your privacy is the entire product.

Reach-Out ("we", "us") operates a contact-tag service: a physical QR/NFC tag that lets someone reach a tag's owner — by masked call or message — without ever seeing the owner's name, phone number, or address. This policy covers the website, the tags, and the notifications that connect them.

Information we collect

To create your account

Signing in only ever needs a phone number and a one-time code sent to it — we don't collect or store a password.

To register a tag

When you order or claim a tag, we collect:

• Your name, phone number, and (optionally) email
• Vehicle registration and make/model, where relevant to the tag
• A delivery address, for tags that need to be physically shipped to you
• Any notes you add for your own reference

When someone scans your tag

A person scanning your tag can leave you a message or request a masked call without creating an account or identifying themselves. If they choose to, they may voluntarily share their own name and phone number with their message — we never require it, and we never show your details to them in return.

Payments

Paid tags are processed through Razorpay. We store the order amount and Razorpay's own transaction identifiers — your card, UPI, or bank details are handled entirely by Razorpay and never touch our servers.

How we use your information

• Operating the masked-calling and messaging that let a scanner reach you
• Notifying you over WhatsApp when someone leaves a message on your tag (see below)
• Printing, shipping, and fulfilling physical tags you've ordered or claimed
• Processing payments and generating invoices
• Signing you in via one-time codes, and keeping your session secure
• Preventing abuse — for example, rate-limiting repeated calls or messages to a tag

WhatsApp notifications

If someone leaves a message on your tag, we notify you over WhatsApp using Meta's WhatsApp Business Platform. That notification is sent to the phone number on your tag and includes the tag code and the message left for you — nothing about the sender is included unless they chose to share it. Meta processes the phone number and message content solely to deliver that notification; it is not used by Meta for advertising. Meta's own handling of this data is described in the WhatsApp Business Data Processing Terms.

What we never do

• We never show a scanner your name, phone number, email, address, or notes — the public tag page only ever displays non-identifying vehicle info
• We never print your name on the physical tag card — only the tag code and QR
• We never sell your personal information to anyone
• We never send a scanner's real number to you directly for a masked call — a temporary routing number stands in for both sides

Other service providers

Besides Meta's WhatsApp Business Platform, we rely on:

• Razorpay — payment processing for paid tag orders
• edesy— masked voice call routing, so a call can be bridged without either party seeing the other's real number

Each only receives the information it needs to perform that specific function, and none are permitted to use it for their own marketing purposes.

Data retention

We keep tag, order, and message records for as long as your account or tag is active, and as needed to meet our accounting and legal obligations. You can ask us to delete your account and associated tag data at any time — see "Contact us" below.

Security

Sessions are secured with a signed, httpOnly cookie rather than anything readable by page scripts. One-time login codes are hashed, rate-limited, and single-use. We don't use passwords, so there's no password database to compromise in the first place.

Cookies

We use one essential cookie to keep you signed in. We don't run third-party advertising trackers or analytics scripts on Reach-Out.

Your choices

• Update your tag's details any time from your dashboard
• Ask us to export or delete your personal data — see our Data Deletion Instructions
• Stop a physical tag from working at all by asking us to deactivate it

Children's privacy

Reach-Out is not directed at children, and we don't knowingly collect information from anyone under 18.

Changes to this policy

If we make a material change to how we handle your information, we'll update the effective date above and, where appropriate, let existing tag owners know directly.

Contact us

Questions, or a request to access, correct, or delete your data? Reach us at privacy@reachoutqr.com.