Privacy Policy

1. Data controller

IN LIFE PROJECTS SL, as the data controller, informs you that in accordance with EU Regulation 2016/679 (GDPR) and Spanish Law 3/2018 (LOPDGDD), we process your personal data as described in this Privacy Policy.

Legal name: IN LIFE PROJECTS SL
CIF: B67383232
Address: Passeig de Garcia Fària, 49, Sant Martí, 08019 Barcelona, Spain
Email: support@outreachready.io

2. What data we collect

Data you provide directly

• Email address (required for account creation and communication)
• API keys from third-party outreach and CRM tools (encrypted, see below)
• Business ICP information: target industries, company sizes, job titles, pain points, value proposition, tone of voice
• Website URL (optional, for automated ICP suggestions)

Data collected automatically

• Payment transaction data (processed by Stripe — we receive only a transaction confirmation, not your card details)
• Session data for authentication (managed by Supabase Auth)
• Basic usage data via Cloudflare

Data we do NOT collect

• Payment card numbers or banking details (handled by Stripe)
• Website content (fetched temporarily for ICP scanning, never stored)
• Campaign performance data from your outreach tools

3. Why we collect your data

We collect and process your data for the following purposes:

• To provide the setup service you purchased
• To create your outreach campaigns using your API keys
• To generate AI-written sequences based on your ICP information
• To send transactional emails (verification, completion, support)
• To deliver your permanent setup summary page
• To improve our service based on aggregated usage patterns

Legal basis for processing:

• Contract performance: processing necessary to deliver the service you purchased
• Legitimate interests: service improvement and security
• Legal obligation: compliance with applicable laws

4. How we protect your data

API key encryption

API keys you provide are encrypted using AES-256 encryption before being stored in our database. Decryption only occurs during the automated setup process and keys are never logged or exposed in plain text.

Data storage

Your data is stored in Supabase (PostgreSQL database) hosted in the EU. Supabase is compliant with GDPR requirements.

Access controls

Access to your data is restricted to automated systems performing your setup and the service administrator (Juan Carlos Ruiz, IN LIFE PROJECTS SL) for support and manual setup tasks.

We never sell, rent, or share your personal data with third parties for marketing purposes.

5. Third-party processors

We use the following third-party processors who may handle your data:

All processors are contractually required to handle your data in compliance with GDPR.

6. Data retention

We retain your data for the following periods:

• Account and ICP data: 3 years from your last interaction or until you request deletion
• API keys: deleted from our systems 30 days after your setup is marked complete (you should rotate your keys after setup for security)
• Payment records: 7 years as required by Spanish tax law
• Setup summary page: indefinitely (accessible via your unique URL) unless you request deletion

7. Your rights under GDPR

You have the right to:

• Access: request a copy of the personal data we hold about you
• Rectification: request correction of inaccurate data
• Erasure: request deletion of your personal data where there is no legitimate reason to continue processing it
• Restriction: request we limit processing of your data in certain circumstances
• Portability: receive your data in a structured, machine-readable format
• Object: object to processing based on legitimate interests
• Withdraw consent: where processing is based on consent

To exercise any of these rights, contact us at: support@outreachready.io. We will respond within 30 days.

You also have the right to lodge a complaint with the Spanish Data Protection Authority (AEPD): www.aepd.es

8. Cookies

outreachready.io uses only functional cookies necessary for the service to operate:

• Authentication session cookies (Supabase Auth) — required for wizard access
• No tracking cookies
• No advertising cookies
• No third-party analytics cookies

9. International data transfers

Your data may be transferred to and processed in countries outside the European Economic Area (EEA) by our third-party processors (primarily the United States). These transfers are protected by:

• Standard Contractual Clauses (SCCs) approved by the European Commission
• Adequacy decisions where applicable
• Data Processing Agreements with each processor

10. Children's privacy

Our service is not directed at individuals under 16 years of age. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact us immediately.

11. Changes to this policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or by posting a notice on our website. The date at the top of this page indicates when it was last updated.

12. Contact

For any privacy-related questions or to exercise your rights:

support@outreachready.io

IN LIFE PROJECTS SL
Passeig de Garcia Fària, 49
Sant Martí, 08019 Barcelona, Spain
CIF: B67383232