Privacy Policy

1. Who We Are

IMG Outreach ("we," "us," "our") operates imgoutreach.com, a service that generates personalized physician outreach email drafts for medical students and international medical graduates. Our contact email is contact@imgoutreach.com.

2. Information We Collect

When you use our service, we collect the following:

• Account information — your name and email address
• Order information — your medical school, year of training, specialty preferences, target location, and purpose of outreach
• Documents — your CV and any additional documents you upload
• Letter of interest — the personal statement you write to inform your email drafts
• Payment information — processed securely by Stripe; we never see or store your card details
• Gmail OAuth token — a limited-access, send-only token used solely to send the emails you approve, from your own Gmail

3. Gmail Access — What We Do and Do Not Do

To deliver your emails from your own Gmail, you authorize IMG Outreach via Google OAuth. We request only the gmail.send scope, which allows us to send emails on your behalf — it does not allow us to read, view, or access your inbox or any existing messages.

With this access, we:

• Send the emails you approve on your review page, from your Gmail, spaced out over time
• Attach your CV to each email you send

We do not:

• Read, access, or store any of your existing emails
• Send any email you have not approved
• Delete or modify any of your existing emails or drafts
• Share your Gmail data with any third party
• Use your Gmail data for any purpose other than fulfilling your order

Emails we send for you include a small tracking image so you can see whether a physician opened your email. This measures opens only — it does not read any email content.

Your Gmail refresh token is stored securely and used only to fulfill your order. You can revoke access at any time at myaccount.google.com/permissions.

Our use of Google user data complies with the Google API Services User Data Policy, including the Limited Use requirements.

AI and your Google data. Your outreach drafts are generated by AI from publicly available physician information and the details you enter into our form (such as your CV and letter of interest). We do not transfer any Google user data to any third-party AI or machine-learning provider, and no Google user data is ever used to train, retrain, develop, or improve any AI or machine-learning model.

4. How We Use Your Information

We use the information you provide to:

• Generate personalized email drafts tailored to your background and target physicians
• Deliver those drafts to your review page and send the ones you approve from your Gmail
• Send you order confirmation and delivery notifications
• Respond to your support requests

We do not use your personal information for advertising or sell it to any third party.

5. How We Store Your Data

Your order data and documents are stored securely in Supabase (a managed database provider). CV files are stored in encrypted cloud storage. We retain your data for as long as necessary to fulfill your order and handle any support requests, and delete it upon request.

6. Third-Party Services

We use the following third-party services to operate:

• Stripe — payment processing
• Supabase — secure data storage
• Resend — transactional emails (order confirmations)
• Google OAuth — sending emails from your Gmail (send-only)
• Vercel — website hosting
• Anthropic, MiniMax, DeepSeek — AI models that draft and edit your emails from public physician data and the details you provide; they never receive your Google data
• Exa, Firecrawl — searching and retrieving publicly available physician information

Each of these services has its own privacy policy. We share only the minimum data necessary to provide the service, and we never share your Google user data with any of them.

7. Your Rights

You have the right to:

• Request access to the personal data we hold about you
• Request deletion of your data
• Revoke Gmail access at any time via your Google account settings

To exercise any of these rights, email us at contact@imgoutreach.com.

8. Cookies

We use only essential cookies necessary for the site to function (session management). We do not use tracking or advertising cookies.

9. Children's Privacy

Our service is intended for medical students and graduates aged 18 and older. We do not knowingly collect data from anyone under 18.

10. Changes to This Policy

We may update this policy from time to time. We will notify you of significant changes by email. Continued use of the service after changes are posted constitutes acceptance.

11. Contact

Questions about this privacy policy? Email us at contact@imgoutreach.com.