Privacy Built for
Enterprise Automation
Sky Outreach combines AI response automation with human SDR verification and auditable workflows to protect personal and business data at every step.
Last Updated: September 9, 2026- 01Our Privacy Philosophy
- 02Data We Collect
- 03How We Use Your Data
- 04Telephone, SMS & Email Communications
- 05Data Sharing & Third Parties
- 06Do Not Sell or Share My Information
- 07Cookies & Tracking
- 08Data Retention & Audit Logging
- 09Security Measures
- 10Data Breach Notification
- 11Your Rights
- 12California & Other State Privacy Rights
- 13International Transfers
- 14Minors
- 15Governing Law
- 16Policy Updates
- 17Contact Us
Our Privacy Philosophy
Sky Outreach operates on automation with integrity. Every lead, booking, and workflow is designed for privacy, auditability, and control.
Zero-trust data practices: we never sell, trade, or rent personal or customer data. Data access is tracked and reviewable, and every automated workflow is recorded, versioned, and auditable for transparency.
Data We Collect
To run automation workflows, book consultations, monitor performance, generate audit evidence, and maintain compliance.
Personal & Business Information
Name, email, phone, company, and role, collected when you inquire, book a consultation, or become a client.
Communication Data
Email, SMS, WhatsApp, call, and chat content and notes exchanged through our automation and SDR workflows.
Interaction & Workflow Data
Engagement scores, booking events, responses, and outcomes generated as leads move through the system.
Technical & Device Data
IP address, browser type, device information, and cookies collected when you visit our website or platform.
Compliance & Audit Data
Timestamps, action logs, and evidence snapshots generated to support audits and regulatory compliance.
How We Use Your Data
Purpose-limited processing with clear accountability at every stage.
| Purpose | AI / Automation | SDR / Human | Balance / Compliance |
|---|---|---|---|
| Lead scoring | AI engagement-intent scoring | SDR verification | Minimized, logged, audited |
| Booking automation | Automated reminders | SDR follow-up | Consent + lawful basis required |
| KPI dashboards | Metrics aggregation | Quality review | Access controlled |
| Compliance | Evidence generation | Policy oversight | Audit-ready records |
Telephone, SMS & Email Communications
Sky Outreach's platform is built around outbound calling, texting, and email — so we take telemarketing and messaging compliance seriously, under the Telephone Consumer Protection Act (TCPA), Florida's Telephone Solicitation Act (FTSA), the CAN-SPAM Act, and equivalent state and federal law.
Consent to Contact
We contact leads and clients by phone, SMS/text, email, and WhatsApp only on a lawful basis — including express consent where required by the Telephone Consumer Protection Act (TCPA), Florida's Telephone Solicitation Act (FTSA), and equivalent state and federal law.
Autodialed & AI-Assisted Contact
Some outreach uses automated dialing, AI-assisted messaging, or prerecorded content. Where law requires prior express written consent for this kind of contact, our workflows are designed to capture and log that consent before it's used.
Opt-Out, Anytime
Reply STOP to any text message, tell an SDR directly on a call, or contact us at privacy@skyoutreach.com or +1 786 353 0444 to stop future calls, texts, or emails. We honor opt-outs promptly and do not require a reason.
CAN-SPAM Compliance
Marketing emails identify their commercial nature, include our real business address, and provide a working unsubscribe mechanism in every message.
Message & Data Rates
Standard message and data rates from your carrier may apply to SMS communications.
Data Sharing & Third Parties
We share data only under strict controls, and every partner is expected to maintain privacy and security measures consistent with this policy.
Service Providers
Cloud hosting, analytics, email, chat, and payment processors, under data processing agreements where required.
Compliance Authorities
Disclosed where legally required under HIPAA or SOC 2-aligned obligations, as applicable to a given engagement.
Legal Requirements
Lawful requests from authorities, fraud prevention, and dispute handling.
Do Not Sell or Share My Information
We Do Not Sell Personal Information
Sky Outreach does not sell personal information, as that term is defined under the CCPA/CPRA or similar state law, and has not done so in the preceding 12 months.
"Sharing" for Cross-Context Advertising
We do not currently run cross-context behavioral advertising (e.g., ad-network pixels) on this site. If that changes, this policy will be updated and a clear opt-out — including honoring the Global Privacy Control signal — will be provided before any such sharing begins.
No Retaliation
We will never deny you service, charge a different price, or provide a lower quality of service because you exercised any privacy right described in this policy.
Cookies & Tracking
Necessary Cookies
Required for security, login, and session reliability — the site does not function correctly without these.
Analytics & Performance
Used to improve user experience, track errors, and optimize workflows.
Your Consent
You can manage cookie preferences in your browser settings at any time.
Data Retention & Audit Logging
Retention Period
Defined by lawful basis, contractual obligation, and applicable compliance requirements — not held indefinitely by default.
Evidence Logs
CRM, calendar, and audit-trail data are stored with access controls appropriate to their sensitivity.
Operational Use
KPI, booking, and workflow data is used internally to improve operations, not sold or shared beyond what's described in this policy.
Security Measures
Encryption
TLS in transit, AES-256 at rest.
Access Control
Role-based access, least-privilege principles, and multi-factor authentication.
Monitoring
Anomaly detection, logging, alerting, and periodic audit review.
Incident Response
A defined incident response plan covering reporting, post-mortems, and log retention.
Data Breach Notification
Detection & Containment
Security monitoring and incident-response processes are designed to detect and contain a potential breach as early as possible.
Notification
If a breach affecting your personal data occurs, we will notify affected individuals and, where required, regulators without unreasonable delay and consistent with applicable law's required timelines and content requirements.
Post-Incident Review
Confirmed incidents are followed by a post-mortem and, where appropriate, control changes to reduce recurrence — consistent with the audit-log practices described throughout this policy.
Your Rights
Under CCPA/CPRA and other applicable U.S. data protection laws.
- Access, correct, or delete your personal data
- Object to processing, or request that processing be restricted
- Receive a copy of your data in a portable format
- Withdraw consent at any time, where processing is based on consent
- Contact our Data Protection Officer for support with any of the above
California & Other State Privacy Rights
If you're a resident of California, Virginia, Colorado, Connecticut, Utah, or another state with a comprehensive privacy law, you additionally have the following rights under that law.
- Right to know what personal information we've collected, used, and disclosed about you
- Right to request deletion of your personal information, subject to legal exceptions
- Right to correct inaccurate personal information
- Right to opt out of the sale or sharing of personal information (see "Do Not Sell or Share" above — we do not currently sell or share in the CPRA sense)
- Right to limit use of sensitive personal information, where applicable
- Right to non-discrimination for exercising any of the above
To exercise any of these rights, contact us using the details in the "Contact Us" section below. We'll verify your request and respond within the timeline required by the applicable state law.
International Transfers
Data may be processed in regions outside your jurisdiction. Where that happens, we use safeguards intended to provide equivalent protection, including standard contractual clauses and access logging.
Minors
Our services are business-to-business and not directed to individuals under 18. We do not knowingly collect personal information from minors, consistent with the Children's Online Privacy Protection Act (COPPA) and applicable state law. If we learn we've inadvertently collected a minor's data, we'll delete it.
Governing Law
This policy is governed by the laws of the State of Florida, consistent with the governing-law election in our Terms & Conditions, without regard to conflict-of-law principles. This section addresses which law governs this policy itself — it doesn't limit any privacy right you have under CCPA/CPRA or other applicable U.S. law based on your own location.
This governing-law election reflects Sky Outreach's Miami, FL business address and should be confirmed by counsel before this policy is treated as final.
Policy Updates
Updates to this policy are published with versioning and a visible last-updated date. Material changes are reflected in our compliance documentation and audit-ready logs.
Contact Us
Data Protection Officer — reach out with any privacy question or rights request.
Frequently Asked Questions
Do you sell or rent my data to third parties?
No. Sky Outreach does not sell, trade, or rent personal or customer data. Data access is tracked and reviewable, consistent with the zero-trust data practices described throughout this policy.
Is Sky Outreach formally ISO 27001, HIPAA, or SOC 2 certified?
Our workflows and infrastructure are designed and aligned with these frameworks' principles — access controls, audit logging, encryption, and evidence generation are built in by default. This page describes that alignment; it isn't a claim of a specific completed third-party certification. Request compliance documentation directly for the current status of any formal certification.
How do I exercise my privacy rights?
Contact our Data Protection Officer using the details below. We'll respond consistent with applicable U.S. law's required timelines for access, correction, deletion, and portability requests.
What happens to my data if I never become a client?
Data collected through inquiries or demo bookings that don't convert to a client relationship is retained only as long as necessary for the purpose it was collected for, then handled per the retention practices described above.
How do I stop receiving calls, texts, or emails from Sky Outreach?
Reply STOP to any text message, tell an SDR directly on a call, use the unsubscribe link in any email, or contact privacy@skyoutreach.com. We honor opt-out requests promptly and don't require a reason.
Do I have privacy rights if I'm a California resident?
Yes. California residents have rights under the CCPA/CPRA to know, delete, correct, and limit use of their personal information, and to opt out of any sale or sharing of it — see the "California & Other State Privacy Rights" section above. Residents of Virginia, Colorado, Connecticut, Utah, and other states with comprehensive privacy laws have similar rights.
Enterprise-Grade Data Security Meets Automation
Protect your leads, bookings, and workflows with AI + SDR + evidence-backed systems.