Privacy Policy
Last updated: September 21, 2026
1. Overview
This Privacy Policy explains what personal data Outbound Suite pro ("we", "us", "our") collects when you use our website and platform, why we collect it, how it is used, and the choices and rights you have over it. We are committed to protecting your privacy and to complying with applicable data-protection law, including the EU General Data Protection Regulation (GDPR), the UK GDPR and the California Consumer Privacy Act (CCPA).
2. Who we are
Outbound Suite pro provides a cold-email outreach and newsletter marketing platform. For the personal data of our own customers and website visitors, we act as the data controller. For the contact lists our customers upload and process through the platform (for example, leads and newsletter subscribers), we act as a data processor on the customer's instructions — see our GDPR & Data Protection page for details.
3. Information we collect
- Account data — name, email address, password (stored hashed), workspace/company name, country and city if you provide them, and account settings.
- Billing data — subscription and payment references. Card details are handled by our payment processor (Stripe) and are never stored on our servers.
- Sending-account data — SMTP connection details you configure (host, username, encrypted password) to send on your behalf.
- Contact data you upload — the leads and newsletter subscribers you import or collect through embeddable forms, including names and email addresses.
- Usage data — pages visited, actions taken, delivery analytics (sends, opens, clicks, bounces, replies), and technical data such as IP address, browser type and device.
- Support data — information you share when you contact us or open a support ticket.
4. How we use your information
- To create, operate and secure your account and provide the service.
- To send, track and report on the campaigns you run through the platform.
- To process payments and manage subscriptions.
- To provide customer support and respond to your requests.
- To detect, prevent and investigate fraud, abuse and violations of our Anti-Spam Policy or Terms.
- To improve the product, understand usage and, where you have consented, send you product updates.
5. Legal bases (GDPR)
We process personal data on the following legal bases: performance of a contract (providing the service you signed up for), our legitimate interests (security, analytics, product improvement, support), compliance with legal obligations, and consent where required (for example, optional marketing and non-essential cookies).
6. Your responsibilities as a controller
When you upload contacts or collect subscribers, you are the data controller of that personal data and are responsible for having a lawful basis to process it (for example, consent or legitimate interest) and for honouring unsubscribe and data-subject requests. Outbound Suite pro processes that data only on your documented instructions.
7. How we share information
We share personal data only with trusted sub-processors who help us deliver the service, and only as needed. These include: our payment processor (Stripe), hosting and infrastructure providers, email-sending providers you configure yourself, and analytics/CDN providers. A summary of sub-processors is listed on our GDPR & Data Protection page. We do not sell personal data.
8. International transfers
Some of our sub-processors may store data outside your region. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses to keep transfers lawful. For email data, sending occurs through the SMTP provider you connect, which may itself be outside your region.
9. Data retention
We keep personal data for as long as your account is active and for a reasonable period afterwards to satisfy legal, accounting and abuse-prevention obligations. Contact lists remain in your workspace until you delete them or close your account; unsubscribe/suppression records are retained as required to protect deliverability and honour opt-outs.
10. Security
We use industry-standard safeguards including encryption in transit, hashed passwords, encrypted SMTP credentials, access controls and monitoring. No method of transmission or storage is completely secure; we work continuously to protect your data but cannot guarantee absolute security.
11. Your privacy rights
Depending on your location you may have the right to access, correct, delete or export your personal data, to object to or restrict certain processing, and to withdraw consent. You can manage much of this from your workspace; otherwise contact us using the details in Section 13. EU/UK users also have the right to lodge a complaint with their supervisory authority.
12. Cookies
We use essential cookies to operate the service and, with your consent, optional analytics cookies to understand usage. See our Cookie Policy for details and how to manage your choices.
13. Changes to this policy
We may update this policy from time to time. Material changes will be posted on this page with an updated date. Continued use of the service after changes take effect constitutes acceptance of the revised policy.
14. Contact us
For privacy questions or to exercise your rights, contact us through our contact form.