Privacy Policy

Last updated: April 17, 2026

What we collect

PennReach stores your name, Penn email, and the Penn alumni contacts you save through the MyPenn browser extension. When you connect Gmail, we store an OAuth refresh token (encrypted) so we can send mail merges on your behalf and detect replies. We do not read mail outside of threads you have started through PennReach.

How we use it

Your data is used solely to run the PennReach app for you: saving contacts, scheduling outreach, tracking replies, and rendering your dashboard. We do not sell, trade, or share your data with third parties. We do not use Gmail data for advertising, train ML models on it, or expose it to human review except where required to debug at your request.

Google API data

PennReach's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Deletion

You can disconnect Gmail or delete your account from Settings at any time. Deleting your account removes your Gmail token, contacts, and campaign history from our database within 30 days.

Contact

Questions: neelj@wharton.upenn.edu