Privacy Policy

OutreachFlow Privacy Policy

Effective Date: November 4, 2025

Legal Entity: Bongi Technologies LLC
Address: 1007 N Orange St, 4th Floor Suite #1086, Wilmington, DE 19801, USA
Contact: privacy@outreachflow.io

OutreachFlow (“we,” “our,” or “us”) is an outreach automation platform operated by Bongi Technologies LLC. This Privacy Policy explains how we collect, use, and protect your personal information when you use our website, applications, and related services.

We value your privacy and are committed to protecting your data. We never sell your information to third parties.

1. Information We Collect

1.1 Account Information

When you register for an account, we collect:

  • Full name
  • Email address
  • Phone number (optional)
  • Password (stored in hashed form)
  • Profile avatar (optional)

1.2 Email Account Data

When you connect email accounts to send campaigns, we collect:

  • Email address and display name
  • Email signature
  • OAuth tokens (for Gmail accounts) or SMTP/IMAP credentials (for custom email providers), stored in encrypted form
  • Sending activity metadata (delivery status, bounce rates, health check results)

1.3 Website and Contact Data

As part of the outreach workflow, the Service processes:

  • Website domains and publicly available SEO metrics (domain authority, traffic estimates, backlink data)
  • Publicly available contact email addresses associated with websites
  • Contact names associated with those email addresses
  • Email verification status

1.4 Campaign and Communication Data

When you create and run outreach campaigns, we store:

  • Campaign configuration (steps, templates, prompts, scheduling preferences)
  • AI-generated email content (subjects and bodies)
  • Outbound and inbound email messages (subject lines, body previews, timestamps)
  • Email threading metadata (message IDs, references)
  • Reply classifications and negotiation thread data

1.5 Billing and Transaction Data

Payment processing is handled by Stripe. We store:

  • Subscription plan and status
  • Transaction history (plan type, amount, status)
  • Credit balance and usage activity

We do not store your credit card numbers, bank account details, or other sensitive payment information. This data is held securely by Stripe in accordance with PCI-DSS standards.

1.6 Usage and Analytics Data

We collect standard usage data including:

  • Credit consumption records (activity type, credits used, timestamps)
  • Feature usage patterns
  • Google Analytics data (page views, session data, anonymized interaction data)

2. How We Use Your Information

We use the information we collect to:

  • Provide the Service — discover websites, find and verify emails, run outreach campaigns, generate AI email content, and manage negotiations
  • Process payments — manage subscriptions, credit purchases, and billing
  • Send emails on your behalf — deliver campaign emails and follow-ups through your connected email accounts
  • Generate AI content — create personalized email subjects and bodies using your campaign prompts and prospect context
  • Warm up email accounts — improve deliverability of your connected email accounts
  • Communicate with you — send account verification, billing notifications, credit usage alerts, and service updates
  • Improve the Service — analyze usage patterns, monitor deliverability health, and enhance features

3. Third-Party Services

We share data with the following third-party service providers, each governed by their own privacy policies:

  • OpenAI — campaign email content and warmup email content are generated using OpenAI’s API. Email prompts, recipient context, and conversation history are sent to OpenAI for processing. OpenAI’s data usage policies apply.
  • Stripe — payment processing and subscription management. Stripe receives your billing information directly.
  • Google (Gmail API) — if you connect a Gmail account, we use Google OAuth to send and read emails on your behalf. We request only the permissions necessary to operate the Service.
  • Brevo — transactional emails (account verification, notifications) are sent via Brevo.
  • Email verification providers — to verify the deliverability of discovered email addresses.
  • Google Analytics — anonymized usage analytics to improve the Service.

4. Data Retention

  • Account data is retained for as long as your account is active. Deleted accounts are soft-deleted and may be permanently removed after a reasonable retention period.
  • Campaign data (messages, events, prospects) is retained for as long as your account is active.
  • Activity and credit records are retained for billing and audit purposes.
  • Email account credentials are deleted when you disconnect an email account.

5. Data Security

We implement appropriate technical and organizational measures to protect your data:

  • Passwords are hashed using bcrypt
  • Email account credentials (OAuth tokens, SMTP passwords) are stored encrypted
  • All data transmission uses HTTPS/TLS encryption
  • Database access is restricted and monitored
  • Sessions are encrypted and expire after inactivity

6. Your Rights

Depending on your jurisdiction, you may have the right to:

  • Access your personal data
  • Correct inaccurate data
  • Delete your account and associated data
  • Export your data in a portable format
  • Withdraw consent for data processing
  • Object to certain processing activities

To exercise any of these rights, please contact us at the email address below.

7. Cookies

We use essential cookies for session management and authentication. We also use Google Analytics cookies for anonymized usage tracking. No third-party advertising cookies are used.

8. Children’s Privacy

The Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children.

9. International Data Transfers

Your data may be processed in countries other than your own, including the United States, where our third-party service providers operate. We ensure appropriate safeguards are in place for such transfers.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the “Last updated” date. Your continued use of the Service after changes constitutes acceptance of the updated policy.

11. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us at:

Email: privacy@outreachflow.com