Metadata-only tracking and your privacy
Tracking tools split into two architectural categories in 2026. Body-reading tools (Yesware, Saleshandy, HubSpot Sales Hub, Streak, Mailbutler) store the full email content because their product features require it, sequences, templates, mail merge, CRM features all need access to message bodies. Metadata-only tools store engagement events and minimal context (subject line typically) but never the full body. Outsolvi's tracking is in the metadata-only category. Its follow-ups are not: like any sequencer, it stores the text of the follow-ups it sends, and a connected mailbox syncs its mail, including sent mail, so the sent copy of a tracked email is stored there, encrypted.
The architectural choice matters most in procurement reviews. For sales into healthcare, financial services, legal, government, and other regulated industries, the question "what does the tool retain?" comes up early and the answer determines how fast the procurement review clears. Metadata-only tracking is the easier answer to give; body-reading makes for a longer compliance conversation. If you also use follow-ups, say so in the review, because follow-ups need a connected mailbox, and its mail, sent mail included, is synced and stored.
Who this is for
Metadata-only email tracking matters most if you're an AE, founder, or RevOps lead selling into regulated industries, where procurement reviews scrutinise what the tracking tool stores.
What it does
For tracking, Outsolvi stores engagement events (open and click times, and the IP address and user agent used to grade each open), the recipient and the subject line, encrypted. Tracking itself doesn't need or store the body. Two features do store content: follow-ups keep the text Outsolvi sends, and a mailbox you connect for follow-ups and reply detection (Gmail, or Microsoft with read access) syncs the last 30 days of mail and anything new, sent mail included, bodies included, encrypted. So if you connect a mailbox, the body of a tracked email you sent from it is stored. Outsolvi also keeps the first 200 or so characters of the latest reply so you can read it at a glance.
Why it matters in 2026
Procurement reviews in regulated industries (healthcare, financial services, legal, government) routinely ask what data the tool stores. "Tracking needs no email body" is a short answer for most reviews, as long as you also disclose that a connected mailbox syncs its mail, sent mail included.
GDPR Article 6 legitimate-interest processing is easier to defend when the processing scope is limited to engagement metadata rather than full message content.
Less stored content means less to account for in a security questionnaire, whatever framework the buyer works to.
Customer trust on what their sales rep's tool retains about their conversations is higher when the answer is "the open timestamp, not the message body."
The architectural choice is hard to reverse, body-reading tools cannot retroactively become metadata-only without losing the features that depend on body access. Picking metadata-only at the start is a one-way structural decision.
Works where you already send.
Outlook and Gmail, one dashboard. Start the 14-day free trial. Setup takes 2 minutes, no card.
How it works
The tracking pixel and link redirect log the request's IP address, user agent and time, plus the ID that maps it to one email. Nothing in that path reads the message body. The subject line is stored, encrypted, so you can tell which email an event belongs to. Replies are detected through a connected mailbox, the Gmail extension or the desktop Outlook add-in, and that is where content comes in: synced mail, sent and received, is stored with its body, and about 200 characters of the latest reply are kept for display, whichever way the reply was seen. Replies are labelled Positive, Negative, Neutral or Out of office by keyword rules over the reply text. The database is encrypted at rest with AES-256, synced mail and subject lines get AES-256-GCM field encryption on top, and traffic uses TLS 1.2 or 1.3. Outsolvi hasn't had a SOC 2 audit.
Of the 14 trackers in our compare catalog, Outsolvi is one of the few whose tracking is metadata-only (its follow-ups, like every sequencer's, store the text they send, and a connected mailbox syncs its mail, sent mail included). Yesware, Saleshandy, HubSpot Sales Hub, Streak, Mailbutler, and most cold-outreach platforms all store email body content because their product features (sequences, templates, mail merge, CRM features) require it. Mailtrack and basic trackers (Right Inbox, Vocus) are closer to metadata-only but their privacy posture is less documented.
Use cases for Tracking Privacy
Frequently asked questions
What exactly does Outsolvi store about my emails?+
For tracking: open and click events with their times, the IP address and user agent used to grade them, the recipient, the subject line (encrypted), the sending rep and the grades Outsolvi works out. Tracking doesn't need the body. If you use follow-ups, the text of each follow-up is stored. If you connect a mailbox for follow-ups and reply detection, its mail, including sent mail, is synced and stored with its body, encrypted, so the body of an email you track from that mailbox is stored too. The first lines of the latest reply are kept for display.
How is this different from Yesware or HubSpot Sales Hub?+
Yesware and HubSpot Sales Hub store the email body content because their sequence engines, template libraries, and CRM features require body access. Outsolvi's tracking runs on metadata only; its follow-up sequences store the text they send, and a connected mailbox syncs its mail, including sent mail, so sequences stop on a reply. The trade-off is feature breadth (Yesware/HubSpot do more with the body access) versus privacy posture (Outsolvi has less compliance surface area).
Does GDPR Article 6 legitimate-interest cover this?+
Yes for B2B sales outreach. The legitimate-interest basis for B2B direct outreach is well-established under GDPR. Metadata-only tracking makes the legitimate-interest assessment easier because the processing scope is narrow; include follow-ups and mailbox sync in the assessment if you use them. Right-to-erasure requests are honored. Ask us for our data processing terms before you rely on them.
What about SOC 2?+
Outsolvi hasn't had a SOC 2 audit, so there's no report to share. Keeping tracking to metadata means less stored content to account for in any review.
What happens when I track an email, does Outsolvi see the message?+
Not for tracking. The tracking pixel and link-redirect mechanism run on engagement events only. The pixel load and click events are logged; the message body stays on your email provider (Outlook or Gmail). When you send from Outlook or Gmail with the add-in or extension, Outsolvi's servers get the recipient, the subject and the tracking events, not the body. Emails and follow-ups sent from Outsolvi's web app do pass through its servers to be sent. And if you've connected that mailbox, its sync picks up the sent copy, body included, and stores it encrypted.
Does reply sorting read the reply?+
Yes. Outsolvi labels replies Positive, Negative, Neutral or Out of office with keyword rules over the reply text. If the reply came through a connected mailbox, it's stored with the rest of the synced mail. Either way, about 200 characters of the latest reply are kept for display. If you'd rather Outsolvi stored as little mail content as possible, don't connect a mailbox: tracking still works, but Outsolvi can't send follow-ups for you, and it still keeps that short excerpt of any reply the Gmail extension or the desktop Outlook add-in reports.
Free tools, articles, and glossary entries that share a topic with this feature.
Try Tracking Privacy for free
14-day free trial, no credit card, up to 250 tracked emails. Tracking Privacy is included, so you can test it on your own email before you pay anything.
Start 14-Day Free TrialWhere this feature is used
Use cases, workflow patterns, and personas that depend on Tracking Privacy.
Other Outsolvi features
Nate built Outsolvi after watching every email-tracking tool he had ever used lie to him about opens. Outsolvi grades every open as a person or a machine, in Outlook and Gmail, so the number on the dashboard is one a rep can actually act on.
We update these pages when the underlying mechanics change. new mailbox-provider rules, new tracker behavior, new measurement gaps. The dates above are real revisions, not auto-touches.