1. Information We Collect
Account Information
When you create an account, we collect your name, email address, and password (stored securely using bcrypt hashing). If you sign up via Google or Microsoft OAuth, we receive your basic profile information from those providers.
Email Tracking Data
When you use Outsolvi to track emails, we collect metadata about email interactions, specifically open events (via tracking pixel) and click events (via link redirect). We do not read, store, or access the content of your emails.
Usage Data
We collect standard usage analytics: pages visited, feature usage, device type, browser, and IP address. This helps us improve the product.
2. How We Use Your Data
- To provide and operate the Outsolvi email tracking service
- To display engagement analytics on your dashboard
- To send transactional emails (verification, password reset, billing)
- To detect and filter bot/scanner activity from genuine opens
- To improve our product and fix bugs
- To enforce our Terms of Service and prevent abuse
3. Data Storage & Security
Your data is stored on secure cloud infrastructure (PostgreSQL on Neon, hosted in AWS US-East). All data is encrypted in transit (TLS 1.3) and sensitive fields (OAuth tokens, API keys) are encrypted at rest using AES-256-GCM.
Passwords are hashed with bcrypt (12 rounds). We support two-factor authentication (TOTP) for admin accounts.
4. Cookies
We use essential cookies for authentication sessions and CSRF protection. We also use analytics cookies set by Mixpanel to understand how the product is used so we can find and fix problems. We do not use advertising cookies, and we do not run ad networks or ad retargeting.
5. Third-Party Services
We share limited data with these service providers:
- Dodo Payments, payment processing (billing info only)
- Resend, transactional email delivery
- Neon, database hosting
- Amazon Web Services, application hosting
- Cloudflare, DNS, CDN, and DDoS protection
- Mixpanel, product analytics. Receives your email address and account id so usage can be attributed to your account, plus which features you use. It does not receive the contents of your emails.
- Intercom, customer support messaging
- Sentry, error monitoring, so crashes reach us with enough context to fix them
- Grafana Cloud, server log storage used for debugging and security investigations
We never sell your data to third parties or use it for advertising.
6. Data Retention
We retain your account data for as long as your account is active. Email tracking events are retained for up to 12 months. When you delete your account, we remove all personal data within 30 days.
7. Your Rights
You have the right to:
- Access your personal data
- Correct inaccurate data
- Delete your account and associated data
- Export your data in a portable format
- Withdraw consent for optional data processing
If you are in the EU/EEA, you have additional rights under GDPR including the right to lodge a complaint with a supervisory authority.
8. Email Tracking Transparency
Outsolvi uses a 1x1 transparent tracking pixel to detect when recipients open tracked emails. We also wrap links to detect clicks. We employ bot filtering and confidence scoring to ensure accuracy, our system distinguishes between genuine human opens and automated security scans.
We do not access the body or subject of your emails. The tracking pixel only records: timestamp, approximate location (if available), device type, and a confidence score.
9. Browser Extension and Email Add-ins
Our Gmail browser extension and our Outlook add-ins are how tracking is added to the emails you send. This is what they do and do not do.
What they access:
- The compose window of an email you are writing: the recipients, the subject, and the message body, so the tracking pixel and tracked links can be inserted before you send.
- Your Outsolvi session, so the tracked email is saved to your account.
What they do not do:
- They do not read your inbox or your received mail.
- They do not track emails other people send to you, only the ones you send.
- They do not collect your Google or Microsoft password. Sign-in uses the provider's own authentication screen.
- They do not sell any data.
The extension sends product analytics to Mixpanel, including your email address and account id, so we can attribute feature usage and error rates to an account and fix reliability problems. It also reports its own version and health so we can tell you when an update is needed. Email contents are never sent to Mixpanel.
You can remove the extension at any time from your browser's extensions page. Removing it stops all new tracking immediately; engagement already recorded stays on your dashboard until you delete it.
10. Changes to This Policy
We may update this policy from time to time. We will notify you of material changes via email or an in-app notice. The “Last updated” date at the top reflects the most recent revision.
11. Contact Us
If you have questions about this Privacy Policy or your data, contact us at support@outsolvi.com.