Политика конфиденциальности

1. Purpose

This policy explains how SmartOutbound processes personal data on the website https://smartoutbound.cloud and in its online service, in accordance with the General Data Protection Regulation (GDPR).

2. Who is responsible for what?

• You use SmartOutbound: SmartOutbound is the controller of your account and billing data.
• You received a prospecting email: the controller is the business that sent it. SmartOutbound only acts as its processor.

Contact for any question about your data: commercial@smartoutbound.cloud.

3. Data of our users

• Account: name, email, password (stored with irreversible hashing), language, date of acceptance of the terms.
• Billing: business name, address and VAT number. Card data is handled by Stripe: we have no access to it.
• Connected mailboxes: addresses and login credentials, stored encrypted.
• Content: prospects, campaigns, messages, replies and conversations with the AI assistant.
• Security: IP address during login and password reset attempts, kept for at most one hour to block abuse.

4. Legal bases

• Performance of the contract: account creation, provision of the service, support.
• Legal obligation: invoicing and accounting.
• Legitimate interest: security of the service, abuse prevention, service improvement.

We use no advertising cookies: the site's cookies only keep your session and remember your language.

5. Data of prospected people

On behalf of our customers, the service processes:

• identity and business contact details provided by the customer (name, email, job title, company);
• addresses mentioned in a reply (for example "I am away, contact my colleague"), added to the customer's prospects;
• public information from the company's website and a relevance score computed by AI;
• messages sent and received, opens and clicks (invisible pixel and tracking links);
• conversions on the customer's website, when they install our pixel.

6. Recipients and processors

• Hostinger: hosting of the service and service emails, on a server located in France.
• Anthropic (United States): AI models to score prospects, write messages, classify replies and run the assistant.
• Stripe: payment and invoicing.
• The email providers chosen by each customer, which deliver their emails.

We sell no data. When a provider is located outside the European Union, the transfer is governed by the European Commission's standard contractual clauses.

7. Retention periods

• Workspace data: as long as the workspace exists; deleting it erases the data from the database immediately.
• Backups: existing copies disappear after 14 days.
• Inactive accounts: deleted three years after the last login.
• Invoices: ten years, the legal accounting retention period.

8. Security

Encrypted connection (HTTPS), encrypted mailbox credentials, hashed passwords, database not exposed to the internet, daily backups. In the event of a data breach, we notify the CNIL within 72 hours, and the people concerned when the law requires it.

9. Your rights

You have the right of access, rectification, erasure, restriction, objection and portability, and the right to lodge a complaint with the CNIL (cnil.fr) or your local data protection authority. To exercise them: commercial@smartoutbound.cloud.

Received a prospecting email? Use the unsubscribe link at the bottom of the email, reply "stop" to the sender, or write to us: we will forward your request to the business concerned.

10. Updates

SmartOutbound may amend this policy to reflect legal or technical changes. The latest version is always available on this page.