Short version: we use your data to run your trial. Nothing else.

Last updated: September 2026 · Contact: support@outrovo.com

What we collect

When you claim the free trial or sign up, we receive your name, work email, company description, and ideal-customer description. When you pay, our payment provider processes your payment — we never see or store your card number.

Google sign-in & Gmail data

If you choose “Continue with Google”, we receive your name, email address, and profile picture from your Google account. We use them only to create your Outrovo account, personalize your workspace (display name and avatar), and send account-related emails such as trial confirmations. If you connect Gmail as your sending mailbox, we request the openid, email, and gmail.send scopes and use Google’s Gmail API only to send emails from your Gmail account — never from anyone else’s. We do not request gmail.readonly or any other Gmail read scope, so the Gmail API is not used to read your mailbox. Sending only happens on your explicit action: when you press Send on a draft you have reviewed, or automatically on the schedule you set when you enroll leads in a follow-up sequence (you can pause or stop a sequence at any time). Separately, to detect replies and bounces to your outreach, Outrovo can check your sending inbox via IMAP using mailbox credentials you provide (not via the Google API). When an ambiguous reply is found, we send to our AI provider the reply text (up to ~1,200 characters for classification), and for suggested responses the reply excerpt (up to ~800 characters), the original subject (up to ~200 characters) and original email body excerpt (up to ~800 characters), prospect name and company, detected intent, and, when available, your booking link and sender name. Every outreach email carries an unsubscribe link, and opt-outs are honored automatically. Outrovo only sends to company (work) email addresses — personal inboxes (Gmail, Yahoo, Outlook, and similar free providers) are blocked from outreach entirely. Outrovo’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. You can revoke our Google access at any time in your Google Account security settings; revoking access immediately stops all sending through your Gmail account.

How we protect your data

All traffic between your browser and Outrovo is encrypted with TLS (HTTPS). Mailbox credentials and Gmail sending-mailbox OAuth tokens are encrypted at rest using AES-256-GCM; the encryption key lives only in our server environment, never in the database, and secrets are excluded from public API responses. Secrets are protected by TLS in transit. Each workspace can only access its own data — users never see other workspaces’ leads, drafts, or settings. We do not sell your data, share it with advertisers, or use it to train machine-learning models.

AI processing

Outrovo uses one third-party AI provider: Groq, Inc. (api.groq.com), via its official SDK, to power lead parsing, draft writing, reply classification, and the workspace assistant. The default model is identified as “openai/gpt-oss-120b” in Groq’s model catalog. In the production code we examined, calls go directly to Groq’s API with no custom endpoint override, and we did not observe any AI aggregator, gateway, or model hub in the request path. Data sent to Groq is limited to what each task needs: for lead drafting, your typed buyer description, public company-website URLs and up to ~6,000 characters of extracted public website text, prospect name, company, domain, and personalization context, and sender details; for reply classification, the inbound reply text (up to ~1,200 characters) when rule-based checks are inconclusive; for suggested replies, the reply excerpt (up to ~800 characters), original subject (up to ~200 characters) and original outbound body excerpt (up to ~800 characters), prospect name and company, detected intent, and optional booking link and sender name; for the workspace assistant, your current message, excerpts of recent conversation history (up to ~2,000 characters per message), the assistant’s task instructions and the structured action it selects, and execution results (up to ~4,000 characters) which can include lead names, domains, email addresses, subjects, bodies, statuses and IDs, workspace statistics, plan and credit usage, search-job and sequence details, and send outcomes. Google API-derived data — your Google account profile obtained at sign-in and Gmail API send operations — is not sent to Groq. Reply content read over IMAP uses mailbox credentials you separately provide (not the Google API), even when the mailbox is Gmail-hosted. Per Groq’s public documentation (console.groq.com/docs/your-data), inference inputs and outputs are not retained by default; Groq may temporarily log them for platform-reliability troubleshooting or suspected-abuse investigations, retained up to 30 days; usage metadata is retained but excludes customer inputs and outputs; customers may enable Zero Data Retention via Data Controls. See Groq’s documentation for the current details and any account-specific settings.

How we use it

Only to build and deliver your leads and drafts, confirm your request by email, and (for customers) operate your subscription. We do not sell your data, share it with advertisers, or email you marketing you did not ask for.

Prospect data

Leads we research for you come from public business sources. Outreach goes to company (work) email addresses only — personal inboxes are never targeted. Every email includes an unsubscribe link, and opt-outs are honored automatically.

Retention & deletion

Trial data is kept while your trial is active and for up to 12 months after, so we can answer follow-ups. Email support@outrovo.com any time and we will delete your data within 30 days.

Refunds & cancellation

Plans are month-to-month and can be cancelled any time from your billing link (PayPal) — no emails, no calls needed. If your first paid batch misses the 3% bounce guarantee, we replace the bounced leads free.