Privacy Policy

The controller responsible for your data is:

iRONic Ventures UG (haftungsbeschränkt)
Essener Str. 13, 10555 Berlin, Germany
Commercial register: HRB 254455 B (Amtsgericht Charlottenburg, Berlin)
Managing Director: Robin Jose
Privacy contact: hello@out-lyst.com

This policy covers personal data processed through out-lyst.com and app.out-lyst.com. When a business customer uses Outlyst to manage its own contacts and campaigns (for example by uploading a lead list), we process that data on the customer's behalf as a processor under a data processing agreement. In that case the customer is the controller, and its own privacy information applies to the people it contacts.

Depending on how you interact with Outlyst, we may process the following categories of personal data:

Customer users

• Account details such as your name, work email address, and organization
• Authentication and session information needed to sign in and use the platform
• Content you create or upload, such as campaign settings, scripts, and lead lists

Website visitors

• Technical log data such as IP address, browser type, pages visited, and timestamps
• Information you submit through the demo request form, such as your name, work email address, company website, company size, and country

We use personal data for the following purposes:

• Providing the Outlyst service, including setting up and running campaigns, generating AI-assisted campaign drafts and reports, and supporting you as a customer. Legal basis: performance of a contract or steps taken at your request before entering into it (Art. 6(1)(b) GDPR).
• Answering demo requests and other enquiries. Legal basis: steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR) and our legitimate interest in responding to business enquiries (Art. 6(1)(f) GDPR).
• Security, fraud prevention, and service integrity, including protecting accounts, preventing misuse, and keeping application logs to detect and fix errors. Legal basis: Art. 6(1)(f) GDPR.
• Legal compliance, including record-keeping and responding to lawful requests. Legal basis: Art. 6(1)(c) GDPR.

If you sign in with LinkedIn, LinkedIn shares a limited set of profile information with us: your name, your email address, and your LinkedIn member identifier. We use it only to create and secure your account. We do not post on your behalf, and we do not access your contacts, connections, or messages.

LinkedIn acts as an independent controller for the data it processes on its own platform, under LinkedIn's privacy policy.

The Outlyst application servers and databases are hosted in data centres in Germany. Files such as uploaded lead lists and generated reports are stored in Microsoft Azure Blob Storage in EU regions. Access is restricted to authorized personnel and systems that need the data to operate the service.

We use carefully selected service providers who process personal data on our instructions:

• Microsoft Azure (Azure OpenAI Service and Azure Blob Storage, in EU regions) for the AI models behind features such as campaign drafting and reporting, and for storing uploaded and generated files
• Hetzner Online GmbH for hosting the Outlyst application servers and databases in data centres in Germany
• Resend for delivering transactional emails, such as account notifications and forwarding demo requests to our team
• Axiom for storing application logs, which we use to operate, secure, and debug the service

Outbound voice calls are not yet enabled in Outlyst. Before they are, we will add the voice and telephony providers involved to this list.

We do not sell personal data and do not share it with advertisers. We disclose data only to the processors listed above, to the business customer on whose behalf we process it, or where we are required to by law.

We keep account data for as long as your account exists, and demo request data for as long as needed to handle your request and any business relationship that follows. Application logs are kept for a limited period and then deleted. Data we process on behalf of a business customer is deleted or returned as set out in our agreement with that customer.

You may request deletion at any time under Art. 17 GDPR, subject to any retention we are legally required to maintain.

Under the GDPR you have the right to:

• Access the personal data we hold about you (Art. 15)
• Correct inaccurate data (Art. 16)
• Request deletion of your data (Art. 17)
• Restrict or object to processing (Art. 18 and Art. 21)
• Receive your data in a portable format (Art. 20)
• Withdraw any consent you have given, at any time

To exercise any of these rights, email hello@out-lyst.com. We will respond within the timeframes required by law.

You also have the right to lodge a complaint with a data protection supervisory authority. Our competent authority is the Berlin Commissioner for Data Protection and Freedom of Information (Berliner Beauftragte für Datenschutz und Informationsfreiheit). You may also contact the authority in your country of residence.

We use strictly necessary cookies and similar technologies to keep you signed in, remember your language preference, and store your cookie choice. These are required for the service to function and are not used for advertising.

Optional analytics are loaded only if you accept them in the cookie banner. You can change your choice at any time through the cookie preferences link in the footer.

We primarily process personal data within the European Union. Where a transfer outside the EU or the European Economic Area is unavoidable, we ensure an adequate level of protection through the safeguards required by the GDPR, such as the European Commission's Standard Contractual Clauses and supplementary measures where appropriate.

We may update this policy from time to time. When we make material changes, we will revise the "Last updated" date above and, where appropriate, notify affected users.

For any privacy question or request, contact us at:

iRONic Ventures UG (haftungsbeschränkt)
Essener Str. 13, 10555 Berlin, Germany
hello@out-lyst.com