Privacy Policy

Effective date: April 12, 2026

Outwright ("we," "us," or "our") operates the Outwright platform at outwright.ai. This Privacy Policy explains how we collect, use, and protect your information when you use our service.

1. Information We Collect

Account information: Name, email address, company name, and hashed password when you create an account.

Prospect data: Names, companies, titles, contact information, and other data you upload via CSV import or manual entry. This is your data — we process it only to provide the service.

AI-generated content: Research profiles, email sequences, and outreach drafts generated by our AI on your behalf. This content belongs to you.

Usage data: Features used, pages visited, API calls made, and performance metrics. Collected to operate, maintain, and improve the platform.

Billing information: Payment processing is handled by Stripe. We do not store credit card numbers. Stripe's privacy policy applies to payment data.

2. How We Use Your Information

• Provide and operate the Outwright platform
• Generate AI-powered research and email sequences on your behalf
• Process billing and manage subscriptions
• Send service-related notifications (not marketing, unless you opt in)
• Monitor and improve platform performance and reliability

3. AI Data Handling

To generate research profiles and email sequences, your prospect data is sent to third-party AI providers (Anthropic and OpenAI) via their APIs.

• Anthropic and OpenAI do not use API data for model training, per their current API data usage policies.
• We do not use your prospect data, uploaded documents, or generated content to train any models.
• Research results and generated emails are stored in your organization's isolated database.

If you use BYOK (Bring Your Own Key) mode, your API keys are encrypted with AES-256-GCM before storage and decrypted only at runtime. They are never logged or exposed.

4. Data Storage & Security

• Encryption at rest: All sensitive data (API keys, OAuth tokens, credentials) encrypted with AES-256-GCM.
• Multi-tenant isolation: Every database query is scoped to your organization. Your data is never accessible by other organizations.
• Password security: Passwords hashed with bcrypt (cost factor 12). We cannot see or recover your password.
• Session security: Cookies are HttpOnly, Secure, and SameSite. Sessions use JWT with limited lifetimes.
• Transport security: All connections use HTTPS with HSTS enforcement.
• Rate limiting: Per-organization and per-user rate limits protect against abuse.
• Security headers: X-Frame-Options, XSS protection, and content type enforcement enabled.

5. Third-Party Services

We use the following third-party services to operate Outwright:

• Anthropic — AI generation (Claude API)
• OpenAI — Text embeddings for knowledge base search
• Stripe — Payment processing and subscription management
• PostHog — Privacy-friendly product analytics (no personal data shared)
• Microsoft Graph API / Google Gmail API — Only if you connect OAuth email delivery

6. Cookies

We use cookies strictly for platform operation:

• Session cookies — Required for authentication. Cannot be opted out.
• Analytics cookies — PostHog for product analytics. Can be opted out.

We do not use advertising, tracking, or third-party marketing cookies.

7. Data Retention

Your account data, prospect data, research profiles, and generated content are retained while your account is active. If you request account deletion, all data is permanently removed within 30 days.

8. Your Rights

• Access: View and export your data within the platform.
• Correction: Update inaccurate data at any time.
• Deletion: Request deletion of your account and all associated data.
• Portability: Request a copy of your data by contacting us.

To exercise any of these rights, email ellie@outwright.ai.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated effective date. Continued use of Outwright after changes constitutes acceptance.

10. Contact

Questions about this Privacy Policy? Contact us:

Email: ellie@outwright.ai
Phone: +1 (323) 766-6647
Address: 3438 Troy Dr, Los Angeles, CA 90068