Privacy Policy

1. Overview

Outmate ("Outmate", "we", "us", "our") operates a business intelligence platform for B2B lead discovery, enrichment, and outreach automation. We respect your privacy and are committed to protecting your personal data in accordance with global privacy standards.

By using our services, you consent to the processing described in this policy. If you do not agree, please do not use the service.

2. Contact

Send privacy questions, access requests, or deletion requests to: gautam.singh@outmate.ai.

3. Data Collected

3.1 Account & Authentication

• Email address, full name, company, job title
• Password hash (hashed via pbkdf2-sha256), JWT tokens
• Google OAuth data: user ID, profile claims, email verification status
• Terms acceptance, subscription state, credits balance

3.2 Usage & Behavior

• IP address, browser, OS, device type, session timestamps
• Page actions, search and filter activity, feature usage
• Error logs and application event data

3.3 Prospect / Company Data

• Data imported or generated in the platform (contact info, firmographics, technographics, signals)
• Enrichment details, scores, source metadata
• Vector embeddings for similarity search (pgvector)

3.4 Third-Party Integrations

• Authentication via Google OAuth
• Provider integrations (Crustdata, Explorium, ContactOut, etc.)
• Optional email send scope: https://www.googleapis.com/auth/gmail.send

4. Purpose & Legal Basis

We use your data to:

• Create and manage user accounts
• Authenticate and authorize access (security enforcement)
• Deliver features, search results, and enriched data
• Support operations, billing, and customer support
• Improve the product and perform analytics
• Comply with legal obligations

5. Data Sharing

5.1 With service providers

Data is shared with subprocessors under contract and security controls, including:

• Cloud hosting (database, servers, cache)
• Email delivery providers
• Analytics and monitoring tools
• Payment processors
• Data enrichment vendors

5.2 Legal requirements

We may disclose personal data to comply with applicable law, enforce our terms, and respond to law enforcement requests.

5.3 Business transfers

If the company is acquired or reorganized, user data may be part of the transaction with notice provided to users.

6. Data Retention

We retain data as long as necessary to provide service, meet legal obligations, resolve disputes, enforce our agreements, and improve our product.

• Account data: until deletion + 2 years
• Logs and audit trails: generally 90 days to 2 years
• Billing records: 7 years
• Enrichment records: 1-3 years depending on plan and legal requirements

7. Security

• HTTPS/TLS everywhere
• Strong password hashing and token management
• SQL parameterization and input validation
• Rate limiting on auth endpoints
• Monitoring for unusual activity and incident response

8. Your Rights

You have the right to:

• Access and correct your personal data
• Request deletion (subject to legal obligations)
• Obtain a copy of your data in machine-readable form
• Object to certain processing and request portability

Submit requests to gautam.singh@outmate.ai. We respond under applicable law (e.g., 30 days for GDPR).

9. Google OAuth Details

We use OAuth for login and optional email send capability.

• Required scopes: openid, email, profile
• Optional scope: https://www.googleapis.com/auth/gmail.send
• Google token verification uses oauth2.googleapis.com/tokeninfo
• Google tokens are stored securely and can be revoked anytime in Google Account settings

10. Cookies & Tracking

We use cookies and local storage for:

• Authentication sessions
• UX preferences and app state
• Analytics and functional behavior (with consent)

11. Children

Our platform is not intended for users under 16 years old. We do not knowingly collect data from minors.

12. Changes to This Policy

We may modify this policy and will notify users through app notices and email when significant changes occur.

13. Contact