Privacy, written to be read.

What we collect, and why

1. Health Check answers + your email (if you take the free quiz and leave it): used to generate your results and send your fix list. Stored so we can follow up; unsubscribe anytime.
2. Purchase details (name, company, billing email): handled by Stripe. We never see or store full card numbers.
3. Instance export data (paying Autopilot/Deep Audit customers): the standard Outreach exports you run and send us, which contain your Outreach configuration and activity data. When you use the upload page, the list exports are cleaned in your browser before upload: the names and email addresses of your users and prospects are replaced with anonymized codes on your machine, and the real values never leave it. Files you email us instead arrive exactly as you send them, which can include that personal data. We hold no credential for your instance and extract nothing from it ourselves; we only receive what you send. We process it solely to produce your audits and reports, acting as a processor on your behalf. Raw extracts you upload are deleted automatically 30 days after upload by a storage lifecycle rule, and sooner on request; extracts that arrive by email are deleted by hand once your audit ships. Reports keep aggregates and findings, not the raw files.
4. Member questions (Ask-the-Admin, the monthly AMA): used to answer you and to improve the answer library. Anonymized before any reuse. Threads that escalate to a human, and beta chat transcripts, expire automatically after 180 days.
5. Account sign-in via Google (if you create an OutreachAdmin account): Google sends us your name, email address, and profile picture after you approve. We store those, plus which seat you picked (rep or admin), your plan, and when you last signed in, to run your account. We never see your Google password; sign-in happens on Google's own page, and you can revoke our access anytime from your Google account settings.
6. Basic technical logs (IP on form submissions, for abuse prevention).

What we don't do

1. No selling or renting your data. Ever, to anyone.
2. No advertising trackers, no third-party analytics cookies. The only cookies we set are the sign-in session for your own account and the access cookie for your own client dashboard. Both exist so a door you opened stays open; neither follows you anywhere.
3. No training AI models on your data. Analysis runs on Anthropic's commercial API, which doesn't train on customer data either.
4. No live sales calls, so also no call recordings. There's nothing to record.

Who touches your data

One person (Jacob Turner) plus four subprocessors: Cloudflare (hosting/storage), Anthropic (analysis), Stripe (payments), Resend (email delivery, once live). Full detail on the security page.

Your rights

1. Access, correction, deletion: email info@outreachadmin.com. Deletion requests are honored and confirmed to you in writing.
2. Unsubscribe: every email has an exit. Or just reply "stop."
3. GDPR/CCPA: if these apply to you, the rights above are how we honor them. For instance data, we act as your processor; a DPA is available on request.
4. Stop at any time: we hold no connection to your instance, so there is nothing to revoke. Simply stop sending exports, and email us to have what we already hold deleted.

Changes

If this policy changes in a way that matters, connected customers and members get an email before it takes effect. The effective date at the top always tells the truth.