1. Who we are
Outboundrix LLC ("Outboundrix", "we", "us") provides a go-to-market platform for B2B outbound. This policy explains what we collect, why, and the choices you have. Questions: privacy@outboundrix.com. Data protection contact: dpo@outboundrix.com.
2. Data we process
2.1 Account data
- Name, work email, company, role, and workspace settings
- Authentication data and audit-log entries for actions you take
2.2 Customer content
- Contacts, companies and deals you import or create
- Sequences, messages, mailbox connections and send/reply events
- API keys (stored hashed) and integration credentials (encrypted)
2.3 LLM provider keys
If you enable the AI agent you supply your own LLM provider key. It is stored encrypted, scoped to your workspace, and used only to call the provider you chose. We do not use your prompts or content to train any model.
2.4 Technical data
- IP address, browser and device information, and product usage events
- Cookies and similar technologies (see our Cookie Policy)
3. How we use data
- Provide and secure the platform (legal basis: contract)
- Improve features and fix issues (legitimate interest)
- Send product and marketing updates you opted into (consent)
- Meet legal, tax and security obligations (legal obligation)
We do not sell personal data.
4. Sub-processors
We use a limited set of vetted sub-processors for hosting, payments and transactional email under data processing agreements. Your configured LLM provider acts under your own agreement with that provider. A current sub-processor list is available on request to privacy@outboundrix.com.
5. Your rights
Subject to GDPR, UK GDPR and CCPA/CPRA, you can access, correct, export, delete or restrict processing of your personal data, and object to or withdraw consent. Exercise rights via account settings or privacy@outboundrix.com. We respond within 30 days (GDPR) or 45 days (CCPA).
6. Retention
- Account and customer content: for the life of the workspace plus 90 days
- Billing records: 7 years where legally required
- Usage telemetry: up to 24 months
7. International transfers
Where data moves across borders we rely on Standard Contractual Clauses or an equivalent recognised transfer mechanism.
8. Security
Encryption in transit and at rest, role-based access control, audit logging, and least-privilege internal access. See our security page for detail.
9. Changes
Material changes are announced in-app and by email at least 30 days before they take effect. Continued use after that constitutes acceptance.
10. Contact
privacy@outboundrix.com for privacy requests; dpo@outboundrix.com for data protection matters. EU/EEA and UK users may also complain to their local supervisory authority.