Privacy Policy

This policy explains what MRK Outreach collects, why, and what you can do about it. It describes the service at outreach.mohibraiskhan.com and the outreach application it gives you access to.

What we collect

Account data. Your email address and a password. Passwords are stored only as a bcrypt hash — we cannot read them, and neither can anyone who obtains the file.

Billing data. Your plan, billing period, and subscription status. We never see or store your card number. Payments run through Stripe, which collects card details directly; we hold only the Stripe identifiers needed to manage your subscription.

Campaign data. The prospects, domains, contact addresses, email templates, sent messages and replies you create or import while using the tool. This is your data. We process it to run the service and for nothing else.

Mailbox access. If you connect Gmail, we use Google OAuth with the gmail.send scope only. That scope permits sending mail as you and nothing more — it cannot read your inbox, your contacts, or any other mail. We never receive or store your Google password; only the OAuth token, which you can revoke at any time from your Google Account.

Technical data. Server logs (IP address, timestamp, requested page) kept for security and abuse prevention.

Cookies

We set one cookie to keep you signed in: a signed, HttpOnly session cookie. It is not readable by page scripts and is not used for advertising or cross-site tracking. A second cookie of the same kind is set for administrators of this site.

We run no advertising trackers, no analytics pixels and no third-party profiling on this site. If that changes, this policy will be updated first and you will be asked for consent where the law requires it.

Why we process it

To provide the service you signed up for (contractual necessity).
To take payment and prevent fraud (contract and legitimate interests).
To keep the service secure and available (legitimate interests).
To send service messages about your account. Marketing email is separate and requires your consent, which you can withdraw at any time.

We do not sell your data and we do not share it for advertising. We use a small number of processors to operate the service:

Stripe — payment processing and subscription billing.
Google — only if you connect Gmail, and only to send the messages you compose.
Hostinger — hosting and storage.

We may also disclose data where we are legally required to do so.

How long we keep it

Account and campaign data are kept while your account is open. Close your account and we delete it within 30 days, except records we must retain for tax and accounting purposes (normally seven years). Server logs are kept for up to 90 days.

Your rights

Depending on where you live, you may have the right to access, correct, export or delete your data, to object to or restrict processing, and to complain to a data protection authority. If you are in the EU or UK, these are your rights under the GDPR. If you are a California resident, the CCPA/CPRA gives you rights of access, deletion, correction and to opt out of any sale or sharing of personal information — we do neither.

To exercise any of these, email hello@mohibraiskhan.com. We will respond within 30 days.

Your responsibilities when sending

When you use MRK Outreach to contact people, you are the sender and the data controller for those contacts. You are responsible for having a lawful basis to email them, for honouring unsubscribe requests, and for complying with CAN-SPAM, GDPR, PECR and any other law that applies to you. See the Terms of Service.

Security

Traffic is served over HTTPS. Passwords are bcrypt-hashed. Credentials, account records and campaign data are stored outside the web root so they cannot be requested over HTTP. Sessions are signed and invalidated when you change your password. No system is perfect; if we discover a breach affecting your data we will notify you and the relevant authority as required by law.

International transfers

We are based in the United States and our processors may store data there. Where data is transferred out of the EU or UK, our processors rely on Standard Contractual Clauses.

Children

The service is not directed at anyone under 16 and we do not knowingly collect their data.

Changes

We will post any change here and update the date at the top. If a change materially affects your rights, we will email you before it takes effect.

Contact

MRK Outreach is operated by Mohib Rais Khan LLC, a limited liability company registered in Illinois, United States.