Security

How RangeLeads handles credentials and mail

• Google and Microsoft connections use OAuth. Redirects go to outreach-api, not the marketing site.
• SMTP credentials are encrypted at rest with a dedicated KMS key.
• Billing uses the ServiceFlow platform Stripe account.
• API keys are entitlement-gated by plan.
• We collect a physical mailing address at signup for CAN-SPAM identification.

For subprocessors and processing terms see the DPA and privacy policy.