Privacy Policy
Reached for Teams (Chrome extension and dashboard). Last updated: November 9, 2026.
Reached is provided by Haimio Ltd, trading as Sanctum ("we", "us"), a company registered in England and Wales (company number 17455304), to outreach agencies and sales teams ("customers"). A customer installs Reached for its team so managers can review the quality of the LinkedIn messages their reps send.
For the data described below, the customer decides what is collected and why, and we process it on the customer's behalf and only on their instructions. If you're a rep or a LinkedIn contact with a question about your data, you can contact your agency or us.
What the extension collects
The extension only runs on linkedin.com, and only reads the page at these moments:
- When a rep sends a message, connection note or InMail: its text, the contact's name, LinkedIn profile link and conversation link, the name of the LinkedIn account in use, the address of the LinkedIn page it was sent from (without search terms), the time and time zone, the type of message, how long it took to write and whether it was pasted.
- When a rep opens a conversation with new replies: the text of those replies, who sent them, when, and LinkedIn's ID for each message (used to avoid saving the same reply twice).
To link these to the right person, it also stores the name the rep types when joining their team, the email address of the Chrome profile they use, and their team code. Every few hours it sends a health check with the extension's version and how many LinkedIn tabs are open, so managers can see that logging works.
It doesn't collect anything else from LinkedIn, such as the feed, profiles the rep views or searches, and it doesn't read other websites, passwords or payment details. It never clicks, types or sends anything on LinkedIn.
What the dashboard collects
Managers and reviewers sign in with their email address. We store that email, their role, and the scores and notes they add.
How it's used
Only to provide Reached to the customer: showing their team's messages and replies, counting results such as reply rates, and letting managers score messages and coach reps. Each customer can only see its own team's data.
We don't sell this data, use it for advertising, or share it with anyone except the service providers below. We don't use it to train AI models. The use of information received from the extension complies with the Chrome Web Store User Data Policy, including the Limited Use requirements.
Our own staff don't read your team's messages. We only look at specific data when a customer asks us to for support, when it's needed to keep the service secure or investigate abuse, or when the law requires it. To run the service we use counts that don't include message text, such as how many messages each team sent.
Where it's stored
Data is sent over encrypted connections (HTTPS) and stored by these service providers, who process it only for us:
| Provider | What for |
|---|---|
| Supabase | Database and sign-in |
| Vercel | Hosting the dashboard website |
| Resend | Sending sign-in emails |
Each extension gets its own access key, and the server only stores a scrambled (hashed) copy of it. Access to each customer's data is limited to that customer's own managers and reviewers.
These providers may store or process data outside your country. Each has agreed to protect it under a data processing agreement, including standard contractual clauses where the law requires them.
Our website
Our website (reached.sanctumforprofessionals.com) loads its fonts from Google Fonts, so Google receives your IP address when you visit. The demo video only loads from YouTube (Google) if you click play. Our hosting providers keep standard technical logs, such as IP addresses and browser type, for security and to keep the service running. The website doesn't use advertising or tracking cookies; signing in to the dashboard stores your session in your browser.
How long it's kept
Message text is deleted automatically after the customer's retention period (180 days unless the customer sets another). Counts and scores without the text may be kept for reporting. When a customer stops using Reached, or asks us to, we delete all of their data within 30 days.
On the rep's computer, the extension keeps a short list of recent message IDs and any messages waiting to upload. Right after an update, a sent message may also be held briefly in the browser's storage for linkedin.com until it uploads. Uninstalling the extension removes it all. A manager can also remove a rep from the team, which stops their extension immediately.
Your choices
Reps can see what's logged in the extension's popup and can stop logging at any time by removing the extension. To see, correct or delete data about you, contact your agency or email us at help@sanctumforprofessionals.com. We'll help within 30 days. If you're in the UK and unhappy with how your data is handled, you can also complain to the Information Commissioner's Office at ico.org.uk.
Children
Reached is a work tool for businesses. It isn't meant for anyone under 16, and we don't knowingly collect their data.
Changes
If we change this policy, we'll update the date above. If a change affects how data is used, we'll tell customers before it takes effect.
Contact
Haimio Ltd, trading as Sanctum. Registered in England and Wales, company number 17455304.
Email: help@sanctumforprofessionals.com