Privacy Policy

Last updated 14 August 2026 · Effective 14 August 2026

1. Who we are

Outfluent ("Outfluent", "we", "us", "our") is an AI prospecting platform operated by RKS GROUP WA PTY LTD. This policy covers the Outfluent website at outfluent.ai, the Outfluent application at app.outfluent.ai, and the Outfluent Chrome extension (together, the "Services").

By using the Services you agree to this policy. If you do not agree, please do not use the Services.

2. Your data and your prospects' data are handled differently

This is the most important thing to understand about how Outfluent works, so we have put it near the top rather than buried in a definitions section.

For your own account information — your name, email, billing details and usage — Outfluent is the data controller. We decide why and how it is processed, and this policy governs it.

For information about the prospects you contact — the people whose profiles you view and message on social platforms — you are the data controller and Outfluent is your processor. You decide who to contact, what to say, and what to keep. We process that data on your instructions, to provide the Services to you. This means the legal responsibility for lawful outreach sits with you, and we explain that in more detail in section 4 and in our Terms and Conditions.

3. Information we collect

Information you give us

• Account information: name, email address, password credentials handled by our authentication provider, workspace and organisation names, and your role within a workspace.
• Billing information: billing name, address, country, and subscription and wallet transaction history. Card numbers are entered directly with our payment processor and are never stored on Outfluent's servers.
• Content you create: campaigns, offer and audience descriptions, message templates, knowledge-base files you upload, and your configuration and settings.
• Support communications: messages you send us and the correspondence that follows.
• Your own API keys where you choose to bring your own keys for AI models or enrichment vendors. These are encrypted at rest with AES-256-GCM and are used only to make the calls you request.

Information we collect automatically

• Usage data: features used, actions taken, campaigns run, message and AI operation counts, and wallet debits.
• Technical data: IP address, browser type and version, device and operating system, time zone, and referring pages.
• Diagnostics: error reports and performance traces used to find and fix faults.

Information about prospects

Described separately in section 4, because it works differently from everything above.

4. The Chrome extension and prospect data

Outfluent operates through a Chrome extension that runs inside your own browser, on your own already-logged-in social accounts. This design has direct privacy consequences, and they are good ones:

When you view or engage a prospect's profile through the extension, information that is already visible to you on that platform may be captured into your own private workspace dataset. This can include a prospect's name, public profile handle, headline or job title, employer, location, public biography, publicly listed contact details, and the content of conversations you have with them.

That dataset is private to your workspace. It is not pooled, shared, resold, or made available to other Outfluent customers. Where you enable optional third-party enrichment using your own vendor keys, requests are made to those vendors under your account and their handling of that data is governed by their own policies.

Because you decide who to contact and what to collect, you are responsible for having a lawful basis for that processing, for honouring opt-out requests, and for complying with each platform's own terms and with the data protection and anti-spam law that applies where you and your prospects are located. Our Terms set out these obligations.

5. How we use information

• To provide, operate and maintain the Services.
• To create and administer your account, workspace and organisation hierarchy.
• To process subscription payments, wallet top-ups and usage debits.
• To run the campaigns, conversations, follow-ups and bookings you configure.
• To generate message drafts and conversational replies using AI models, using either your own keys or, if you choose the platform-key option, ours.
• To send you transactional and service messages — receipts, security notices, quota and payment-failure warnings, and product updates about the Services you use.
• To provide customer support and respond to your requests.
• To monitor, secure, debug and improve the Services, including detecting fraud and abuse.
• To meet legal, tax and regulatory obligations.

6. SMS, text messaging and consent

Where you provide your mobile number and opt in, we may send you SMS messages relating to your account — such as verification codes, security alerts, payment-failure notices and service notifications. Consent to receive SMS is collected through an explicit opt-in and is never a condition of purchasing anything.

Message frequency varies according to your account activity. Message and data rates may apply. You can opt out of SMS at any time by replying STOP to any message, and you can reply HELP for assistance or contact us at support@outfluent.ai. Opting out of SMS does not opt you out of essential email notices about your account.

If you use Outfluent to send messages of your own to your prospects, you are the sender of those messages and you are responsible for obtaining any consent the law requires, for honouring opt-outs, and for registering your own messaging campaigns with carriers where that is required.

7. We do not sell your personal information

Outfluent does not sell, rent, or trade your personal information, and does not sell the prospect data held in your workspace. We do not share personal information with third parties for their own independent marketing or advertising purposes. We have not sold personal information in the preceding twelve months and have no plans to.

8. Who we share information with

We share information only with service providers who help us run the Services, and only to the extent each needs it. Our providers are bound by contract to protect it and to use it only for the purposes we specify.

• Hosting and delivery: Vercel (application and website hosting), and a private virtual server for background jobs and caching.
• Database and authentication: Supabase.
• File storage: Cloudflare R2, for knowledge-base files you upload.
• Payments: Stripe. Card data is collected and stored by Stripe, not by us.
• AI model providers: the model provider you select, or your own provider under your own key where you bring one.
• Monitoring and analytics: Sentry for error reporting and PostHog for product analytics.
• Communications: the email and SMS providers used to deliver transactional notices.

We may also disclose information where we are required to by law, court order or regulator; to establish, exercise or defend legal claims; to investigate fraud, abuse or a security incident; or in connection with a merger, acquisition or sale of assets, in which case we will notify you before your information becomes subject to a different policy.

Where your workspace sits beneath a reseller or agency in Outfluent's tiered structure, that organisation can see the account and usage information for the workspaces it administers, in the same way an administrator can within any organisation.

9. International transfers

We operate internationally, and our providers may process information in countries other than yours, including the United States, Australia and the European Union. Where information is transferred out of a jurisdiction with data-transfer restrictions, we rely on recognised safeguards such as standard contractual clauses, together with the contractual protections described in section 8.

10. How we protect information

• All traffic is encrypted in transit using TLS, and data is encrypted at rest by our infrastructure providers.
• Your bring-your-own API keys and connected payment credentials are encrypted with AES-256-GCM before storage.
• Workspace data is isolated at the database level by row-level security, so one tenant cannot read another's records.
• Access to production systems is restricted to personnel who need it.
• We store no social platform passwords whatsoever, as described in section 4.

No system is perfectly secure, and we cannot guarantee absolute security. If we become aware of a breach affecting your personal information, we will notify you and any regulator as required by the law that applies.

11. How long we keep it

We keep account, workspace and content data for as long as your account is active. After you close your account we delete or anonymise it within 90 days, except where we must keep records longer to meet legal, tax, accounting or dispute-resolution obligations — billing records, for example, are typically retained for seven years. Backups are cycled out on a rolling basis. You can request earlier deletion under section 12.

12. Your rights

Depending on where you live, you may have some or all of the following rights: to access the personal information we hold about you; to correct it; to delete it; to object to or restrict processing; to receive it in a portable format; to withdraw consent at any time; and to opt out of marketing communications. Residents of California may additionally request disclosure of the categories of information collected and may exercise a right to opt out of sale or sharing — noting that, as stated in section 7, we do not sell or share personal information.

To exercise any right, email support@outfluent.ai. We will respond within the period the applicable law requires, and will not discriminate against you for exercising a right. If you are in the European Economic Area, the United Kingdom or Australia and you are unhappy with our response, you may complain to your local data protection authority — in Australia, the Office of the Australian Information Commissioner.

13. If you were contacted through Outfluent

If you received a message from an Outfluent customer and want your information removed, please contact the person or business who contacted you in the first instance. They control that data and can delete it directly, and they are required to honour your request.

You may also write to us at support@outfluent.ai. As a processor acting on our customer's instructions we cannot always delete records on your behalf unilaterally, but we will identify the relevant customer, pass your request to them, and require them to act on it.

14. Cookies and analytics

This marketing website uses no advertising cookies and no cross-site tracking. The Outfluent application uses cookies that are strictly necessary to keep you signed in and to keep your session secure, together with privacy-respecting product analytics that help us understand which features are used. You can block or delete cookies in your browser settings, but the application will not function correctly without the essential ones.

15. Minors

The Services are for business use and are not directed at anyone under 18. We do not knowingly collect personal information from children. If you believe a child has provided us with information, contact us and we will delete it.

16. Changes to this policy

We may update this policy as the Services and the law evolve. The "last updated" date at the top always reflects the current version. Where a change materially affects your rights we will give notice by email or in the application before it takes effect. Continuing to use the Services after a change takes effect means you accept the updated policy.

17. Contact us

Questions, requests, or complaints about privacy: support@outfluent.ai. We aim to respond within one to two business days.

See also our Terms and Conditions and our Refund and Cancellation Policy.