Legal
Privacy Policy
Effective date:
1. Who we are
This Privacy Policy explains how OutreachOS (“we”, “us”, “our”), operated by Techxtreme Digital Studio, handles personal data when you use our website and application at https://outreachos-online.vercel.app (the “Service”).
Privacy contact: techxtremebuisness@gmail.com
This Privacy Policy applies to personal data processed in connection with the Service and is intended to meet applicable requirements under India’s Digital Personal Data Protection Act, 2023, and, where relevant, comparable principles under the EU/UK GDPR for users in those regions.
2. What OutreachOS does
OutreachOS is a personal lead-management tool. You can create an account, import business contact leads (for example from spreadsheets), organize and filter them, export lists, and optionally submit leads via an authenticated agent API. Each regular user’s leads are kept in their own vault and are not shared with other customers.
3. Data we collect
Account data. Email address; display name / username; authentication identifiers; password hashes (if you use email sign-in — we do not store plaintext passwords); Google account identifiers if you choose Google sign-in; role metadata needed for access control (for example admin, demo, or standard user); and records of your acceptance of our Terms, Privacy Policy, and Acceptable Use Policy at signup.
Lead / vault content you upload or create. Business names, niches, countries/regions, phone numbers, addresses, maps URLs, outreach status, and any other fields you import or enter. This may include personal data about third parties (for example a business owner’s phone number). You are responsible for having a lawful basis to process that information.
Usage and technical data. Approximate device/browser information, IP address, timestamps, security logs, and error or performance diagnostics needed to operate and protect the Service.
Communications. Messages you send us (for example support emails).
We do not intentionally collect special-category sensitive data.
4. How we collect data
- Directly from you (signup, profile, imports, in-app actions).
- From identity providers you choose (Google OAuth provides basic profile/email with your consent).
- Automatically through the Service (session cookies, security and infrastructure logs).
- From authorized agent API submissions using your credentials or configured secrets.
5. Why we process data (purposes & bases)
- Provide the Service — create accounts, store your vault, run imports/exports, enforce quotas (contract / legitimate interest).
- Security & abuse prevention — authentication, rate limits, fraud and misuse detection (legitimate interest / legal obligation where applicable).
- Support & service messages — respond to requests and send essential account notices such as email verification or password reset (contract / consent where required).
- Improve reliability — diagnose outages and bugs using limited technical logs (legitimate interest).
- Legal compliance — maintain records of terms acceptance and respond to lawful requests.
We do not sell your personal data. We do not use your lead vault to build advertising audiences or train public AI models.
6. Processors and sharing
We use service providers (“processors”) to host and operate OutreachOS. They process data only on our instructions:
- Supabase — authentication, database, and related backend infrastructure.
- Vercel — application hosting and edge delivery.
- Google — only if you use Google sign-in (identity provider).
We may disclose information if required by law, to protect rights and safety, or in connection with a merger/acquisition of the Service, subject to appropriate safeguards.
Other OutreachOS customers cannot access your vault. Demo accounts use curated sample data and remain limited.
7. Cookies and similar tech
We use cookies and local storage that are necessary for authentication sessions and security. Details are in our Cookie Policy. We do not run third-party advertising trackers on the Service.
8. International transfers
Infrastructure may process data in regions where our providers operate (including regions outside your country). Where required, we rely on appropriate contractual and technical safeguards offered by those providers.
9. Retention
- Account and vault data are kept while your account remains active.
- If you request deletion, we delete or anonymize personal account data and associated vault content within a reasonable period, except where we must retain limited records for security, dispute, or legal compliance (including terms-acceptance records where required).
- Security and operational logs are retained only as long as needed for those purposes.
10. Security
We use industry-standard protections appropriate to a hosted SaaS app (encrypted transport/TLS, access-controlled databases, role-based access, hashed passwords for email accounts). No method of transmission or storage is 100% secure; please use a strong unique password and protect your devices.
11. Your rights
Depending on where you live, you may have rights to:
- Access the personal data we hold about you
- Correct inaccurate data
- Export your leads (CSV export in-product where available)
- Delete your account and associated vault data
- Object to or restrict certain processing
- Withdraw consent where processing is consent-based
To exercise these rights, email techxtremebuisness@gmail.com from the address on your account. We may need to verify identity before acting.
12. Children
The Service is not directed to children under 16 (or the higher age required in your region). We do not knowingly collect children’s data. If you believe a child registered, contact us and we will delete the account.
13. Your responsibilities for third-party leads
When you import or store contact details about businesses or people, you are the controller of that data. You must only upload information you are allowed to process (for example lawful outreach lists) and comply with applicable telemarketing, spam, and privacy laws in the countries you contact. See also our Acceptable Use Policy.
14. Changes
We may update this Privacy Policy. We will change the effective date above and, for material changes, provide additional notice in the Service or by email when appropriate. Continued use after the update means you acknowledge the revised policy.
15. Contact
Questions about privacy: techxtremebuisness@gmail.com
Operator: Techxtreme Digital Studio. Also see our Terms of Service.