Privacy Policy
This Privacy Policy explains how Specific AI collects, uses, shares, retains, and protects information when you use our outreach workspace and related services.
Information we collect
We collect account details such as name, email address, organization membership, authentication records, and administrative settings. We also process prospect, contact, interaction, attachment, and email signal data that you or your organization connects to the service.
Technical records may include device and browser information, request metadata, security events, service logs, and coarse network information needed to operate and protect the service.
How we use information
We use information to authenticate users, manage organizations, display prospect and email activity, execute configured connector actions, send service messages, provide support, and maintain service reliability.
We may use aggregated or de-identified information to understand feature performance and improve the service, provided it cannot reasonably identify an individual or organization.
How information is shared
We may share information with hosting, email, observability, model, and connector providers that help us operate the service. These providers receive only the information needed for their role and are subject to appropriate obligations.
We may also disclose information when required by law, to protect users or the service, during a corporate transaction, or with your organization’s direction or consent. We do not sell personal information.
Connected services and credentials
When you connect Gmail or another provider, Specific AI processes the credentials, authorization grants, mailbox data, and actions necessary to provide the features you enable. Connector secrets are encrypted at rest and are not exposed to browser code after storage.
Third-party providers process information under their own terms and privacy policies. You control which connections are created and may revoke them through the provider or the service where supported.
Security
We use administrative, technical, and organizational safeguards designed to protect information, including access controls, encryption for stored credentials, logging, and environment separation.
No system is completely secure. You are responsible for protecting account credentials, limiting administrator access, and promptly reporting suspected unauthorized use.
Retention and deletion
We retain information for as long as needed to provide the service, satisfy contractual and legal duties, resolve disputes, and maintain security. Retention periods can vary by data category and organization configuration.
When an account, connection, or workspace is deleted, some information may remain temporarily in backups or security records before scheduled deletion or anonymization.
Your choices and rights
Depending on your location, you may have rights to access, correct, export, restrict, object to, or delete personal information. Organization-managed workspace data is normally handled through the relevant organization administrator.
Contact us using the email below for privacy questions or requests. We may need to verify your identity and authority before completing a request.