Privacy Policy

Who we are

ORYX OR ("we", "us") is an outreach platform operated by Orynx Tech LLC. This policy describes what data we collect through the app, why, and how it's handled — including data accessed through Google APIs when you connect a Gmail mailbox.

What we collect

• Account information: name, email address, and password (hashed) or Google account identifier if you sign in with Google.
• Mailbox connection details: the email address of any mailbox you connect, and either encrypted SMTP/IMAP credentials or an encrypted Google OAuth token — never in plaintext.
• Outreach data you provide: leads/contacts you upload, message templates, and campaign configuration.
• Messages sent and received through mailboxes you connect, so far as needed to run campaigns, thread replies, and detect bounces/unsubscribes.

Google user data

When you connect a Gmail mailbox, we request the following Google API scopes, each used only for the purpose stated:

• gmail.send — to send the outreach messages you compose, from your own connected mailbox, on your explicit action.
• openid, email — to identify which Google account you connected as a mailbox.

We do not request read access to a connected Gmail mailbox, so we never see the content of that inbox. Reply and bounce detection (surfaced in Unified Inbox, and used to stop follow-ups automatically) is only available for mailboxes connected over SMTP/IMAP with your own credentials, not Gmail mailboxes connected via Google sign-in.

Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

• We only access Gmail data to power the sending feature visible in the product, and we don't sell it.
• No one at Orynx Tech LLC reads your Gmail data by hand, except where you've explicitly asked for support with a specific message, or where necessary to investigate abuse, security incidents, or comply with law.
• We don't transfer Gmail data to any third party except infrastructure providers strictly necessary to run the product (e.g., our database and hosting provider), and never for advertising.
• Disconnecting a mailbox revokes our stored access token and stops all further access to that Google account.

How we use data

To operate the outreach features you use directly: sending campaigns and one-off messages, detecting replies/bounces/unsubscribes, showing you sending health and analytics, and providing customer support. We don't use your data to train third-party AI models or sell it to advertisers.

Sharing

We share data only with infrastructure providers necessary to run the service — hosting, database, and background-job processing — each bound to protect it, and never for their own marketing purposes. We don't sell personal data.

Security

Mailbox credentials and OAuth tokens are encrypted at rest (AES-256-GCM) and only decrypted in-process at send/read time. All traffic to the app is encrypted in transit (TLS).

Retention & deletion

We retain data for as long as your account is active. You can disconnect a mailbox at any time, which deletes its stored credentials/tokens immediately. To delete your account and associated data, contact us at abolajijamiu1212@gmail.com.

Your rights

You can review or revoke this app's access to your Google account at any time from Google Account permissions. Depending on your location, you may have additional rights to access, correct, or delete your personal data — contact abolajijamiu1212@gmail.com to exercise them.

Children

This service isn't directed at, or knowingly used by, children under 16.

Changes to this policy

We'll update the date at the top of this page when this policy changes, and post material changes here before they take effect.

Contact

Questions about this policy or your data: abolajijamiu1212@gmail.com. Governed by the laws of Wyoming, United States.