Privacy Policy

Outly AI (“Outly”, “we”) is operated by Lavudiya Balu (trading as OriginU Technologies), Hyderabad, Telangana, India. This policy explains what we collect when you use outly-ai.vercel.app and the Outly AI app, why we collect it, who else processes it, and how to have it removed. Questions: support@originutech.in.

1. What we collect

• Your account. Your name and email address, and either a hashed password, your Google sign-in, or a one-time sign-in link sent to your email.
• Data you put in your workspace. Leads and contacts you import or add (names, work email addresses, job titles, company details), your campaigns and email sequences, notes, tasks, pipeline stages and meetings.
• Connected email accounts. When you connect Gmail or Microsoft 365/Outlook we store access tokens, encrypted at rest with AES-256-GCM. With them we send the campaign emails you create, and we read incoming mail in that mailbox to find replies and bounce notices for emails Outly sent. Messages that are not a reply to an Outly email are checked and skipped; they are not stored.
• Other tools you choose to connect. For example Google Calendar, Outlook Calendar, Google Analytics (read-only), HubSpot, Salesforce, Pipedrive, Slack, Microsoft Teams, Apollo, Hunter, Zapier/Make webhooks and AI tools connected over MCP. We access only what each connection needs to do the job you set it up for, and you can disconnect any of them at any time.
• Technical data. Basic server logs (such as IP address, browser type and timestamps) used for security and debugging. We use a session cookie to keep you signed in. We do not use advertising or cross-site tracking cookies.

2. How we use it

• To run the service: import and check leads, draft and send your campaigns, detect and sort replies, update your pipeline, and send you alerts.
• To keep it secure and working: preventing abuse, enforcing sending limits, and fixing problems.
• To contact you about your account, such as security notices or important changes.

We do not sell your data, and we do not use your workspace data or emails for advertising.

3. AI processing

When you use AI features (drafting emails, classifying replies, company research, the Copilot), the relevant text is sent to OpenAI to generate the result. OpenAI processes it under its API terms, which do not use API data to train its models by default.

4. Google user data

Outly AI’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We use Gmail access only to send the emails you create in Outly and to identify replies and bounce notices to those emails, and Calendar and Analytics access only for the features you turn on. We do not use Google user data to develop or train generalised AI models, and we do not let people read it except with your permission, for security, or where the law requires.

5. Who else processes data

• Vercel (hosting) and Neon (database). Data is stored on servers in the United States.
• OpenAI (AI features), as described above.
• Resend (sign-in emails).
• Google and Microsoft, when you connect their accounts, and any other tool you connect.

We may also disclose data if the law requires it.

6. The people in your lead lists

You decide which contacts to import and email, so you are responsible for having a lawful basis to contact them and for honouring opt-out requests. When a recipient replies asking to unsubscribe, Outly suppresses them from all future campaign sends in your workspace. Anyone who believes we hold their data can write to support@originutech.in and we will help them reach the workspace owner or remove it.

7. How long we keep it, and deletion

We keep your data while your account is active. Disconnecting an email account or integration stops our access to it immediately. To delete your account and workspace data, email support@originutech.in from your account address; we delete it within 30 days, except anything we must keep by law.

8. Your rights

You can ask to access, correct or delete your personal data, or withdraw consent for a connection, by emailing us. If you are unhappy with our response, you may complain to the relevant authority, including the Data Protection Board of India.

9. Security

Connection tokens are encrypted, workspace data is separated by account, and traffic is served over HTTPS. No system is perfectly secure; if a breach affects your data we will notify you without undue delay.

10. Children

Outly AI is a business tool and is not intended for anyone under 18.

11. Changes and contact

If we change this policy we will update the date above, and tell you by email for significant changes. Grievance and contact: Lavudiya Balu (trading as OriginU Technologies), Hyderabad, Telangana, India, support@originutech.in.