Outrelay

Data Processing Addendum

Last updated: July 2026

This DPA describes how Outrelay processes personal data for customers using outrelay.io. It supplements our Privacy Policy and Terms of Service.

Parties & scope

This Data Processing Addendum (“DPA”) forms part of the agreement between the customer (“Controller”) and Outrelay (“Processor”) for LinkedIn and email outreach automation and related workspace services. It applies when Outrelay processes personal data on the Controller’s behalf.

Nature of processing

Outrelay processes prospect and sender-related personal data to run outreach sequences, sync LinkedIn and mailbox inbox messages (including Gmail when connected), create calendar events when Google Calendar is connected, provide analytics/reports, and support workspace collaboration. Processing duration matches the subscription term unless deletion is requested earlier.

Controller instructions

Outrelay processes personal data only on documented instructions from the Controller, including campaign configuration, imports, and categorization actions performed by authorized workspace users.

Security measures

Outrelay applies industry-standard technical and organizational measures, including encryption in transit, access controls, credential encryption for LinkedIn sessions and OAuth tokens (including Google), and least-privilege production access.

Sub-processors

Outrelay may engage infrastructure and payment sub-processors (for example cloud hosting and Stripe) strictly as needed to operate the service. A current list is available on request at privacy@outrelay.io.

International transfers & assistance

Where personal data is transferred internationally, Outrelay uses appropriate safeguards. Outrelay will assist Controllers with data subject requests and security incident notices as required by applicable law (including GDPR where it applies).

Deletion & return

Upon termination or written request, Outrelay will delete or return Controller personal data from active systems within a commercially reasonable period, except where retention is required by law.

Contact

Privacy / DPA requests: hello@outrelay.io