Skip to content
Privacy

Privacy and data protection

How we handle personal data, on this site and in our campaigns. In plain language, because that's how we talk.

Data this site collects

The site collects the minimum necessary:

  • Booking a diagnostic: the name and email you provide when booking are stored in Cal.com, the scheduling tool we use, and are used to hold the meeting and follow up on the conversation you started, such as sending the diagnostic and a proposal.
  • Email: if you click one of our email buttons, the conversation happens in your email client, started by you. We use the content only to reply to your message.
  • Audience metrics: we use Vercel's cookieless measurement (Web Analytics), with aggregated visit and click data and no individual identification. That's why this site doesn't need a cookie banner. If we ever adopt tools that use cookies, we will ask for your consent first.

Data we use in prospecting campaigns

Our service reaches out to decision-makers on behalf of our clients. For that, we process professional data: name, job title, company, business email and public LinkedIn profile.

  • Source: public sources and licensed databases of professional data, with technical verification before any outreach.
  • Legal basis: legitimate interest (article 6(1)(f) of the GDPR, and the equivalent basis in other applicable laws), applied to professional contact, about a professional matter, aimed at people who have decision-making power over the topic and can reasonably expect this kind of contact in the context of their role. For email outreach, we also apply each country's electronic marketing rules (ePrivacy and national laws), adjusting or excluding markets where B2B cold email requires consent.
  • Opt-out at any time: anyone we contact can ask to stop receiving messages. The request is honored and the contact is removed from the campaigns.
  • Retention: we keep the data only for as long as the campaign and its legal obligations last.
  • Regional laws: we follow the laws that apply where the campaign runs: data protection laws such as the GDPR in Europe and the LGPD in Brazil, and commercial email laws such as CAN-SPAM in the United States and CASL in Canada.

In these campaigns, the contracting client acts as the data controller and Outscalr as the data processor. Any request about your data can be made directly through the channel below, and we will respond.

Who we share data with

We use providers that process data on our behalf: Cal.com for scheduling, Vercel for hosting and site metrics, and email sending and verification tools in the campaigns. Some of them process data in other countries; in those cases, international transfers follow the safeguards required by the applicable law. We do not sell data to anyone.

Your rights

Depending on where you live, data protection laws such as the GDPR grant you: confirmation of processing, access to your data, correction, erasure, portability, information about sharing and the right to object to processing. You can also complain to your local data protection authority. To exercise any of these rights, contact us through the channel below. We respond within 30 days, usually much sooner.

Channel for data matters

Email: hello@outscalr.com

Last updated: July 2026.