Privacy Policy

1. Who operates this service

Outlio is an AI sales research and drafting product available at www.outlio.cloud. The service is operated by Wiser Marketing SRL, which is identified as the data controller for Outlio account and service data. Contact the operator at alejandro@wiserautomation.agency or through our support and privacy request form. Registered office: Strada Florilor nr. 57, Snagov, Ilfov County, Romania. Romanian company registration: J23/4097/2021; unique tax identifier (CUI): 44536206. These public-register details should be checked against the current official trade-register certificate before commercial launch.

2. Information we process

Account: email address, unique account identifier, authentication metadata and login/session events handled through Supabase Auth. Passwords are handled by the authentication provider and are not stored in plain text by Outlio.

Workspace: your business name, business description, ideal-customer profile, user-added companies, URLs, notes and unsent outreach drafts. We also process OAuth client details and hashed access/refresh credentials for ChatGPT linking.

Research: searches you request and candidate company names, public URLs and search-result snippets returned by an optional managed web-search provider. Such results are labeled unverified; Outlio does not guarantee that information is accurate or that any individual has consented to contact.

Optional Google mailbox connection: when you choose to connect your Google identity, Outlio stores your verified mailbox address, granted permission details and an encrypted Google refresh token for connection management. If you separately authorize Gmail metadata access, Outlio may check only headers and message IDs from conversations linked to Outlio-delivered messages to detect replies. It does not download message bodies or scan unrelated conversations in this feature. You can disconnect the account and request deletion of retained metadata through Support. Gmail metadata authorization may require additional Google verification before general availability.

Support: email, issue category, message content, creation date and resolution status when you contact us. Do not send passwords, API keys, payment details, or sensitive personal information in support requests.

3. Purposes and legal bases

We use your account information to authenticate you and provide requested research and drafting services (contractual necessity or steps requested before a contract). We process service-security events and abuse limits for our legitimate interests in security and reliability. We handle support and rights requests to answer you and meet applicable legal obligations. Where a different legal basis is necessary for prospect or other third-party personal data, you are responsible for assessing your intended use and complying with applicable law.

4. Providers and transfers

Outlio uses Supabase for hosted database and account authentication, Vercel for hosting, and ChatGPT/OpenAI when you choose to connect the ChatGPT app. A managed search provider may receive your query if live discovery is enabled. Provider processing locations and cross-border-transfer safeguards must be documented in the final controller disclosures. We do not sell account or prospect records to advertisers. No mailbox, enrichment or email-verification service is mandatory for the beta.

5. Retention and deletion

Workspace content remains in the account until you delete it or request deletion, subject to security, backup and legal retention requirements. Support requests are retained only as long as needed to resolve requests and comply with applicable obligations. A complete retention schedule and self-service export/deletion tooling are still being finalized. You may request access, correction, export or deletion through Support; requests will be verified before account changes.

6. Sharing, security and access

We restrict research and drafts to authenticated Outlio accounts and apply database row security and server-side account checks. ChatGPT access is granted through an OAuth consent flow; you should revoke access if no longer needed. No system can guarantee absolute security. We do not provide a feature that sends messages to third-party prospects in this beta.

7. Cookies and authentication

Authentication relies on browser storage/session data needed to maintain a secure signed-in session. We do not knowingly deploy third-party advertising trackers in this beta. We will update this notice before introducing non-essential analytics or advertising cookies.

8. Your rights and minors

Depending on your jurisdiction, you may have rights to access, correct, delete, restrict or object to processing, obtain portability, and complain to a data-protection authority. Contact us using the privacy request form. Outlio is intended for business users aged 18 or older and is not directed at children.

9. Updates and contact

Material changes will be indicated by an updated date and, where appropriate, an account notice. For privacy requests or concerns, contact alejandro@wiserautomation.agency or use outlio.cloud/support. This beta policy remains subject to legal review, verification of the company's registered details and final retention and transfer disclosures before public submission.