← Legal

Privacy Policy

Effective Date: January 21, 2026

1. Introduction

Outly SAS ("Outly," "we," or "us") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our software application (the "Service").

2. Information We Collect

2.1. Personal Data You Provide

  • Account Data: When you register, we collect your name, email address, password (hashed), and company name.
  • Payment Data: We do not store full credit card numbers. All payment transactions are processed by our third-party provider, Stripe, in accordance with PCI-DSS standards.
  • Communication Data: Information you provide when you contact our support team.

2.2. Information Collected Automatically

  • Platform Credentials: To automate actions on your behalf, we securely store session cookies or authentication tokens for your linked accounts (e.g., LinkedIn). These are encrypted at rest.
  • Usage Logs: IP address, browser type, operating system, access times, and pages viewed.
  • Campaign Data: We process data regarding the prospects you target (names, profiles, message history) to provide analytics and campaign management.

3. How We Use Your Information

We process your data for the following purposes:

  • Service Delivery: To execute the automation workflows you configure (e.g., visiting profiles, sending connection requests).
  • Improvement: To analyze usage trends and improve the algorithm's performance.
  • Security: To detect and prevent fraudulent use or abuse of the Service.
  • Communication: To send you technical notices, updates, security alerts, and support messages.

4. Google User Data Policy

If you choose to integrate your Google account (Gmail/Workspace) with Outly:

  1. Access: We access your email solely to send messages you have drafted and to check for replies from your prospects.
  2. Storage: We do not permanently store the body of your emails unless they are part of a tracked campaign thread within our dashboard.
  3. No Transfer: We do not transfer or sell your Google user data to third parties for advertising or any other purpose.
  4. No AI Training: We do not use your internal email content to train generalized AI or machine learning models.

5. Sharing of Your Information

We do not sell, trade, or rent your personal identification information to others. We may share generic aggregated demographic information not linked to any personal identification information regarding visitors and users with our business partners.

We may disclose your information to:

  • Service Providers: Third-party vendors who perform services for us (e.g., hosting, customer support, email delivery) and are bound by confidentiality obligations.
  • Legal Compliance: If required to do so by law or in response to valid requests by public authorities (e.g., a court or a government agency).

6. Data Security

We implement appropriate technical and organizational security measures to protect your data, including:

  • Encryption: Data is encrypted in transit (using TLS/SSL) and at rest (using AES-256 standard).
  • Access Control: Access to personal data is restricted to authorized employees who have a legitimate need to know.

7. Data Retention

We retain your personal data only for as long as is necessary for the purposes set out in this Privacy Policy.

  • Account Data: Retained for the lifetime of your account plus 30 days.
  • Logs: Retained for up to 12 months for security and debugging.

Upon request or account deletion, we will delete or anonymize your data, unless we are legally required to retain it (e.g., for tax purposes).

8. Your Data Protection Rights (GDPR & CCPA)

Depending on your location, you have the following rights:

  • Right to access – Request copies of your personal data.
  • Right to rectification – Request correction of inaccurate information.
  • Right to erasure – Request deletion of your personal data, under certain conditions.
  • Right to restrict processing – Request restriction of processing of your personal data.
  • Right to data portability – Request transfer of your data to another organization, or directly to you.

To exercise these rights, contact us at support@useoutly.com.

9. Changes to This Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Effective Date" at the top.