1. Commitment to Privacy and Tenant Isolation
Velaur Outbounder, developed by Velaur Labs ("we", "us", or "our"), is committed to safeguarding the privacy of our users and enterprise customers. We operate on a strict multi-tenant boundary model: every workspace's leads, campaign sequences, outbox queues, and analytics are isolated and never cross-pollinated or shared between tenants.
2. Information We Collect
- Account Information: Name, work email address, hashed passwords (using cryptographic scrypt algorithms with unique salts), and subscription tier records.
- Sender Account Credentials: SMTP and IMAP hostnames, ports, usernames, and passwords, which are encrypted using AES-256-GCM before database persistence.
- Prospect & Outreach Data: Contact lists imported or unlocked by the user, email sequence copy, outbound dispatch timestamps, and inbound reply association records.
- Extension Logs: LinkedIn prospect activities captured via the Chrome Extension and synchronized to user-authorized Google Spreadsheets.
3. Google API Limited Use Disclosure
Velaur Outbounder's use and transfer to any other app of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements:
- We access only the specific Google Spreadsheet(s) chosen or provided by the user.
- Google user data is used solely to log outreach activity, prospect entries, and daily reports into the user's selected spreadsheet.
- We do not sell, rent, or transfer user Google data to third parties, nor do we use Google user data to train generalized AI or machine learning models.
4. Cryptographic Security Standards
All sensitive credentials, including SMTP/IMAP passwords and third-party access tokens, are encrypted at rest using AES-256-GCM authenticated encryption. Session tokens are generated with 256-bit cryptographically secure random bytes, and database connections utilize TLS encryption.
5. Data Retention & User Rights
Users retain full ownership of their data. Workspace administrators may export contacts, lists, and activity logs at any time in standard CSV format. Upon workspace cancellation or written request to privacy@velaur.io, associated customer records are permanently deleted from active databases.
6. Contact Information
For privacy inquiries, audit questions, or GDPR/CCPA requests, contact our compliance team at: