Privacy statement
What this statement covers
This is the privacy statement of Gottmer Webshops, trading as Gottmer Agency, Chamber of Commerce 73444111, Vogelzand 14, 3846 JM Harderwijk, the Netherlands. It covers the personal data for which we are ourselves the controller: visitors to https://tetherreach.com, people who ask us something, and customers with an account on https://app.tetherreach.com.
It does not cover the people in our customers' lists. For that data the customer is the controller and we are the processor; what we do with it is set out in the processing annex to the terms.
If you have a question about this statement or want to exercise a right, email hello@tetherreach.com. We do not have a data protection officer; we are too small for one and the law does not require it of us.
If you only visit the website
You can read https://tetherreach.com without an account and without leaving anything behind. We set no cookies that follow you unless you say yes to them yourself.
Google Analytics loads with cookie consent denied by default. If you decline or do not respond, visits are measured without analytics cookies. Allow permits analytics cookies. Advertising signals stay off. We remove personal link details and pass on only the referring domain. Your choice stays in your browser for 12 months. You can change it through Change cookie choice at the bottom of the page. Withdrawing consent removes analytics cookies straight away and measurement continues without cookies.
Microsoft Clarity also loads on public pages with cookie consent denied. Clarity then measures without cookies. Allow permits the analytics cookies _clck and _clsk for heatmaps and session recordings. Advertising consent stays denied. Form contents are masked. In the app, on account pages, with query parameters or fragments, or with an unrecognized referring URL, Clarity loads in a sandboxed blank helper page. It measures that visit without cookies and cannot access the parent page URL, title, content or storage. Google Analytics uses a separate blank page for those visits. Only fixed route names and allowed event fields are passed on. Withdrawing consent removes analytics cookies. Use no-track to turn off both measurements entirely. For processing and retention details, see the Microsoft Privacy Statement and Clarity retention information.
The website runs on Cloudflare Pages. Cloudflare processes technical data such as your IP address to deliver the site and protect it against abuse. That is necessary for the site to work at all.
The cookie choice controls analytics cookies. We rely on legitimate interest to deliver and secure the site.
If you ask us something
If you fill in the contact form, we keep your name, email address, company name if you give one, your message, where the question came from and when. If you email us directly, we keep that email.
We use it to answer you and to keep track of where a conversation stands. We keep it for two years after the last contact, or less if you ask.
A contact request is not permission to send you commercial messages later.
Basis: performance of a contract if you become a customer, and otherwise our legitimate interest in being able to answer questions.
If you create an account
For an account we store: your name, email address, company name, a derived value of your password, whether you have confirmed your email address, which version of the terms you accepted and when, and the date it was created. We do not keep your password itself and cannot work it back.
If you sign in with Google, we receive your name, your email address and confirmation that it is verified from Google. We do not ask for access to your Google account, your contacts or your calendar.
While you use the service we record what happens in your workspace: campaigns created and changed, approvals, paired computers and errors. That is needed to make the service work, to be able to show who approved what, and to resolve problems.
When a campaign runs through the desktop app, the app sends the outcome of each step and the status of your LinkedIn account to your workspace, plus a screenshot of the LinkedIn window after the latest step. We keep only the newest screenshot per LinkedIn account; a new one replaces the previous one.
Basis: performance of our contract with you.
Cookies we genuinely need
These cookies are functional; without them signing in does not work. They exist only on https://app.tetherreach.com, cannot be read by JavaScript and do not travel to other websites.
- tr_customer: your signed-in session as a customer. Valid for twelve hours.
- tr_operator: the same for our own admin screen.
- tr_oauth_state: valid for ten minutes, only while signing in with Google, to stop anyone hijacking that process.
On the public website the only other cookies are the analytics cookies _ga and _ga_ followed by a code, for up to 12 months and only if you chose Allow, plus your own choice in your browser's storage. Google keeps the statistics for 14 months.
If you pay
Payments run through Mollie. You enter your payment details with Mollie, not with us. We do not see your card or account number.
From Mollie we get back whether a payment succeeded, the amount and which method you used. We link that to your account for invoicing.
We keep invoices and the related bookkeeping for seven years, because Dutch tax law requires it. That applies even if you have deleted your account in the meantime.
Basis: performance of the contract, and a statutory retention duty for bookkeeping.
Email we send you
We only send you email that belongs to the service: confirming your email address, resetting your password, a notice when someone tries to create another account with your address, workspace invitations, a welcome with the first steps after your first payment, invoices and important notices about your account, our terms or this statement.
We send that email from our own address through Google Workspace. Google processes the message and your email address in order to deliver it.
We send product news and the occasional offer only if you tick the box yourself, when you create your account or later in Settings. You can withdraw at any time in Settings, under Product news by email. We keep when you agreed or withdrew and the exact words you agreed to, for as long as your account exists. Account emails, such as sign-in links and invoices, are not product news and you get them either way.
Basis: performance of the contract.
Protection against abuse
To stop anyone guessing passwords or abusing the signup form, we briefly count attempts per IP address and per email address. That lives in the server's working memory and disappears by itself; we do not build a profile with it.
Beyond that: traffic runs encrypted over HTTPS, sessions are bound to one device, workspaces are separated from each other, roles have limited rights, and backups are encrypted.
Basis: legitimate interest in a secure service.
Who we engage
We do not sell your data and do not use it for advertising. We engage these parties:
- Mollie B.V. (Netherlands), to handle payments.
- Google Ireland Limited, to send our email, for signing in with Google if you choose it and, if you said yes to it, for Google Analytics.
- Cloudflare, Inc., to deliver and protect the website and the encrypted connection to the workspace.
The workspace, the database and the backups run on equipment we manage ourselves in the Netherlands.
The data stays within the European Economic Area, except where a party may pass data to the United States. Where that happens it is on a basis the Regulation permits, such as the European Commission's standard contractual clauses or the EU-US Data Privacy Framework.
How long we keep things
- Your account and the contents of your workspace: for as long as your account exists, plus thirty days so you can export.
- Invoices and bookkeeping: seven years, required by law.
- Contact requests: two years after the last contact.
- Sessions: twelve hours.
- Backups: these expire on their own cycle, including after a deletion.
- Analytics: only if you gave consent, and no longer than the standard fourteen-month period.
Your rights
You have the right to see your data, to have it corrected, to have it deleted, to have the processing restricted, to object, and to take your data with you in a common file format.
For your own workspace you can do most of it yourself: you export people and message history as CSV, and you request an export or a deletion in your account. If you want something else, email hello@tetherreach.com. We respond within a month, and usually sooner.
If you have given us consent, for example for Analytics, you can withdraw it at any time. That does not affect what already happened before.
If you disagree with how we handle your data, tell us first. You can also complain to the Dutch Data Protection Authority.
What we do not do
We do not sell your data and do not rent it out.
We do not take decisions about you based solely on automated processing that have legal consequences.
We do not use the content of your campaigns, lists and messages for our own outreach and do not train models with it.
We do not follow you across other websites and place no advertising pixels.
Changes to this statement
If something material changes in what we collect or in who we engage, we update this statement and tell you at least thirty days beforehand by email or in your account. Every version has a number and an effective date, shown at the top of this page.
Small textual improvements we make without notice.