Privacy Policy

1. Who we are

Outboundrix LLC ("Outboundrix", "we", "us") provides a go-to-market platform for B2B outbound. This policy explains what we collect, why, and the choices you have. Questions: [email protected]. Data protection contact: [email protected].

2. Data we process

2.1 Account data

• Name, work email, company, role, and workspace settings
• Authentication data and audit-log entries for actions you take

2.2 Customer content

• Contacts, companies and deals you import or create
• Sequences, messages, mailbox connections and send/reply events
• API keys (stored hashed) and integration credentials (encrypted)

2.3 LLM provider keys

If you enable the AI agent you supply your own LLM provider key. It is stored encrypted, scoped to your workspace, and used only to call the provider you chose. We do not use your prompts or content to train any model.

2.4 Technical data

• IP address, browser and device information, and product usage events
• Cookies and similar technologies (see our Cookie Policy)

3. How we use data

• Provide and secure the platform (legal basis: contract)
• Improve features and fix issues (legitimate interest)
• Send product and marketing updates you opted into (consent)
• Meet legal, tax and security obligations (legal obligation)

We do not sell personal data.

4. Sub-processors

We use a limited set of vetted sub-processors for hosting, payments and transactional email under data processing agreements. Your configured LLM provider acts under your own agreement with that provider. A current sub-processor list is available on request to [email protected].

5. Your rights

Subject to GDPR, UK GDPR and CCPA/CPRA, you can access, correct, export, delete or restrict processing of your personal data, and object to or withdraw consent. Exercise rights via account settings or [email protected]. We respond within 30 days (GDPR) or 45 days (CCPA).

6. Retention

• Account and customer content: for the life of the workspace plus 90 days
• Billing records: 7 years where legally required
• Usage telemetry: up to 24 months

7. International transfers

Where data moves across borders we rely on Standard Contractual Clauses or an equivalent recognised transfer mechanism.

8. Security

Encryption in transit and at rest, role-based access control, audit logging, and least-privilege internal access. See our security page for detail.

9. Changes

Material changes are announced in-app and by email at least 30 days before they take effect. Continued use after that constitutes acceptance.

10. Contact

[email protected] for privacy requests; [email protected] for data protection matters. EU/EEA and UK users may also complain to their local supervisory authority.