Outskal("we", "us", "our") operates Outskal Connect, a messaging and CRM platform for businesses on WhatsApp, Instagram and Facebook Messenger (the "Service"), available on the web and as Android and iPhone apps. This Privacy Policy explains what information we collect, how we use it, and the choices you have. By using the Service you agree to this policy.
Who controls the data
Businesses ("workspaces") use the Service to talk to their own customers. For the contacts, messages and other customer data a workspace keeps in the Service, that business decides what is collected and why, and Outskalprocesses it on the business's behalf. For the account information of the people who sign in to the Service, Outskal is responsible.
Information we collect
- Account information — your name, email, password (stored hashed) and, if you turn it on, two-step sign-in settings.
- Contacts a workspace adds, imports or receives — names, phone numbers, emails, companies, tags, custom fields, notes and deals.
- Messages & media exchanged over WhatsApp, Instagram and Facebook Messenger through the accounts a workspace connects, so they appear in its inbox, together with the profile name or username those apps share.
- Leads a workspace chooses to bring in — from Meta lead ads, its own website forms, IndiaMART and JustDial.
- Facebook Pages and ad accounts a workspace connects — their names, the lead forms of its Pages, and what its ads spent and achieved, to show them in Lead ads, Ad insights and Billing.
- Orders and payments — order details a workspace records, and the status of payment links it sends through Razorpay or Cashfree. We do not receive or store card or bank details; the payment gateway handles the payment.
- Connected-service credentials a workspace provides (for example WhatsApp access tokens, Meta Page tokens, store and payment keys) — stored encrypted.
- Device notification details — when you switch on notifications, the push address your browser or phone gives us, so we can alert you about new messages.
- Usage data — basic logs needed to operate and secure the Service.
How we use information
- To send and receive messages on a workspace's behalf.
- To run the broadcasts, follow-up sequences, bots and replies a workspace configures.
- If a workspace turns on AI features (suggested replies, the AI agent, knowledge-base answers), to send the relevant message text and the workspace's knowledge base to an AI provider to produce a reply. These features are off until a workspace switches them on.
- To send notifications about new messages to your devices.
- To provide analytics, reports and support.
- To secure the Service and prevent abuse.
WhatsApp, Instagram, Messenger & Meta
The Service uses the WhatsApp Business Platform and the Messenger and Instagram messaging APIs provided by Meta. Messages are processed by Meta to deliver them. We use the information we receive from Meta's platforms only to provide the features a workspace uses, we do not use it for advertising, and we do not sell it. Use of these apps is also subject to WhatsApp's Business Policy and Meta's Privacy Policy.
How we share information
We do not sell personal data. We share it only with:
- Meta (WhatsApp, Instagram, Messenger), to deliver messages;
- services a workspace connects and asks us to use — such as Razorpay or Cashfree for payment links, Google for Sheets, Twilio for SMS, HubSpot, its online store, IndiaMART and JustDial;
- an AI provider, only for the AI features a workspace switches on;
- the push services of your browser or phone (such as Google, Apple, Mozilla or Microsoft) to deliver notifications, and an email provider to send account emails;
- infrastructure providers that host the Service, under confidentiality obligations.
We may also disclose information if required by law.
Mobile apps
The Android and iPhone apps open the same Service as the website, so this policy applies to them in the same way. They ask permission before showing notifications, and you can turn notifications off in the app or your phone's settings.
Data retention
We keep data while the workspace is active. Some short-lived records, such as old automation logs, are removed sooner. When an account or workspace is deleted, its data is deleted from the Service, except where the law requires us to keep it. When a workspace disconnects a WhatsApp number, a Facebook Page, an Instagram account or Facebook, we delete the access tokens we held for it.
Deleting your account and data
You can ask us to delete your account and its data at any time — from the web or the app. Email contact@outskal.com from the address you sign in with, with the subject "Delete my account". We confirm and complete the deletion within 30 days. A workspace owner can also delete contacts and other records directly in the Service. Step-by-step instructions, including how to remove the app from Facebook, are on our Data Deletion page.
Security
We use industry-standard measures, including encryption in transit (HTTPS), encryption of stored credentials, optional two-step sign-in and access controls. No method of transmission or storage is 100% secure, but we work to protect your information.
Your rights
You can access, correct, export or delete your data. To exercise these rights, contact us at contact@outskal.com. If you are a customer of a business that uses the Service, you can also contact that business directly.
Cookies
We use cookies only to keep you signed in, remember your language, and complete sign-ins to services you connect. We do not use third-party advertising cookies.
Children
The Service is not intended for anyone under 18.
Changes to this policy
We may update this policy from time to time. Material changes will be reflected by the "Last updated" date above.
Contact us
Questions about this policy? Email contact@outskal.com, or write to Outskal, 1/80 Aandipalayam, Kadathur Post, Erode, Tamil Nadu 638454, India.