Privacy Policy
Effective 10 November 2026
Who we are
Reef is the platform Swell Growth Marketing Inc. ("Swell", "we") runs at usereef.co for its clients and its own team. Swell is at 5675 Marine Drive, West Vancouver, BC V7W 2R7, Canada, and is responsible for the personal information described here.
Our privacy contact is Cyril Cox, cyril@swellgrowthmarketing.com.
What this policy covers
This policy covers usereef.co and the Reef platform: the people who sign in (staff of the companies we work with, and Swell staff), the people who appear in material a company connects to Reef (for example the participants of a recorded call or the members of a shared Slack channel), and visitors to the sign-in page.
Where Reef processes a client company's material for that company, the company decides what is connected and why, and Swell processes it on the company's behalf under our agreement with them. Questions about that material can go to the company or to us, and we pass them on.
What we collect
Account details: your name, work email, the company you belong to and your role. Your password is stored only as a hash and is never readable by us.
Sign-in and security records: a session cookie, your IP address, browser details, sign-in times and a record of actions taken in Reef, kept to secure accounts and to answer support questions.
Workspace content: what your company or your Swell team connects or adds, such as recordings and transcripts of calls with Swell, messages in shared Slack channels, briefs and documents, campaign and performance data from advertising and analytics platforms, and the questions and files you put into Reef. This can include names, work emails, job titles and what people said on calls.
Discovery calls: if you book a call through the sign-in page, Calendly handles the booking under its own privacy policy and sends us what you entered.
How we use it
To run Reef for your company: search across your material, answer questions with the source they came from, track commitments and decisions, and run agents that draft or apply changes your team approves.
To secure the service, prevent misuse, give support and keep the records the law requires.
To improve Reef for the companies we work with. We do not sell personal information, we do not use it for advertising, and we do not use your content to train AI models.
If you are in the European Union or the United Kingdom, we rely on our contract with your company, on our legitimate interest in running and securing the service, and on legal obligations.
AI in Reef
Reef uses large language models from Anthropic to read material and write answers and drafts. The text needed for a request is sent to Anthropic to produce the answer, and Anthropic does not use it to train its models under our agreement. Answers can be wrong: each one names its source so you can check it, and no change is applied to another system without a person approving it.
Who receives it
Only these service providers, each limited to what its job needs. We add to this list before a new one receives personal information.
| Provider | What it does | Where |
|---|---|---|
| Railway Corporation | Hosts Reef's servers, database and backups | Netherlands (Google Cloud region europe-west4) |
| Anthropic, PBC | AI models that write answers and drafts | United States |
| Connections your company approves (for example Slack, Google Workspace, call recorders, advertising platforms) | Send material to Reef, or receive changes your team approves | Where each provider operates |
Where it is kept
Reef's database and backups are hosted by Railway in the Netherlands. Information sent to providers in the United States or elsewhere outside Canada and the European Economic Area may be available to the courts and authorities of those countries under their laws. For transfers out of the European Union or the United Kingdom we use the safeguards those laws provide, such as standard contractual clauses.
How it is protected
Everything travels over HTTPS. Each company's material sits in its own workspace, and only the people your company and Swell add to that workspace can open it. Swell staff open a workspace only to do the work for that company or to keep the service running.
How long we keep it
Account details are kept while the account is active and deleted 90 days after it is closed. Workspace content is kept for as long as we work together and deleted or returned to your company within 90 days after the engagement ends, unless your company asks for something else or the law requires us to keep it. Security records are kept for 12 months. Deleted information leaves our backups as they are replaced, within 90 days.
Cookies
usereef.co sets only the cookies that keep you signed in and protect the sign-in. It sets no advertising or analytics cookies.
Your choices and rights
You can ask to see the personal information we hold about you, to correct it, to delete it, to receive a copy, or to withdraw a consent you gave, by writing to cyril@swellgrowthmarketing.com. We answer within 30 days. Where your company controls the material, we work with them on your request.
If you are not satisfied with our answer, you can complain to the Office of the Privacy Commissioner of Canada (priv.gc.ca), to the Office of the Information and Privacy Commissioner for British Columbia (oipc.bc.ca), or, in the European Union or the United Kingdom, to your data protection authority.
Changes
When this policy changes we post the new version here with a new date, and we email account holders about any change that affects them.