Privacy Policy
This service is operated under the trade name ApexOutreach (our "doing business as" name). In this Privacy Policy, "ApexOutreach," "we," "us," and "our" refer to the business operating this autonomous B2B outreach platform. This policy explains what information we collect, how we use it, who we share it with, and the choices you have.
1. Information we collect
Account & workspace information
When you create a workspace, we collect your name, email address, company name, and the campaign configuration you provide (your ideal-customer profile, target industries and regions, message content, sending preferences, and volume settings).
Connected inbox data (Google / Gmail)
If you connect a Gmail account, you authorize us to draft, send, and read messages within that account to run your outreach and detect replies. We store an OAuth refresh token (held in Google Secret Manager) to perform these actions on your behalf. We access only the messages and threads related to your outreach; we do not read unrelated email.
Prospect data
Our agents generate and store business and contact information (company, website, decision-maker name, role, and email) sourced from publicly available web data, so you can review and reach out to prospects.
Usage & technical data
We collect standard log and device data (IP address, browser, timestamps) to operate and secure the service.
2. Google API Services — Limited Use
ApexOutreach's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. Specifically, data obtained from Gmail is used only to provide the user-facing outreach features you enable, is not sold, is not transferred to others except as needed to provide those features (or as required by law), and is not used for advertising. Humans do not read your Gmail data except with your consent, for security, or as required by law.
We do not use Gmail data — or any Google user data — to develop, improve, or train generalized or non-personalized artificial-intelligence or machine-learning models. Where Gmail message content is processed by Google's Gemini API (to generate outreach copy or to classify a reply as a response, bounce, or out-of-office notice), it is processed under paid API terms under which Google does not use that content to train its models. Gmail message content is never sent to any other third-party provider; for example, our web-search provider receives only public business names and never your email content.
3. How we use information
- Operate the service — find prospects, verify contacts, write and draft emails, send outreach you approve, and surface replies.
- Personalize and calibrate your campaigns to your goals.
- Provide support, secure the platform, and prevent abuse.
- Improve our non-Gmail features using aggregated or de-identified data; we never use Gmail or other Google user data to train or improve generalized models.
4. Service providers & sharing
We do not sell your personal information. We share data with a limited set of processors strictly to run the service:
| Provider | Purpose |
|---|---|
| Google Cloud / Firebase | Hosting, database, authentication, secret storage |
| Google Gmail API | Drafting, sending, and reading your outreach messages |
| Google Gemini | Generating email copy, extracting contact details, and classifying replies (response / bounce / out-of-office). Processed under paid API terms that do not train Google's models. |
| Tavily | Live web search for prospecting and enrichment. Receives only public business names and search terms — never your Gmail content. |
| Stripe | Subscription billing and payment processing |
We may also disclose information to comply with law or to protect our rights and users.
5. Data retention
We retain workspace and prospect data for as long as your account is active. You can delete leads, disconnect your inbox, or request deletion of your workspace at any time; we remove associated data within a reasonable period, except where retention is required by law.
6. Security
ApexOutreach runs on Google Cloud. Data is encrypted in transit and at rest, workspaces are isolated per tenant, and sensitive credentials (such as your inbox token) are stored in Google Secret Manager and never exposed to the browser.
7. Your choices & rights
- Access, correct, or delete your account and workspace data.
- Disconnect a connected inbox at any time, which revokes our access.
- Depending on your location, you may have additional rights under laws such as the GDPR or CCPA (access, portability, deletion, objection).
8. Cookies
We use essential cookies and local storage to keep you signed in and to operate the app. We do not use advertising cookies.
9. Changes to this policy
We may update this policy from time to time. Material changes will be reflected by the "Last updated" date above.
10. Contact
Questions about this policy or your data? Email privacy@apexoutreach.app.