Privacy Policy

Voice Outreach is a software-as-a-service platform operated from Madrid, Spain. We act as a "controller" for account and billing data, and as a "processor" for outreach and lead data you upload to the Service, unless the nature of processing clearly indicates otherwise.

Our registered trading name, legal identity, and postal address are set out in section 19 (Legal entity).

We collect the following categories of personal data:

• Account data: name, email, password hash, authentication identifiers, profile settings.
• Support data: messages you send to support or feedback channels.
• Usage data: logs of pages visited, actions taken, feature usage, and diagnostic information.
• Device data: IP address, user agent, device type, browser, approximate location from IP, and similar technical signals.
• LinkedIn session data: if you connect LinkedIn with our Chrome extension, your LinkedIn session cookie (the cookie named li_at) and your browser's user agent. We pass them to our LinkedIn connectivity provider and do not keep them.

When you upload or generate lead information (such as names, titles, companies, LinkedIn profile URLs, emails, and any notes), we store and process this data on your behalf to operate your campaigns. You are responsible for ensuring that you have a lawful basis to process lead personal data and for honoring lead rights under applicable law.

When you use Find leads, you describe the people you want to reach. We use an AI model to turn your description into search filters, such as job title, location, company size and industry, then search a business contact data provider for professionals who match. For each match we receive professional details: name, job title, company, company website and LinkedIn page, location, LinkedIn profile URL, number of LinkedIn connections, when they started in their current role, and a short description of that role. When you turn on the hiring signal, we also receive whether their company is hiring for the roles you chose. The AI model also gets each match's professional details, without their name or profile URL, to pick the best matches and write a short line on why each one fits. The role description goes only to the AI model and is never stored. We keep these leads in your workspace so you can review them and add them to your campaigns. Leads you do not add are deleted after 30 days. Leads you add become part of your campaigns and are handled like any lead you upload. You remain responsible for having a lawful basis to contact these people and for honoring their rights under applicable law.

When you connect third-party platforms (including LinkedIn), we receive and process the data you authorize, such as profile details, chat messages, message statuses, and acceptance signals, solely to operate the Service. We do not sell this data. We act on your instructions and within the scope of the permissions you grant to us and to the connected platforms.

You can connect LinkedIn with our Chrome extension, Voice Outreach Connect, instead of entering your LinkedIn email and password. When you click Connect or Reconnect in Voice Outreach, the extension reads one cookie from your browser, your LinkedIn session cookie (named li_at), together with your browser's user agent, and sends them to us over an encrypted connection. We pass them, with your IP address or the country it belongs to, to our LinkedIn connectivity provider, which uses them to operate your LinkedIn account on your instructions. We do not store your LinkedIn session cookie in our own systems and we do not write it to our logs. The extension reads that cookie only at the moment you click Connect or Reconnect. It does not read your LinkedIn password, your messages, your browsing history, any other cookie or any other website's data.

You can end a LinkedIn connection at any time by disconnecting it in Voice Outreach. Logging out of LinkedIn in the browser you connected from also ends a connection made with the extension. Removing the extension does not by itself end a connection that already exists.

Payments are processed by our payment provider. We receive limited billing information (such as the last four digits of your card, billing country, and subscription status); we do not store full payment-card numbers on our servers. Transaction records are kept for accounting, tax, anti-fraud, and refund purposes as described in our Refund Policy.

If you upload a voice sample to create an authorized voice profile, or use the Service to generate AI voice notes, we process that audio and associated metadata to create and deliver outputs. You represent that you have the necessary rights and consents to use any voice sample. You can delete your voice samples from within the Service, subject to limited retention for fraud-prevention and backup purposes.

We use personal data to:

• Provide, secure, and improve the Service.
• Authenticate users and prevent abuse.
• Process payments and manage subscriptions.
• Communicate with you about your account and the Service.
• Comply with legal, tax, and regulatory obligations.
• With your consent where required, send product updates, marketing, and educational content.

If you are in the European Economic Area or the United Kingdom, we rely on the following lawful bases: performance of a contract (operating the Service), legitimate interests (security, abuse prevention, product improvement, marketing of similar services), consent (where required, e.g., certain cookies or marketing), and legal obligation (tax, accounting, responding to lawful requests).

We share personal data with trusted third-party vendors that help us operate the Service, including cloud hosting, data storage, AI and voice-synthesis providers, email delivery, error monitoring, analytics, and payment processing. Each vendor is bound by contractual obligations to safeguard the data and only process it for the purposes we specify. A current list is published on our Subprocessors page, which also explains how we notify customers before a new subprocessor begins processing their data. When you connect LinkedIn, the credentials or session data you provide are shared with our LinkedIn connectivity provider, listed on that page, solely to connect and operate your LinkedIn account for you.

Where we process personal data on your behalf as a processor, that processing is governed by our Data Processing Agreement, which is incorporated into our Terms of Service.

Your personal data may be processed in countries outside of your home country, including countries that may not provide the same level of data protection. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses, adequacy decisions, or equivalent mechanisms.

We retain personal data for as long as it is needed to provide the Service, comply with legal obligations, resolve disputes, and enforce agreements. When no longer needed, data is deleted or anonymized. Some data may persist in encrypted backups for a limited period before being rotated out.

You are responsible for ensuring that your outreach complies with applicable laws (including GDPR, CAN-SPAM, and similar regulations), the terms of any connected platform, and any commitments you make to your recipients. You must honor opt-out requests and provide a transparent way for recipients to unsubscribe where required by law.

Depending on your location, you may have rights to access, correct, delete, restrict, or port your personal data, and to object to certain processing. To exercise your rights, contact us at privacy@voiceoutreach.ai. We may need to verify your identity before responding. You also have the right to lodge a complaint with your local data-protection authority.

We use cookies and similar technologies to operate the Service, remember your preferences, measure usage, and detect abuse. You can control cookies through your browser settings. Some features may not function correctly if essential cookies are disabled. For details, see our Cookie Policy.

We implement administrative, technical, and organizational safeguards designed to protect personal data, including encryption in transit, access controls, and logging. No system is perfectly secure; if we become aware of a breach that affects your data, we will notify you where required by law.

The Service is not directed to children under 16 (or the minimum age required by local law), and we do not knowingly collect personal data from them. If you believe a child has provided us with personal data, please contact us and we will take appropriate steps to delete it.

We may update this Privacy Policy from time to time. When we do, we will post the updated version on this page and adjust the "Effective date" above. Material changes will be communicated where required.

Privacy questions or requests should be directed to privacy@voiceoutreach.ai. Our postal address is in section 19, and our Contact page lists the addresses for other inquiry types. We aim to respond within 1 business day.

The data controller responsible for personal data described in this Privacy Policy is:

We have not appointed a Data Protection Officer, as we are not required to do so under Article 37 of the GDPR. Privacy requests are handled at the address above. You also have the right to lodge a complaint with the Spanish Agencia Española de Protección de Datos or with the supervisory authority in your own country of residence.