Is Outreach safe with your data?
Outreach
Outreach Corporation
Partial disclosure · high confidence
Outreach earns a C (54/100) because it discloses its data practices only in part.
#88
of 211 apps ranked
54
score · Sales & marketing avg 46
+8
vs category average
Outreach discloses solid rights mechanics and a named sub-processor list but admits selling data, gives only vague retention and security language, and says nothing about AI interaction, deletion timelines, or breach notification.
What Outreach's privacy policy and terms of service say about your data
Admits selling data
The CCPA section states Outreach "sold" identifiers, network activity, and inferences to event sponsors, advertising networks, and data analytics providers in the last 12 months, with an opt-out form offered.
No-train claim is narrow
The only no-training statement is scoped to Google Workspace Data under the Google API Limited Use requirements; nothing addresses whether general customer content trains models.
Retention is unbounded prose
Retention is "as long as reasonably necessary" with no named period, and the policy adds that actual retention periods "can vary significantly"; no post-closure deletion timeline is given.
Security and breach gaps
Security is listed as "End-to-end encryption of data in transit and at rest" and "SSO integration" without named algorithms or certifications, and the snapshot contains no breach-notification commitment.
What the policy is silent or vague on
- Not stated: a way to opt out of training
- Not stated: whether training use differs by plan
- Not stated: a deletion timeline after closure or request
- Not stated: shorter retention for AI conversation logs
Outreach privacy rating
Details
- Category
- Sales & marketing
- Modalities
- text
- Processes biometrics
- No
- Policy last updated
- 2026-02-17
- Region scored
- Global / US-default
- Last assessed
- 2026-08-13
Documents examined
Other sales & marketing apps
Each grade reflects our analysis of what an app states in its public privacy policy and terms as of the assessment date. It measures the transparency of those documents, not the company's actual data practices, security, or compliance. Grades are our opinion, offered for general information. Full disclaimer.