Privacy Policy

1. Introduction

Breakreach ("we", "us", "our") operates the breakreach.com website and the Breakreach platform. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our Service.

2. Information We Collect

Account Information

When you register, we collect your name, email address, and password (stored hashed). We never store your password in plain text.

Connected Social Accounts

When you connect third-party social media accounts (such as X, Instagram, Facebook, TikTok, Threads, LinkedIn, YouTube, or Bluesky), we receive and store OAuth access tokens, your platform user ID, display name, and profile picture URL. These tokens are used exclusively to publish content on your behalf.

Content

We store the posts, media files, and scheduling data you create within Breakreach. Media files are stored on Cloudflare R2 infrastructure.

Usage Data

We may collect basic usage data such as pages visited, features used, and general interaction patterns to improve the Service. We do not use third-party tracking or advertising services.

3. How We Use Your Information

We use your information to:

• Provide and operate the Service, including scheduling and publishing posts
• Authenticate your identity and manage your account
• Publish content to your connected social media accounts at your scheduled times
• Send important service-related communications (e.g., security alerts, feature updates)
• Improve and develop the Service

4. Data Sharing

We do not sell, rent, or share your personal information with third parties for marketing purposes. We only share data in the following cases:

• Social media platforms: We transmit your content and media to the platforms you have connected, solely to publish your scheduled posts.
• Infrastructure providers: We use third-party services (such as cloud hosting and database providers) to operate the Service. These providers process data on our behalf and are bound by contractual obligations to protect your information.
• Legal requirements: We may disclose information if required by law, regulation, or legal process.

5. Data Storage and Security

Your data is stored on MongoDB Atlas (database), Cloudflare R2 (media files), and Redis (job queue). Access tokens for connected accounts are stored encrypted at rest. We use HTTPS for all data transmission and implement industry-standard security practices.

6. Data Retention

We retain your account data for as long as your account is active. When you delete your account, we will delete your personal data, posts, and connected account tokens within 30 days. Some data may be retained in backups for up to 90 days. We may retain anonymized, aggregated data indefinitely for analytics purposes.

7. Your Rights

You have the right to:

• Access the personal data we hold about you
• Correct inaccurate personal data
• Delete your account and associated data
• Disconnect any connected social media account at any time
• Export your data in a portable format
• Withdraw consent for data processing at any time by deleting your account

To exercise any of these rights, contact us at hello@breakreach.com.

8. Cookies

We use a single essential cookie (httpOnly refresh token) for authentication. We do not use advertising cookies, tracking cookies, or third-party analytics cookies.

9. Children's Privacy

Breakreach is not intended for users under the age of 16. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child under 16, we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or through the Service. The "last updated" date at the top reflects the most recent revision.

11. Contact

For any questions or concerns about this Privacy Policy or your data, contact us at hello@breakreach.com.