Privacy policy.
What data we collect, why, and your rights.
This policy explains what personal data GTM and Outreach collects, why, and what you can do about it. We follow India's Digital Personal Data Protection Act, 2023, and give the same rights to people everywhere, including under the GDPR.
Two kinds of data
- Your account data. We decide how this is used (we are the "data fiduciary" or "controller").
- Data you bring: your contacts and the emails you send and receive. You decide how it's used; we process it only on your instructions to run the service (we are your "processor").
What we collect about you
| Data | Why |
|---|---|
| Name, email, company | To create your account, verify you, and contact you about it |
| Billing details, GSTIN, address | To charge you and issue invoices. Card and UPI details are handled by Razorpay or Paddle, not stored by us |
| Mailbox credentials and tokens | To send and read email for you. Encrypted with AES-256-GCM |
| Usage and log data, IP address | To keep the service secure, prevent abuse and fix problems |
| Messages to support | To help you |
Data you bring
We store your contacts, campaigns, the emails you send and the replies you receive, so the service can work. We record opens and clicks when tracking is on. We never sell this data, use it to email anyone ourselves, or share it with other customers.
Who we share data with
Only the service providers we need to run the service, under contracts that protect your data:
- Oracle Cloud: hosting and database
- Cloudflare: network security and delivery
- Razorpay and Paddle: payments
- HubSpot, Salesforce and other tools: only if you connect them
We may share data if the law requires it. Your emails are sent through your own email provider, under their terms.
How long we keep it
We keep your data while your account is open. If you delete your account or ask us to, we delete your data within 30 days, except what we must keep by law, such as invoices.
Your rights
You can ask to see, correct, export or delete your personal data, withdraw consent, and nominate someone to act for you. Recipients of our customers' emails can unsubscribe from any email, and can ask us to pass a request to the sender. Write to support@example.com. We reply within 30 days. You can also complain to the Data Protection Board of India or your local data protection authority.
Security
See our Security page for how we protect your data.
Cookies
The app uses a sign-in cookie. The website uses no advertising or tracking cookies.
Changes
We'll post changes here and email you about important ones.