Privacy, written to be read.

What we collect, and why

1. Health Check answers + your email (if you take the free quiz and leave it): used to generate your results and send your fix list. Stored so we can follow up; unsubscribe anytime.
2. Purchase details (name, company, billing email): handled by Stripe. We never see or store full card numbers.
3. Instance export data (paying Autopilot/Deep Audit customers): the standard Outreach exports you run and send us, which contain your Outreach configuration and activity data, including personal data about your prospects (names, emails, activity). We hold no credential for your instance and extract nothing from it ourselves; we only receive what you send. We process it solely to produce your audits and reports, acting as a processor on your behalf. Raw extracts are kept only as long as needed to produce your audit, and deleted on request; reports keep aggregates and findings.
4. Member questions (Ask-the-Admin, the monthly AMA): used to answer you and to improve the answer library. Anonymized before any reuse.
5. Basic technical logs (IP on form submissions, for abuse prevention).

What we don't do

1. No selling or renting your data. Ever, to anyone.
2. No advertising trackers, no third-party analytics cookies. The only cookie we set is the access cookie for your own client dashboard.
3. No training AI models on your data. Analysis runs on Anthropic's commercial API, which doesn't train on customer data either.
4. No live sales calls, so also no call recordings. There's nothing to record.

Who touches your data

One person (Jacob Turner) plus four subprocessors: Cloudflare (hosting/storage), Anthropic (analysis), Stripe (payments), Resend (email delivery, once live). Full detail on the security page.

Your rights

1. Access, correction, deletion: email jacob@outreachadmin.com. Deletion requests are honored and confirmed to you in writing.
2. Unsubscribe: every email has an exit. Or just reply "stop."
3. GDPR/CCPA: if these apply to you, the rights above are how we honor them. For instance data, we act as your processor; a DPA is available on request.
4. Stop at any time: there is no connection to revoke, because there is none to begin with. You send export files yourself, so stopping means not sending the next one. No permission needed from us.

Changes

If this policy changes in a way that matters, connected customers and members get an email before it takes effect. The effective date at the top always tells the truth.