Privacy

Last updated 11 October 2026

Draft, to be replaced with reviewed legal text. This page describes how the product handles data today; it is not a contract.

What OutboundManager is

OutboundManager is a reporting tool for outbound sales teams. A workspace connects its own sending tools (Instantly, Smartlead, HeyReach) and CRM (HubSpot) with API keys. We read data from those tools to show activity, rep scorecards and campaign to pipeline reports to the members of that workspace.

Data we store

• Your account: email address, name, and a password hash (scrypt) if you sign up with a password. If you sign in with Google we receive your email, name and profile picture URL.
• Your workspace: workspace name, timezone, members and their roles, invites, reps and their weekly targets, and weekly report settings (recipient emails and an optional Slack webhook).
• API keys and tokens: encrypted at rest with AES-256-GCM. They are used only by our servers to call the connected tool and are never sent back to the browser. The Slack webhook is encrypted the same way.
• Data synced from connected tools: senders (mailboxes, LinkedIn accounts, CRM owners), campaigns, prospect contact details (such as name, email, LinkedIn URL, company and title), activity (sends, replies with a text snippet, LinkedIn touches, meetings, calls) and CRM deals. On the first sync we fetch roughly the last 90 days.
• Operational records: sync run results, a log of attribution values written to HubSpot, and replies your team sends from the reply queue.

What we write to other tools

OutboundManager is read-mostly. It writes only:

• a reply that a member of your workspace writes and presses Send on, through the tool that received the original reply;
• if a workspace admin turns on write-back, four attribution properties on HubSpot deals (source campaign, channel, rep and touch date).

It does not send campaigns, sequences, automatic replies or AI-generated messages.

Who can see your data

Data belongs to a workspace and is only shown to members of that workspace, according to their role (admin, manager or rep). We do not sell it or use it to contact your prospects.

Service providers

The application and its database are run on cloud hosting providers. Weekly report emails are sent through an email delivery provider, and Slack reports go to the webhook you configure. The final list of sub-processors will be published with the reviewed policy.

Cookies

We set one session cookie (om_session) when you sign in. It is signed, HTTP-only and expires after 30 days. During Google sign-in a short-lived cookie protects the request. We do not use advertising or analytics cookies.

Removing data

A workspace admin can remove a connection at any time. That deletes its stored key and the senders, campaigns, activity and deals synced through it. To delete your account or a whole workspace, email hello@outboundmanager.app.

Contact

Questions about this page: hello@outboundmanager.app.