Who we are
Outreach is operated by afflu (afflu.ca). When you use Outreach, afflu is the data controller responsible for your information. You can reach us at hello@afflu.ca.
What we collect
We collect only what's necessary to run the service:
- Account information — your name and email address, obtained from Google or Microsoft when you sign in via OAuth.
- OAuth tokens — access and refresh tokens from Google or Microsoft, which we use solely to send emails on your behalf from your inbox. These are stored encrypted.
- Lead data — contact information (names, email addresses, companies, and other fields) from files you upload. This data belongs to you.
- Email content — subject lines and message bodies you write or generate through the service, and logs of emails sent.
- Usage data — basic server logs (timestamps, request paths, errors) for debugging and reliability. We do not use analytics trackers or third-party tracking pixels.
How we use your data
Your data is used only to provide the service:
- Authenticating your account and maintaining your session.
- Sending emails from your Gmail or Outlook inbox on your instruction.
- Generating AI-drafted email content using your campaign context and lead data via the Anthropic API.
- Scheduling and managing follow-up cadences you configure.
- Storing your leads and send history so you can track what has been sent.
We do not sell your data, use it for advertising, or share it with any party except as described below.
Third-party services
Running Outreach requires a small number of third-party services:
- Google / Microsoft — OAuth sign-in and email sending via their APIs. Your use of Gmail or Outlook is subject to Google's Privacy Policy and Microsoft's Privacy Statement.
- Anthropic — AI email generation. Lead data and campaign context are sent to the Anthropic API to draft emails. Anthropic's data handling is governed by their Privacy Policy.
We do not use any other third-party analytics, advertising, or data-sharing services.
Data retention
Your data is retained for as long as your account is active. If you cancel and want your data deleted, email us at hello@afflu.ca and we'll remove it within 30 days. Server logs are automatically purged on a rolling basis.
Security
OAuth tokens are stored encrypted. We use HTTPS for all traffic. Access to production systems is restricted. That said, no system is perfectly secure — please use a strong password on your Google or Microsoft account and keep your OAuth permissions up to date.
Your rights
You can request access to, correction of, or deletion of your personal data at any time by emailing hello@afflu.ca. You can revoke Outreach's access to your Google or Microsoft account at any time through your account security settings with those providers.
Children
Outreach is not intended for use by anyone under 18. We do not knowingly collect data from minors.
Changes to this policy
If we make material changes to this policy, we'll update the date at the top of this page. Continued use of the service after a change constitutes acceptance of the updated policy.
Contact
Questions about privacy? Email hello@afflu.ca.