LEGAL
Privacy Policy
Last updated: July 18, 2026
1. Introduction
Outapilot (“we,” “us,” or “our”) operates a lead-generation and email outreach platform. This Privacy Policy explains what information we collect, how we use it, who we share it with, and what choices you have. By using Outapilot you agree to the practices described here.
2. Information We Collect
We collect information in two main ways:
Information you provide
- Account details — name, email address, and password when you sign up.
- Billing information — processed by our payment provider; we store only a plan identifier and subscription status, never raw card numbers.
- Campaign and sequence configuration — the keywords, locations, and email copy you create inside the platform.
- Email sending credentials — SMTP server settings or domain verification records you supply to enable outreach.
Information generated by the platform
- Scraped business lead data — business name, address, phone number, website URL, and other publicly listed details gathered from Google Maps via our scraping provider on your behalf.
- Email sending activity — delivery status, open and click events (when managed sending is used), and bounce or error records.
- Usage data — server logs, IP addresses, browser type, and in-app activity used to operate and improve the service.
3. How We Use Your Information
- To create and maintain your account.
- To run scrape jobs, deduplicate leads, and enroll them in your email sequences.
- To process billing and enforce plan limits (campaigns, lead pool size, emails per month).
- To send transactional emails (password resets, billing receipts) and, where you have opted in, product updates.
- To detect abuse, enforce our acceptable-use policy, and comply with legal obligations.
- To improve the platform — aggregate, anonymised analytics only; we do not sell individual usage data.
4. Third-Party Processors
We share data with third parties only to the extent necessary to operate the platform:
- Scraping — Apify — executes Google Maps scrape jobs on your behalf.
- Email delivery — Postmark — used for managed sending with open and click tracking.
- Payments — billing provider — handles subscription checkout and renewal.
- Authentication — Clerk — manages sign-up, sign-in, and session tokens.
- Infrastructure — database and hosting providers — your data is stored on servers operated by our hosting provider.
- Job scheduling — Upstash / QStash — used to schedule scrape jobs and email sends reliably.
We do not sell your personal data or your lead data to any third party.
5. Data Retention
We retain your account data for as long as your account is active. If you delete your account, we will delete or anonymise your personal data within a reasonable period, except where we are required to retain it for legal or audit purposes.
6. Security
We use industry-standard measures — encrypted connections (TLS), hashed passwords, and access controls — to protect your data.
7. Your Rights
Depending on where you are located you may have rights to:
- Access the personal data we hold about you.
- Correct inaccurate data.
- Request deletion of your data.
- Object to or restrict certain processing.
- Receive a copy of your data in a portable format.
8. Cookies and Tracking
We use strictly necessary cookies for authentication sessions. We may use analytics cookies to understand aggregate usage patterns. We do not use advertising or cross-site tracking cookies.
9. Children
Outapilot is not directed at children under 16. We do not knowingly collect personal data from anyone under 16.
10. Changes to This Policy
We may update this policy from time to time. When we do, we will revise the “Last updated” date at the top and, for material changes, notify you by email or in-app notice.