What we collect and why

Outly is in an invite-only beta. This note explains, in plain words, what data the service holds. It is a beta notice, not a final policy, and will be replaced before general availability.

If you request access

We store the name, email, company, website and message you type into the form, and use them only to reply to you about access. Ask us and we delete them.

If you have an account

• Account data: your name, email, a salted password hash (we never see your password) and, if enabled, an encrypted two-factor secret.
• Workspace data: your company profile, the leads found for you, drafts, approvals and replies. Each workspace has its own separate database and is never pooled with other customers.
• Mailbox and provider credentials you connect are encrypted at rest and only decrypted for the job that uses them. They are never shown back in full.
• Security logs: sign-ins and administrative actions are recorded with time and IP address so we can investigate misuse.

About the businesses we research

Lead research reads public business information: map and directory listings, the businesses' own websites and public job boards. We don't scrape sites whose terms forbid it. Every cold email carries an opt-out, and opt-outs are permanent.

AI processing

Drafting and analysis use a third-party AI model provider. Content from your workspace is sent to the model only for the task at hand, and we do not use it to train models. Ask us for the current provider list.

Deleting your data

An org owner can delete the whole workspace from Settings. That removes its database, files and stored credentials. Anyone can ask us to delete their access request.