Outreach OS
Login
Start Free Trial

Privacy Policy

Effective Date: June 30, 2026

This Privacy Policy describes how Outreach OS ("we," "us," or "our") collects, uses, and discloses your information when you use our multi-channel outreach platform, including Instagram DM and email automation services (the "Service").

1. Information We Collect

We collect various types of information to provide and improve our Service, including:

a. Personal Data

  • Account Information: When you register for an account, we collect your name, email address, and billing information. For enterprise plans, we may collect additional contact details for team members.
  • Communication Data: If you contact us for support or sales inquiries, we collect the content of your communications, including your name, email address, subject, and message.
  • Social Media Account Credentials: To enable Instagram DM automation, you connect your Instagram accounts. We store session cookies and handle 2FA validation on-the-fly. We also anchor SOCKS5 or HTTP proxies directly to your Instagram accounts to prevent bans and ensure safe session loading. We encrypt all Instagram session tokens using Fernet database layer security.
  • Email Account Credentials: To enable email automation, you connect your SMTP or Microsoft Graph accounts. We encrypt all SMTP credentials and OAuth keys using Fernet database layer security.

b. Usage Data

We collect information automatically on how the Service is accessed and used. This Usage Data may include:

  • Platform Interactions: Details of your activity within the platform, such as features used (e.g., Analytics, Outboxes, Live Logs), campaigns created, and settings configured.
  • Technical Data: Information about your device and browser, IP address, operating system, and unique device identifiers.
  • Outreach Metrics: Data related to your outreach campaigns, including emails sent, Instagram DMs sent, open rates, reply rates, and pipeline deal stages. This includes tracking pixels for email read events and DM response monitors.
  • Proxy Usage: Information related to the use of SOCKS5 or HTTP proxies for account anchoring and traffic routing.
  • Audit Logs: We track dashboard modifications, imports, and administrative actions for security and compliance purposes.

c. Sourcing Data

  • Lead Data: When you import leads via Google Sheets or CSV/Excel parsers, we process the data you provide, which may include names, email addresses, social media handles, and other custom variables (e.g., {{First Name}}, {{Company}}).
  • Content Data: We process the content of your outreach messages, including spintax variations and templates, to enable polymorphic content synthesis.

d. Cookies and Tracking Technologies

We use cookies and similar tracking technologies (e.g., tracking pixels, web beacons) to track activity on our Service and hold certain information. These are used for:

  • Authentication: To keep you logged in and manage your sessions.
  • Preferences: To remember your settings and preferences.
  • Analytics: To understand how users interact with our Service and improve its functionality.
  • Campaign Tracking: Email seen tracking pixels are used to trace email read events.

2. How We Use Your Information

We use the collected information for various purposes, primarily to:

  • Provide, operate, and maintain our Service.
  • Process your transactions and manage your subscriptions.
  • Improve, personalize, and expand our Service.
  • Understand and analyze how you use our Service.
  • Develop new products, services, features, and functionality.
  • Communicate with you, either directly or through one of our partners, including for customer service, to provide you with updates and other information relating to the Service, and for marketing and promotional purposes.
  • Send you emails and Instagram DMs (via automation) as part of your outreach campaigns.
  • Find and prevent fraud.
  • Ensure the security and integrity of our platform, including through audit logs and credential cryptography.
  • Comply with legal obligations and enforce our agreements.

4. Sharing Your Information

We may share your information with third parties in the following situations:

  • Service Providers: We may employ third-party companies and individuals to facilitate our Service, provide the Service on our behalf, perform Service-related services, or assist us in analyzing how our Service is used. These third parties have access to your Personal Data only to perform these tasks on our behalf and are obligated not to disclose or use it for any other purpose.
  • Business Transfers: If we are involved in a merger, acquisition, or asset sale, your Personal Data may be transferred. We will provide notice before your Personal Data is transferred and becomes subject to a different Privacy Policy.
  • Legal Requirements: We may disclose your Personal Data in the good faith belief that such action is necessary to: comply with a legal obligation, protect and defend our rights or property, prevent or investigate possible wrongdoing in connection with the Service, protect the personal safety of users of the Service or the public, protect against legal liability.
  • With Your Consent: We may disclose your personal information for any other purpose with your consent.

5. Data Retention

We retain your Personal Data only for as long as is necessary for the purposes set out in this Privacy Policy. We will retain and use your Personal Data to the extent necessary to comply with our legal obligations (for example, if we are required to retain your data to comply with applicable laws), resolve disputes, and enforce our legal agreements and policies.

We will also retain Usage Data for internal analysis purposes. Usage Data is generally retained for a shorter period, except when this data is used to strengthen the security or to improve the functionality of our Service, or we are legally obligated to retain this data for longer time periods.

6. Your Data Protection Rights

Depending on your location, you may have the following data protection rights:

  • The right to access, update or to delete the information we have on you. Whenever made possible, you can access, update or request deletion of your Personal Data directly within your account settings section. If you are unable to perform these actions yourself, please contact us to assist you.
  • The right of rectification. You have the right to have your information rectified if that information is inaccurate or incomplete.
  • The right to object. You have the right to object to our processing of your Personal Data.
  • The right of restriction. You have the right to request that we restrict the processing of your personal information.
  • The right to data portability. You have the right to be provided with a copy of the information we have on you in a structured, machine-readable and commonly used format.
  • The right to withdraw consent. You also have the right to withdraw your consent at any time where we relied on your consent to process your personal information.

For CCPA/CPRA rights, including the right to know, delete, and opt-out of the sale or sharing of personal information, please refer to our specific CCPA/CPRA section below.

7. Security of Data

The security of your data is important to us, but remember that no method of transmission over the Internet, or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your Personal Data, we cannot guarantee its absolute security. We implement measures such as Fernet database layer security for credentials and audit log trails.

8. International Data Transfers

Your information, including Personal Data, may be transferred to — and maintained on — computers located outside of your state, province, country or other governmental jurisdiction where the data protection laws may differ than those from your jurisdiction.

If you are located outside the United States and choose to provide information to us, please note that we transfer the data, including Personal Data, to the United States and process it there. Your consent to this Privacy Policy followed by your submission of such information represents your agreement to that transfer.

9. Children's Privacy

Our Service does not address anyone under the age of 18 ("Children"). We do not knowingly collect personally identifiable information from anyone under the age of 18. If you are a parent or guardian and you are aware that your Child has provided us with Personal Data, please contact us. If we become aware that we have collected Personal Data from children without verification of parental consent, we take steps to remove that information from our servers.

10. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page. We will let you know via email and/or a prominent notice on our Service, prior to the change becoming effective and update the "effective date" at the top of this Privacy Policy. You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

11. Contact Us

If you have any questions about this Privacy Policy, please contact us:

  • By email: support@Outreach OS.io

Specific Regional Compliance

a. GDPR (General Data Protection Regulation)

For users in the European Economic Area (EEA), we adhere to the principles and requirements of the GDPR. This includes providing clear legal bases for processing, respecting data subject rights (as outlined in Section 6), and implementing appropriate technical and organizational measures to protect personal data.

b. CCPA/CPRA (California Consumer Privacy Act / California Privacy Rights Act)

For California residents, this section supplements the information contained in our Privacy Policy and applies solely to visitors, users, and others who reside in the State of California. We adopt this notice to comply with the CCPA/CPRA.

  • Right to Know: You have the right to request that we disclose what personal information we collect, use, disclose, and sell.
  • Right to Delete: You have the right to request the deletion of your personal information that we have collected, subject to certain exceptions.
  • Right to Opt-Out of Sale/Sharing: We do not sell your personal information in the traditional sense. However, if our practices are deemed to constitute a 'sale' or 'sharing' under CCPA/CPRA, you have the right to opt-out. We do not knowingly sell or share the personal information of consumers under 16 years of age.
  • Non-Discrimination: We will not discriminate against you for exercising any of your CCPA/CPRA rights.

To exercise your CCPA/CPRA rights, please contact us at support@Outreach OS.io.

c. CAN-SPAM Act

For email marketing activities, we comply with the CAN-SPAM Act. This includes:

  • Not using false or misleading header information.
  • Not using deceptive subject lines.
  • Identifying the message as an advertisement.
  • Telling recipients where you're located.
  • Telling recipients how to opt-out of receiving future email from you.
  • Honoring opt-out requests promptly.
  • Monitoring what others are doing on your behalf.

d. ePrivacy Directive (Cookie Law)

We comply with the ePrivacy Directive by obtaining consent for the use of non-essential cookies and similar technologies. Our Cookie Policy provides detailed information on the types of cookies used and how users can manage their preferences.