Home

Privacy Policy

Effective date: November 7, 2026

1. Personal Information We Collect

When you sign up

  • Required: email, password (stored encrypted), name

Consent to receive ad and news emails is optional and can be withdrawn at any time in your account settings.

Automatically collected while using the service

  • Access IP (server logs), service usage records, referring site
  • Visit statistics (country, device type, pages viewed) — IP addresses are not stored
  • Free trial: to limit it to one use, we store a random number in your browser and record it with values derived from your browser and device features
  • Sending statistics (link clicks)

When you make a payment

  • Payment history, depositor name, and the company name on the transfer. Domestic payments are received by bank transfer and international payments by transfer. Card payments are processed by Freemius, so the Company does not receive card information

2. Purpose of Use

  • Identifying members and logging in
  • Providing the service and billing
  • Responding to customer inquiries
  • Statistical analysis to improve the service

3. Retention Period

  • Member information: until account deletion (destroyed immediately after)
  • Payment records: 5 years (E-Commerce Act)
  • Server access logs: oldest entries are automatically deleted once storage fills up (up to 3 months)
  • Visit statistics: automatically deleted after 90 days

4. Disclosure to Third Parties

The Company does not disclose personal information to third parties, except in the following cases.

  • When required to do so by law
  • When the user has given prior consent
  • If you pay by card through Freemius, your payment information is processed by Freemius, as the seller (Merchant of Record), under its own policy

5. Outsourced Processing

RecipientTask outsourced
PayoneerProviding a receiving account for international transfers
FreemiusCard payment processing (seller, Merchant of Record)

Service emails that we send (password reset, welcome, payment and inquiry notices, and similar) go out through the companies below. The recipient’s email address and the content of the email are transferred outside the Republic of Korea. Google is used only when an email could not be sent through Brevo.

Outsourced sending of service emails (transfer abroad)
ItemBrevoGoogle
Recipient and contactBrevo SAS · Address: 17 rue Salneuve, 75017 Paris, France · Privacy contact: dpo@brevo.comGoogle LLC (Gmail) · Privacy contact: googlekrsupport@google.com
CountryFrance (headquarters)United States (headquarters)
When it is sentEach time the service sends a service email, over an encrypted connectionOnly when an email could not be sent through Brevo, over an encrypted connection
What is sentThe recipient’s email address and the email’s subject and body (which may include a name, payment details or inquiry content)The recipient’s email address and the email’s subject and body (which may include a name, payment details or inquiry content)
PurposeDelivering service emails such as password reset, welcome, payment and inquiry noticesDelivering service emails that could not be sent through Brevo
Retention periodAccording to Brevo’s policyAccording to Google’s policy
How to refuseIf you ask us to delete your account and personal information, we stop sending them. If you refuse, you cannot receive emails such as password reset and payment notices.If you ask us to delete your account and personal information, we stop sending them. If you refuse, you cannot receive emails such as password reset and payment notices.

Member data is stored on a server that the Company operates directly in the Republic of Korea. However, the recipient’s email address and the content of the service emails we send are also passed to the companies in the table above, and how long they keep them follows their policies.

6. User Rights

Users may exercise the following rights at any time.

  • Requesting access to or correction of personal information
  • Requesting account deletion and removal of personal information
  • Withdrawing consent to the processing of personal information

7. Security Measures

  • Passwords: one-way bcrypt encryption
  • Sensitive data (such as the password of a connected email account): symmetric Fernet encryption
  • Data in transit: HTTPS/TLS encryption
  • Access control and retention of access logs

8. Privacy Officer

Name: Kim WooJin
Contact: contact@outreach.kr

If you need to report or discuss a privacy violation, you can contact the organizations below.

  • Personal Information Protection Commission: 1833-6972
  • Privacy Violation Report Center: 118
  • Supreme Prosecutors’ Office Cyber Investigation Division: 1301

9. Business Information Collected by Users

Users use the Service to collect contact details that businesses have made public (business name, business email, main phone number, website address, and the business’s Instagram and LinkedIn addresses).

  • Sources: websites that businesses publish themselves, public map data, public government data (the Korea Fair Trade Commission’s information on mail-order sellers), and public business directories.
  • This information is used for the user’s own sales purposes, and the Company stores and processes it on the user’s behalf. The Company also keeps public business information so that it can check the same business faster when it is searched for again.
  • Retention: information in the user’s lists is kept until the user deletes it or leaves the Service. Public business information that the Company keeps separately is deleted when the business asks at contact@outreach.kr.
  • A business can email contact@outreach.kr to ask for its information to be deleted or to opt out of receiving messages. An opted-out address is removed from every user’s sending. The unsubscribe link at the bottom of each email works the same way.

10. Email Accounts Connected by Users

The email address and password (app password) are stored encrypted and used only to send email and for the checks below (reply and bounce checks, and saving a copy to the Sent folder).

  • Reply check: every 10 minutes, read-only access to the inbox is used to read only the sender address of the newest 300 messages received in the last 3 days. This applies only to users who sent email through the Service in the last 14 days
  • Bounce check: every 30 minutes, the header and body of the messages in the same range are read to find bounce notifications
  • A copy of each sent email is saved to the Sent folder of the user’s mailbox
  • Emails are not deleted, moved, or marked as read