Outgrove Privacy Policy

This Privacy Policy applies to personal information processed through Outgrove’s websites, business operations and services, including lead reactivation, lead generation, campaign strategy, marketing automation, customer outreach, appointment setting and related services.

It does not apply to:

• information governed solely by a client’s privacy policy where Outgrove acts only as that client’s service provider or processor;
• websites, platforms or services operated independently by third parties; or
• information that has been aggregated or de-identified so that it cannot reasonably be linked to an identifiable individual.

Our Terms of Service govern use of the Outgrove website and services.

When Outgrove determines how information is used

Outgrove generally acts as a business or controller for personal information collected through our own website, sales process, client relationships, vendor relationships, billing, security and business administration.

When Outgrove processes information for a client

When Outgrove conducts a campaign using a client’s customer or lead information, the client generally determines why the information is processed and which individuals may be contacted. In that situation, the client is generally the business or controller, and Outgrove acts as its service provider or processor.

If you receive a communication concerning one of our clients, that client’s privacy policy may also apply. Privacy requests relating to that client’s records should normally be directed to the client. You may also contact Outgrove, and we will route or assist with the request where appropriate.

Nothing in this section removes any obligation that independently applies to Outgrove under applicable law.

The information we collect depends on how you interact with us and may include the following categories.

Contact and identity information

This may include:

• name;
• business name;
• job title;
• email address;
• telephone number;
• postal or business address;
• social media or professional profile information; and
• account username or similar identifiers.

Client, lead and campaign information

Clients may provide information about customers, former customers, prospects or other business contacts, including:

• contact details;
• customer or lead status;
• purchase, inquiry or booking history;
• campaign history;
• consent, preference and suppression records;
• communications with a client or campaign;
• products or services of interest;
• appointment and scheduling information;
• campaign engagement and response data; and
• transaction or conversion information.

Communications

We collect information contained in emails, forms, messages, calls, text messages, meeting notes, support requests and other communications with us or with campaigns we operate.

Where permitted by law and with any required notice or consent, calls or meetings may be recorded or transcribed for quality assurance, training, documentation and service delivery.

Commercial and transaction information

This may include:

• services requested or purchased;
• proposals, Order Forms and contract details;
• invoices and payment status;
• campaign results;
• referrals;
• client preferences; and
• records of our business relationship.

Payment-card information is generally collected and processed by payment processors. Outgrove does not intentionally store complete payment-card numbers or card security codes.

Website, device and usage information

When you use our website or online services, we and our service providers may automatically collect:

• Internet Protocol address;
• browser and device type;
• operating system;
• referring and exit pages;
• pages viewed and features used;
• date, time and approximate duration of visits;
• cookie and similar technology identifiers;
• general location derived from an IP address; and
• diagnostic, performance, security and error information.

Professional and business information

We may collect information about your employer, industry, role, business needs, professional interests, authority to act for an organization and publicly available business history.

Inferences and campaign insights

We may infer likely business interests, campaign segments, engagement levels, preferred communication timing or service needs from the information described above.

We do not use sensitive personal information to infer characteristics about individuals.

Sensitive personal information

Outgrove does not seek to collect highly sensitive personal information unless necessary and lawfully authorized. Clients must not provide government identification numbers, Social Security numbers, financial-account credentials, complete payment-card data, precise health information, biometric identifiers, information about known children or similarly sensitive information unless Outgrove has expressly approved the processing in writing.

We may collect personal information from:

• you directly;
• the organization you represent;
• Outgrove clients;
• customer relationship management systems and other client-authorized platforms;
• website forms, cookies and similar technologies;
• communications and campaign interactions;
• payment processors and business service providers;
• referral partners;
• event, scheduling and meeting platforms;
• social media, professional networks and public business directories; and
• other lawful sources authorized by you or an Outgrove client.

Clients are contractually required to provide information lawfully and to maintain any consent, notice, opt-out and suppression records required for an approved campaign.

We may use personal information to:

• provide, operate, personalize and support our services;
• respond to inquiries and schedule meetings;
• prepare proposals, Order Forms and campaign plans;
• authenticate users and manage system access;
• conduct authorized lead-reactivation, lead-generation and outreach campaigns;
• segment audiences and personalize communications;
• send email, text or telephone communications where permitted;
• manage replies, appointments, routing and follow-up;
• measure campaign delivery, engagement, attribution and performance;
• process payments and administer client accounts;
• provide reports and customer support;
• maintain consent, unsubscribe, suppression and do-not-contact records;
• monitor quality, security, fraud and misuse;
• troubleshoot, improve and develop our systems, processes and services;
• comply with law, legal process and contractual obligations;
• establish, exercise or defend legal claims;
• enforce our Terms, contracts and policies;
• protect Outgrove, our clients, recipients and third parties; and
• create aggregated or de-identified analytics and benchmarks.

We may use contact information to tell current or prospective business clients about Outgrove’s services where permitted by law. You can opt out of promotional communications at any time.

Outgrove may contact individuals on behalf of a client using information supplied by or accessed with the authorization of that client.

The relevant client is responsible for determining:

• the audience and purpose of the campaign;
• whether the contact information was lawfully collected;
• whether the required privacy notices and consents were obtained;
• which suppression or do-not-contact records apply;
• whether the offer and campaign claims are lawful and accurate; and
• whether a recipient may lawfully be contacted through the proposed channel.

Outgrove processes campaign information to perform the client’s instructions, maintain compliance and suppression records, protect our systems, measure results and meet legal obligations.

Outgrove does not use a client’s campaign list for Outgrove’s unrelated direct marketing and does not sell the list.

If you receive a campaign communication:

• use the unsubscribe link in an email to stop marketing emails;
• reply STOP to an eligible marketing text;
• ask not to be called during a telephone call; or
• contact the business identified in the communication.

You may also email services@outgrove.co. Please identify the sender, client or campaign so we can locate the relevant record. We may forward your request to the responsible client where appropriate.

Outgrove may use artificial intelligence and automated tools to assist with:

• drafting and personalizing communications;
• audience segmentation;
• categorizing replies;
• identifying likely interests or campaign relevance;
• routing inquiries;
• scheduling and follow-up;
• transcription and summarization;
• detecting misuse or security issues; and
• analyzing campaign performance.

These systems may process contact details, campaign information and communication content. Outgrove uses service providers and safeguards appropriate to the relevant processing.

Outgrove does not use automated systems to make decisions that produce legal or similarly significant effects about individuals unless separately disclosed and permitted by law.

Calls using an artificial, prerecorded or AI-generated voice will only be conducted where Outgrove and the relevant client determine that the campaign has the authorization and consent required by applicable law.

We may use cookies, pixels, local storage and similar technologies to:

• operate the website;
• remember preferences;
• maintain security;
• understand traffic and website use;
• diagnose errors;
• measure campaign and website performance; and
• improve our services.

Some cookies are necessary for the website to function. Others may be controlled through browser settings or a cookie-preference tool where one is provided.

Blocking cookies may affect website functionality. Browser-level “Do Not Track” signals do not have a uniform legal standard, so our website may not respond to them. Where required by law, we honor recognized opt-out preference signals, such as Global Privacy Control, for the browser or device sending the signal.

We may disclose personal information to the following categories of recipients.

Clients

Campaign responses, engagement, appointment information, attribution data and related records may be disclosed to the client for whom a campaign is performed.

Service providers and processors

We may use providers supporting:

• cloud hosting and storage;
• customer relationship management;
• email, text and telephone communications;
• scheduling and videoconferencing;
• analytics and reporting;
• artificial intelligence and automation;
• security, fraud prevention and monitoring;
• payment processing and invoicing;
• professional services; and
• technical support.

These providers may process personal information only as permitted by their agreements with us and applicable law.

Professional advisers

We may disclose information to lawyers, accountants, auditors, insurers and other professional advisers where reasonably necessary.

Authorities and legal recipients

We may disclose information where we reasonably believe disclosure is necessary to:

• comply with law, regulation, subpoena, court order or legal process;
• respond to lawful government requests;
• protect rights, safety, property or systems;
• investigate fraud, security incidents or unlawful conduct; or
• establish, exercise or defend legal claims.

Business transactions

Information may be disclosed in connection with a proposed or completed merger, financing, reorganization, sale of assets, acquisition or similar business transaction, subject to appropriate confidentiality and legal protections.

With your direction or consent

We may disclose information for another purpose disclosed to you or with your direction or consent.

Outgrove does not sell personal information in exchange for money.

Outgrove does not sell client-provided campaign lists or use them for unrelated cross-context behavioral advertising.

We may use service providers for limited website analytics and measurement. We instruct those providers to process information for services supplied to Outgrove and not to use it for their own unrelated targeted advertising.

If our practices change in a way that constitutes the “sale” or “sharing” of personal information or targeted advertising under applicable law, we will update this Policy and provide any required opt-out mechanism before using personal information in that manner.

We do not knowingly sell or share the personal information of anyone under 16 years old.

We retain personal information only for as long as reasonably necessary for the purposes described in this Policy, including to provide services, complete campaigns, maintain suppression records, comply with law, resolve disputes, enforce agreements and protect security.

Retention periods depend on:

• the nature and sensitivity of the information;
• the duration of the client or business relationship;
• campaign attribution and reporting periods;
• legal, tax, accounting and regulatory requirements;
• applicable limitation periods;
• security and fraud-prevention needs; and
• whether information is stored in routine backups.

Client campaign data is generally retained for the duration of the applicable services and a reasonable period afterward, subject to the client’s instructions, our contractual obligations and legal requirements.

We may retain minimal contact and suppression information for longer when necessary to ensure that an opt-out or do-not-contact request continues to be honored.

When information is no longer reasonably required, we delete, de-identify or securely dispose of it, subject to technical limitations and lawful backup retention.

We use reasonable administrative, technical and organizational safeguards designed to protect personal information against unauthorized access, loss, misuse, alteration and disclosure.

Safeguards may include access controls, authentication, contractual protections, secure hosting, monitoring, staff or contractor confidentiality requirements and data-minimization practices.

No website, transmission or storage system is completely secure. We cannot guarantee absolute security. You are responsible for protecting credentials and promptly notifying us if you suspect unauthorized access involving an Outgrove service.

Marketing email

You may unsubscribe using the link in a marketing email or by contacting us. We may continue to send non-promotional communications concerning services, contracts, security, billing or transactions.

Text messages

Where supported, reply STOP to opt out of marketing texts. You may receive a confirmation message. Message and data rates may apply.

Telephone calls

You may ask not to receive further marketing calls. We will add the relevant number to the applicable suppression list.

Cookies

You may adjust browser settings or use an available cookie-preference tool. Where legally required, we recognize applicable opt-out preference signals.

Opting out of one channel does not automatically opt you out of every channel or every independent business unless required by law. We may retain limited records necessary to honor your request.

Depending on where you live and whether an applicable law covers Outgrove’s processing, you may have the right to:

• confirm whether we process your personal information;
• access or obtain a copy of personal information;
• correct inaccurate personal information;
• delete personal information;
• obtain a portable copy of information you provided;
• opt out of the sale of personal information;
• opt out of sharing or targeted advertising;
• opt out of certain profiling producing legal or similarly significant effects;
• limit certain uses or disclosures of sensitive personal information;
• withdraw consent where processing is based on consent; and
• appeal a refusal to act on a privacy request.

You may submit a request by emailing services@outgrove.co with the subject line Privacy Request.

Please describe your request and identify your relationship with Outgrove. If your request concerns a campaign, include the business identified in the communication, the communication channel and the contact information used.

We may need to verify your identity and authority before completing a request. Verification may require matching information you provide with information already maintained by us. We will not request more information than reasonably necessary.

You may use an authorized agent where permitted by law. We may require evidence that the agent is authorized and may verify your identity directly.

We will respond within the period required by applicable law. If we deny a request, you may appeal by replying to our decision or emailing services@outgrove.co with the subject line Privacy Appeal.

We will not discriminate against you for exercising an applicable privacy right.

Some information may be exempt from a request, including information needed to complete a transaction, comply with law, protect security, maintain suppression records or establish or defend legal claims.

This section supplements the rest of this Policy for California residents and is intended to provide information required by the California Consumer Privacy Act, as amended (“CCPA”), where the CCPA applies to Outgrove.

Categories collected

During the preceding 12 months, we may have collected the following categories of personal information:

We do not intentionally collect protected-classification information, biometric templates, genetic data, precise geolocation, government identifiers or complete financial-account credentials through our ordinary services.

Business and commercial purposes

We collect and use these categories for the purposes described in Sections 5 through 8, including providing services, conducting authorized campaigns, maintaining security, processing transactions, supporting clients, improving operations and complying with law.

Sales and sharing

Outgrove has not sold personal information for money during the preceding 12 months.

Outgrove does not sell or share client-provided campaign lists for cross-context behavioral advertising.

We do not knowingly sell or share personal information belonging to consumers under 16 years old.

California rights

Subject to applicable exceptions, California residents may request:

• the categories and specific pieces of personal information collected about them;
• the categories of sources;
• the purposes for collecting, selling or sharing information;
• the categories of third parties to whom information was disclosed;
• correction of inaccurate information;
• deletion of personal information;
• opt-out of sale or sharing;
• limitation of certain uses of sensitive personal information; and
• non-discriminatory treatment.

Submit a request using the method in Section 14.

Outgrove uses and discloses sensitive personal information only for purposes reasonably necessary to provide requested services, maintain security and conduct ordinary business operations. We do not use sensitive personal information to infer characteristics about individuals.

Where European or similar data-protection law applies and Outgrove acts as a controller, our legal bases may include:

• Contract:
• processing necessary to enter into or perform a contract with you or the organization you represent;
• Legitimate interests:
• operating and improving our business, responding to inquiries, maintaining security, measuring services and conducting appropriate business-to-business marketing;
• Consent:
• where you have given consent for a particular activity;
• Legal obligation:
• complying with applicable law, regulation and legal process; and
• Legal claims:
• establishing, exercising or defending legal rights.

Where required, we will obtain consent before sending marketing communications or using non-essential cookies. You may withdraw consent at any time, without affecting processing that occurred before withdrawal.

Depending on applicable law, you may have rights to access, correct, erase, restrict or object to processing, receive portable data, withdraw consent and complain to a supervisory authority.

To object to processing based on legitimate interests or to exercise another right, email services@outgrove.co.

Where Outgrove acts solely as a processor for a client, the relevant client is responsible for responding to your request. We will provide reasonable assistance as required by our agreement and applicable law.

Outgrove is based in the United States and may use service providers located in the United States and other countries. Personal information may therefore be processed in countries with privacy laws different from those in your location.

Where required, we use recognized safeguards for international transfers, which may include contractual protections, approved standard contractual clauses, adequacy decisions and supplementary security measures.

Outgrove’s website and services are intended for businesses and are not directed to children under 13.

We do not knowingly collect personal information directly from children under 13 through our website. We also do not knowingly sell or share personal information belonging to anyone under 16.

If you believe a child has provided personal information to Outgrove without appropriate authorization, contact us so we can investigate and take appropriate action.

Our website and communications may link to third-party websites or services. Their privacy practices are governed by their own policies. Outgrove is not responsible for the privacy, security or content of independently operated third-party services.

We may update this Privacy Policy to reflect changes in our services, technology, legal obligations or business practices.

The updated Policy will state a new effective date. If a change materially affects how we use personal information, we will provide additional notice where required by law.

For questions, privacy requests, complaints or appeals, contact:

Outgrove
701 Tillery St
Austin, TX 78702
USA

Email: services@outgrove.co