Privacy Policy | Outrelay

Outrelay ("we", "our") operates outrelay.io. This page explains how we collect, use, and protect information when you use our website and product.

Information we collect

We collect account information you provide (name, email, workspace details), LinkedIn sender and mailbox connection data necessary to run outreach on your behalf, prospect and campaign data you upload, and usage analytics to improve the service. If you connect Google services, we also collect Google account identifiers and the Google user data described below.

How we use information

We use your data to operate scheduled LinkedIn and email outreach workflows, provide inbox and analytics features, send service communications, and improve Outrelay. We do not sell your personal data. Google user data is used only to provide or improve the user-facing features described in the Google user data section below.

Google user data — access

If you connect Google sign-in, Gmail, and/or Google Calendar, Outrelay may access: (1) your Google account email address and basic profile information; (2) Gmail data needed to send messages you initiate or configure in Outrelay and to read inbound messages so prospect replies can appear in your Inbox; and (3) Google Calendar data needed to create or update meeting events you book or confirm in Outrelay. We request only the OAuth scopes required for these features (such as gmail.send, gmail.readonly, and calendar.events, plus basic openid/email/profile where applicable).

Google user data — use

We use Google user data solely to provide user-facing Outrelay features: sending outreach, follow-up, and meeting-invite emails from your connected mailbox; displaying and syncing prospect replies in Inbox; identifying the connected Google account; and creating calendar events for booked meetings. We do not use Google user data for targeted advertising, credit/lending decisions, or any purpose other than providing or improving these features, except where Limited Use policy exceptions apply.

Google user data — sharing & transfer

We do not sell Google user data. We do not transfer Google user data to data brokers or advertisers. Google user data may be processed by infrastructure sub-processors (for example cloud hosting) strictly as needed to operate Outrelay. We do not transfer raw or derived Workspace API user data (including Gmail and Calendar data) to third-party AI/ML services for training their models.

Google user data — protection

OAuth tokens and related credentials are encrypted at rest on a per-workspace basis. Data is transmitted over HTTPS/TLS. Access within Outrelay is limited to authenticated workspace members according to role permissions, and production access follows least-privilege practices.

Google user data — retention & deletion

We retain workspace data, including Google-connected integration data needed to operate features, while your account is active. You may disconnect Google integrations at any time in Settings, which stops further Google API access for that connection. You may request deletion of your account and associated data; we delete or return personal data from active systems within a commercially reasonable period, except where retention is required by law.

Google API Limited Use

The use of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Outrelay does not use raw or derived Gmail or Google Calendar (Workspace API) user data to develop, improve, or train generalized AI/ML models. Any AI-assisted drafting features operate on content you provide or generate in the product workflow and are not used to train generalized models on other users’ Google mailbox or calendar data.

Data retention & security

We retain your workspace data while your account is active. You may request deletion of your account and associated data. We use industry-standard safeguards to protect information in transit and at rest, including encryption of sensitive credentials such as OAuth tokens.

Third-party services

We use payment processors (such as Stripe), infrastructure providers, and optional integrations you enable (such as Google, Microsoft, HubSpot, or Salesforce where available) to operate the service. These partners process data only as needed to provide their services to us or as you authorize through an integration connect flow. A current sub-processor list is available on request at privacy@outrelay.io.

Your rights

Depending on your location, you may have rights to access, correct, or delete personal data. Contact us to exercise these rights. You can also disconnect Google or other integrations directly in Settings.

Contact

Privacy questions: hello@outrelay.io