Privacy Policy

This policy explains what information Outbound (“we”, “us”) collects, how we use it, and the choices you have. Outbound is a private, invitation-only workspace that organizations use to plan and review outbound sales campaigns.

Information we collect

• Account information. When you sign in with Google, we receive your name, email address, and profile picture. When you sign in with an email link, we receive your email address. We do not receive your Google password.
• Workspace content. Information you and your organization add, such as campaign descriptions, prospect records (for example names, job titles, companies, and business email addresses), messages, and approvals.
• Technical information. Cookies needed to keep you signed in, and standard server logs (such as IP address, browser type, and request times) kept by our hosting providers for security and reliability.

How we use information

• To sign you in and confirm which organizations you have been invited to.
• To provide the service: storing and displaying your organization's workspace content.
• To keep the service secure, prevent abuse, and fix problems.
• To contact you about your account or important changes to the service.

We do not sell personal information, and we do not use it for advertising. Information received from Google is used only to sign you in and identify your account, in line with the Google API Services User Data Policy, including its Limited Use requirements.

How information is kept separate

Each organization's data is kept separate from every other organization's. Access is limited to people an organization has explicitly invited, and this separation is enforced by the database itself. Platform administrators can see which organizations and members exist, but cannot see an organization's campaigns, prospects, or messages unless that organization invites them.

Service providers

We use a small number of providers to run the service:

• Supabase — database and sign-in.
• Vercel — website hosting.
• Google — “Sign in with Google”.

If your organization chooses to connect other tools (for example a CRM or email account), information is shared with those tools only as needed to perform the features your organization turns on.

Prospect information

Organizations using Outbound decide what prospect information to add and are responsible for having a lawful basis to use it and for complying with applicable marketing and anti-spam laws. We process that information on the organization's behalf. If you believe your information is in a customer's workspace, contact us at ashton@ospreymedia.us and we will help direct your request.

Retention and deletion

We keep information for as long as your account or your organization's workspace is active. You can ask us to delete your account, or an organization owner can ask us to delete the organization's data, by emailing ashton@ospreymedia.us.

Security

Information is encrypted in transit, access is restricted by role, and organization data is isolated at the database level. No system is perfectly secure, but we work to protect your information and will notify affected users of a breach as required by law.

Children

Outbound is a business tool and is not intended for anyone under 18.

Changes to this policy

We may update this policy. If changes are significant, we will let users know before they take effect. The date at the top shows when it was last updated.

Contact

Questions or requests: ashton@ospreymedia.us.