This Privacy Policy explains how The Outreach ("we", "us", or "our") collects, uses, and protects your personal data when you use our Service at theoutreach.xyz. We take privacy seriously and will never sell your data.
1. Who we are
The Outreach is operated by Shahar Matorin, based in Tel Aviv, Israel. For privacy-related matters, contact us at hello@theoutreach.xyz.
2. What data we collect
Account data: When you sign up, we collect your name, email address, and password (stored as a secure hash).
Contact and campaign data: CSV files you upload, contact records you create, email templates, campaign names, and send history. This data belongs to you.
Gmail connection data: When you connect Gmail, we store an OAuth refresh token that allows us to send emails on your behalf. We do not store the content of your Gmail inbox. We only access subject lines and sender addresses for reply detection.
Usage data: We collect basic analytics about how you use the Service, including pages visited, features used, and error logs. This helps us improve the product.
Billing data: Payment details are collected and stored exclusively by Paddle, our payment processor. We only receive a transaction confirmation and subscription status. We never see your card details.
3. How we use your data
- To provide, operate, and improve the Service
- To send emails on your behalf when you use the send features
- To detect replies to your campaigns by scanning your Gmail inbox metadata
- To process payments and manage your subscription
- To send you transactional emails (account confirmation, billing receipts, important product updates)
- To respond to your support requests
We do not use your contact data or email templates for any purpose other than providing the Service to you.
4. Google OAuth and Gmail data
Our use of data received from Google APIs complies with the Google API Services User Data Policy, including the Limited Use requirements. Specifically:
- We only request the Gmail scopes necessary to send emails and detect replies
- We do not read, store, or share the body content of your emails
- We do not use your Gmail data to serve advertisements
- We do not allow humans to read your Gmail data except with your explicit permission for support purposes
You can revoke our Gmail access at any time at myaccount.google.com/permissions.
5. Data sharing
We do not sell, rent, or share your personal data with third parties for marketing purposes. We share data only with the following service providers, strictly to operate the Service:
- Supabase — database and authentication (EU data centres)
- Paddle — payment processing
- Railway / Vercel — infrastructure hosting
- Google — Gmail OAuth integration
All providers are bound by data processing agreements and applicable data protection law.
6. Data retention
We retain your account and campaign data for as long as your account is active. If you delete your account, your data is permanently deleted within 30 days. You may request an export of your data at any time by emailing hello@theoutreach.xyz.
7. Your rights
Depending on your location, you may have the following rights regarding your personal data:
- Access: Request a copy of the data we hold about you
- Correction: Ask us to correct inaccurate data
- Deletion: Ask us to delete your data
- Portability: Receive your data in a machine-readable format
- Objection: Object to certain types of processing
To exercise any of these rights, email hello@theoutreach.xyz. We will respond within 30 days.
8. Cookies
We use only essential cookies required for authentication and session management. We do not use advertising or tracking cookies.
9. Security
We implement industry-standard security measures including encrypted data transmission (HTTPS), hashed passwords, and access controls. No method of transmission over the internet is 100% secure, but we take all reasonable steps to protect your data.
10. Children's privacy
The Service is not directed at children under 18. We do not knowingly collect personal data from anyone under 18. If you believe a minor has created an account, contact us and we will delete it promptly.
11. Changes to this policy
We may update this Privacy Policy from time to time. We will notify you by email before any material changes take effect. The updated policy will be posted at this URL with a revised effective date.
12. Contact
For any privacy questions or requests, contact us at hello@theoutreach.xyz.