Privacy Policy

1. Data controller

Outboundr is a product of Hagenweb, a sole proprietorship registered in the Netherlands. Hagenweb is the data controller within the meaning of the General Data Protection Regulation (GDPR).

• CoC number: 97702463
• VAT number: NL003438808B09
• Email: info@outboundr.io

2. What data do we process?

We process the following categories of personal data:

• Account data: Name and email address, obtained via Google authentication upon registration.
• Usage data: Login timestamps, features used, searches and campaigns, for the operation of the platform.
• Lead data: Company names, contacts, phone numbers, email addresses and addresses you enter, import or reveal via the prospect search. These are data about third parties (your prospects), not about yourself.
• Payment data: Payment transactions are processed by Stripe. We do not store complete payment details.
• Technical data: IP address, browser type and session information, solely for security and debugging purposes.

3. Purposes and legal bases

4. Retention periods

• Account data: for as long as your account is active + 30 days after deletion.
• Lead data: for as long as your account is active + 30 days after deletion.
• Invoice data: 7 years (statutory retention requirement).
• Technical log data: maximum 90 days.
• Question box on the website: your question is sent to Anthropic to answer it and is not stored by us. To limit abuse we keep an encrypted form (hash) of your IP address for 48 hours.

5. Third parties (sub-processors)

We use the following sub-processors. A data processing agreement has been concluded with each of these parties, or they include standard contractual clauses (SCCs) in their terms:

We do not share your data with other third parties unless legally required.

6. Google user data

If you connect your Google account under Settings, Outboundr asks Google for two permissions. Google Calendar (calendar.events): to add the appointments you book with a lead to your own calendar. Gmail (gmail.send): to send appointment confirmations, meeting links and campaign emails from your own email address, when you choose to. Outboundr only creates calendar events and sends emails; it does not read, search or store the contents of your inbox or calendar.

To keep the connection working, we store the access and refresh tokens that Google gives us, encrypted. You can disconnect at any time under Settings, after which we delete these tokens. You can also revoke access yourself at myaccount.google.com/permissions.

We do not sell Google user data, do not use it for advertising, and do not share it with third parties, except where needed to provide these features, to comply with the law, or with your explicit consent. Nobody at Hagenweb reads this data, unless you ask us to for support, it is needed for security, or the law requires it.

Google user data is never sent to AI providers. Nothing Outboundr receives from Google APIs is passed to an AI model, and none of it is used to create, train or improve AI or machine learning models. AI can help you write an email that you then choose to send through Gmail; that is the only link between our AI features and your Google account.

Outboundr's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

7. Your rights

Under the GDPR, you have the following rights:

• Access: You may request what data we process about you.
• Rectification: You may have incorrect data corrected.
• Erasure: You may have your account and data deleted.
• Objection: You may object to processing based on legitimate interests.
• Data portability: You may request your data in a machine-readable format.
• Complaint: You may file a complaint with the Dutch Data Protection Authority (autoriteitpersoonsgegevens.nl).

To submit a request, send an email to info@outboundr.io. We respond within 30 days.

8. Lead data and GDPR responsibility

The lead data you collect via Outboundr (name, phone, email of prospects) constitutes personal data under the GDPR. You are the data controller for this data. You are therefore personally responsible for having a valid legal basis for outreach (e.g. legitimate interest in B2B communications) and for complying with the Telecommunications Act when making email contact.

Hagenweb acts as processor for the storage of this data and processes it solely on your instruction.

9. Security

We take appropriate technical and organisational measures to secure your data, including encrypted connections (HTTPS/TLS), access controls, and restricted access by staff to production data.

10. Contact

For questions about this privacy policy or a request based on your rights, please contact us at: info@outboundr.io