Privacy Policy

Last updated November 7, 2026

Secant Outreach LLC operates Secant Outreach CRM and Secant Outreach Travel. This policy covers our websites and both services, including Social Calendar when it is available in your workspace.

Information we handle

• Website, account, and support information. We handle sign-in and workspace membership information, contact details you provide when you email us, and technical information such as IP addresses, device or browser information, and service logs.
• CRM workspace information. Workspaces can store lead and contact records, outreach history, assignments, call and message activity, and communication preferences. Connected calling and email services may handle related communications, content, or metadata for the features the workspace uses.
• Travel workspace information. Travel teams can store traveler and party details, itineraries, bookings, supplier correspondence, and documents needed for a trip. This may include identity documents uploaded by an authorized team member. Travel teams can share selected information through proposal and itinerary links.
• Billing information. Where applicable, we receive subscription status, billing identifiers, and related transaction information from our payment provider.

When an organization supplies lead or traveler information to manage its work, we handle it to provide the service to that organization. The organization decides what information to enter, who can access it, and when to share it with travelers, suppliers, or other recipients.

Social Calendar and connected accounts

When an authorized user connects a social account, we receive the account or Page identifier, display name, and the authorization credentials issued by the provider. We encrypt those credentials on the server. The calendar can store drafts, captions, media, publishing times, destination selections, activity history, and publication results.

When publishing is enabled and you authorize delivery, we share the selected content with the provider you choose. The provider may receive media bytes or a time-limited link to the asset. Providers such as Facebook, Instagram, TikTok, YouTube, Pinterest, and LinkedIn are available according to the workspace and the provider's approval and configuration. Each provider handles the information it receives under its own policies.

Disconnecting removes the credential the CRM uses for future publishing. You can also revoke access in the provider's account settings. Manage already published posts through the social platform. When YouTube is connected, you can request removal of YouTube API data through the disconnect and removal control and revoke the grant in your Google Account. Google handles its own data under the Google Privacy Policy.

How we use and share information

We use information to run the services, authenticate users, manage subscriptions, deliver the workflows a workspace selects, provide support, diagnose failures, and protect accounts and workspaces. Authorized members can access information according to their roles and the workspace's settings.

We use Google Cloud and Firebase for hosting, authentication, storage, and application infrastructure. We may also share information with the payment, communications, social, or other service providers needed for the features you use, with recipients you direct us to share it with, or when law requires disclosure. Our websites and services may use cookies or similar browser storage to support sign-in and session functions.

How long we keep information

We keep workspace records and media as needed to provide the service, respond to requests, resolve disputes, meet security needs, and comply with legal obligations. Subscription cancellation changes billing status. Workspace data removal follows a separate process, which you can start by contacting us.

Unused Social Calendar connection sessions expire after ten minutes. Our storage cleanup is configured to remove abandoned social uploads after two days. Deleted media can remain recoverable in storage for seven days. The default cloud log bucket retains logs for 30 days, and the required cloud audit log bucket retains its logs for 400 days.

Privacy requests and contact

To request access, correction, a copy, or deletion of personal information, email privacy@secantoutreach.com. Identify the product and workspace, if known, and describe your request. We may need to verify your identity or authority. If an organization controls the workspace records, we may refer the request to that organization or coordinate with its administrator. Your rights depend on applicable law.