Privacy Policy

Outwire is a product of Voizor ([Voizor legal entity name and registered address]). You can reach us at privacy@outwire.co or saket@voizor.ai.

• Processor for customer data. Agencies use Outwire to manage their clients and their clients' prospects and leads. For that data the agency is the controller and Voizor processes it on the agency's instructions. If you are a prospect or a client contact of an agency, please contact that agency first; we will help them answer you.
• Controller for account data. For data about our own customers and their users (account details, billing, support and how the service is used), Voizor is the controller.

• Account data: names, work email addresses, roles, agency name, sign-in records.
• Billing data: plan, invoices and billing contact. Card details are collected and held by Stripe, not by us.
• Customer data: what agencies and their connected tools put into Outwire, such as client details and contacts, leads (names, emails, companies, job titles, LinkedIn URLs), replies and message content, campaign and deliverability statistics, call and meeting records, onboarding form answers, proposals, reports and notes.
• Connection credentials: API keys and authorisations for connected tools, encrypted at rest.
• Usage and technical data: audit log of actions, request logs, IP addresses and browser information needed for security and troubleshooting.
• Email delivery data: delivery, bounce and complaint events for the emails Outwire sends.

• To provide Outwire: sync connected tools, unify leads, classify and draft replies, build reports, run onboarding and proposals (performance of our contract, and the agency's instructions for customer data).
• To bill, support and communicate with customers about their accounts (contract, legitimate interests).
• To secure the service, prevent abuse and keep an audit trail (legitimate interests, legal obligations).
• To comply with law, tax and accounting rules (legal obligation).

• We do not sell personal data or share it for cross-context behavioural advertising.
• We do not use customer data to market to the people in it, and we do not send marketing email from Outwire's infrastructure.
• We do not let our AI provider train its models on customer data.

We use these providers to run Outwire. Each processes data only to provide its service to us, under a written agreement.

Tools that an agency connects (for example its CRM, sending tool or Slack) are chosen and contracted by the agency and are not our sub-processors. We will update this list before adding a new provider.

• Customer data is kept while the agency's account is active, and deleted when the agency deletes it or closes the account.
• Daily metric snapshots are deleted after 90 days. The raw payloads of events received from connected tools are removed after 180 days.
• Audit records are kept for the life of the account so changes stay accountable, including for deleted clients.
• Billing records are kept as long as tax and accounting law requires.
• After an account is closed, its data is deleted within [deletion period, e.g. 30 days], apart from backups, which expire on their normal cycle.

Data is encrypted in transit, and connection credentials are encrypted at rest with a dedicated key. Access is separated per agency and per client by database row-level security and role checks, and every action is written to an audit log. See Security for how automation is kept safe. No system is perfectly secure; if we become aware of a breach affecting your data we will notify you without undue delay.

Outwire's database and application run in the United States (AWS and Supabase, N. Virginia), as do our payment and AI model providers. Where data from the European Economic Area, the United Kingdom or Switzerland is transferred, we rely on adequacy decisions or the European Commission's Standard Contractual Clauses (and the UK addendum) with our providers. [Lawyer to confirm transfer mechanisms]

Depending on where you live (including under the GDPR, UK GDPR and the California Consumer Privacy Act), you may have the right to access, correct, delete or receive a copy of your personal data, to object to or restrict processing, and to withdraw consent. California residents also have the right to know what we collect and not to be discriminated against for using these rights. We do not sell or share personal information as the CCPA defines those terms.

Email privacy@outwire.co. We answer within one month (45 days under the CCPA). If your data is in Outwire because an agency uses it, we will pass your request to that agency. You may also complain to your local data protection authority.

Outwire uses only what it needs to work. There are no advertising or third-party analytics cookies.

• Sign-in cookies (names beginning sb-) keep you signed in securely.
• outwire_agency remembers which agency you were working in.
• outwire_sidebar remembers whether the app sidebar is collapsed.
• Local storage in your browser keeps view preferences such as filters, layouts and date ranges.

Because these are strictly necessary or preference settings you chose, we do not show a cookie banner.

Outwire is a business service and is not directed at anyone under 16.

We will post changes here and update the date at the top. For material changes we will email account owners in advance.

• Privacy requests: privacy@outwire.co
• Legal: legal@outwire.co
• Voizor: saket@voizor.ai
• EU or UK representative, if required: [representative details]