Legal
KingMinos Privacy Policy
Version: 1.0 · Last updated: 22 October 2026 Contact: privacy@outboundsync.com
This is the privacy policy for KingMinos, a product of OutboundSync, Inc. (OutboundSync, we, us). It covers kingminos.com, app.kingminos.com, api.kingminos.com, mcp.kingminos.com, and the related CLI and skills.
The OutboundSync product on outboundsync.com has its own privacy policy. This document is KingMinos’s.
If you are a person whose work contact details appear in a KingMinos Result, start with the data notice. This policy and that notice are meant to be read together.
1. Who we are
OutboundSync, Inc. operates KingMinos.
Contact for privacy requests: privacy@outboundsync.com
OutboundSync, Inc. 131 Continental Dr, Suite 305 Newark, DE 19713-4324 USA
We have no EU or UK office and no EU or UK representative today.
2. Our two roles
Controller / business for account, login, billing, and support data about our customers and their Members (section 3), and for website cookies (section 8).
Processor / service provider for person Results. KingMinos does not keep a database of people. When a customer asks about a person, we look that person up in real time with third-party data providers and the open web, on that customer’s instructions, and return the Result to that customer’s Workspace only. The customer decides whom to look up and what to do with the Result. The data providers hold the underlying data. Both are controllers of that data; we process it for the customer.
That is true whether the lookup runs on OutboundSync’s vendor accounts (house-key) or on the customer’s own vendor key (BYOK). The KingMinos DPA annex sets the terms. We do not use person Results for our own purposes, we do not build a profile or database from them, and we do not serve one customer’s Result to another. Keeping a Result in that customer’s cache for up to 30 days, so a repeat lookup is fast, does not change this.
We do not use submitted identifiers or Results to train machine-learning models. Data from the OutboundSync CRM-sync product is never sent to KingMinos data providers.
3. Data about our customers
When you sign up or use the Service we process:
| Kind | What | Who helps us |
|---|---|---|
| Account and login | email address, Workspace name, membership, session | hosting provider |
| Billing | billing contact; card details (our payment processor holds the card; we do not store the full card number) | payment processor |
| Login emails | email address and a one-time code | email delivery provider |
| Support chat | name, email, Workspace | support chat provider |
| Error logs | scrubbed error data (we try not to put emails, keys, or payloads in error reports) | error monitoring provider |
| Bot checks | bot-check token and related signals | hosting provider |
| Abuse checks | IP address and network data (including ASN at signup and login) | hosting provider |
| Usage records | records of API and MCP requests, the credits they used, and which providers were consulted | hosting provider |
| Terms acceptance | which Service Terms and Privacy Policy version you accepted, when, your IP address, and browser user agent | hosting provider |
The providers that do this work are on our subprocessor list.
We use this data to create and run your account, bill you, send login codes, give support, fix errors, and stop abuse.
Legal basis (EU/UK, if those laws apply): the contract to provide the Service; legitimate interests in security and abuse prevention; legal obligation for tax and accounting records.
4. Data about people in results
KingMinos returns business contact data about professionals. Categories we may return:
- name
- job title, seniority, function
- employer name and domain
- work email
- personal email (sometimes — when a vendor returns one)
- mobile and direct-dial numbers, with line type, country, confidence, and, where a vendor supplies one, a do-not-call flag
- LinkedIn URL
- inferred languages
- employment status (still there / left / unknown)
Sources. Data vendors, search and AI services, and public sources (DNS, the company’s own website, public registries). The list is on our subprocessor list. Some vendors run on OutboundSync’s accounts (house-key). Others run only when the customer stores its own key (BYOK).
We do not collect home address, date of birth, gender, or salary. We use a person’s location country only internally, to check a phone number’s country and to infer likely languages. We do not return the location.
5. Why and legal basis
For customers. We process account and billing data to provide the Service (contract) and to meet the law.
For people in Results. We process professional contact data on the instructions of the business customer that asked for the lookup, under the DPA annex. The customer, as controller, is responsible for its own legal basis and its own notice to you. Our part is to run the lookup, return the Result to that customer, and keep the copy we hold short-lived (section 7).
We do not use this data to decide credit, employment, insurance, or housing. We do not target children. We do not collect the sensitive categories listed in the Acceptable Use Policy.
If you want to object to a customer’s use of your data, contact that customer or us (section 9).
6. Who receives it
Person Results go only to the business customer whose Workspace requested them, and to Members of that Workspace. We do not serve one Workspace’s cached Result about a person to another Workspace. Public company logos are the one shared item (section 7).
Our subprocessors receive what they need to run a request or to host the Service. The list is at trust.outboundsync.com. That includes:
- hosting, database, storage, and bot-check providers
- AI services that judge or rank candidates; they receive person-derived text (profile headline, titles, employer) and company text, not a full contact record
- payment, email delivery, support chat, and error monitoring providers
- house-key person and company data vendors
A vendor that runs on a customer’s own key (BYOK) is the customer’s vendor, under the customer’s contract. It is not our subprocessor and is not on our list.
Advertising vendors (tag manager, ad conversion, and ad measurement tags) receive cookie and page data on kingminos.com only after consent where consent is required. See section 8.
7. Caching and retention
- Person and company Results are cached per Workspace only, as part of running that customer’s lookups, for up to 30 days depending on the endpoint (phone, title, language, and company description: 30 days; employment: 7 days; company resolve: 24 hours / 4 hours for a miss; company domain: minutes, in memory).
- BYOK Results are never cached, except a company logo (next point).
- Raw vendor responses are deleted after 30 days.
- Public company logos stay in a public store as public company branding, shared across Workspaces. That includes a logo first fetched with a customer’s own key.
- Account and billing records stay as long as we need them for the account and the law. The credit ledger is kept for seven years.
- A customer can ask us at any time to erase cached Results about a specific email address or profile in its Workspace.
- We do not close dormant accounts automatically.
8. Cookies and ads
We use a consent banner on kingminos.com. Where consent is required (EEA, UK, Switzerland), tag manager, ad conversion, and ad measurement tags load only after consent. Necessary cookies (session, security, consent choice) load without a banner choice.
We honor Global Privacy Control (GPC) on the website. A GPC signal is treated as an opt-out of sale/sharing for advertising cookies.
9. Your choices and rights
Email privacy@outboundsync.com. Say what you want (access, deletion, objection, or opt-out of sale/sharing) and give the email address, LinkedIn URL, or phone number concerned. We reply within 2 business days. We finish within 45 days, or within one month if EU/UK law applies. There is no web form yet.
About a person Result. KingMinos is not the source of your data and keeps no database of people (section 2). When you ask us to delete, object, or opt out, we:
- Delete what we still hold about you (cached Results, request records, and raw vendor responses) in every customer Workspace.
- Add your email address or LinkedIn URL to our suppression list. After that, KingMinos declines lookups of you by those identifiers for every customer.
- Pass your request to each customer whose Workspace held a Result about you. That customer is the controller for its lookup and must handle your request and delete or suppress its own copy within 30 days (KingMinos Service Terms section 9).
- Tell you where the underlying data comes from: third-party data providers, listed at trust.outboundsync.com. They hold the data and can delete it at the source.
If you give us only a phone number, we will ask for the email address or LinkedIn URL tied to it, because we cannot find or suppress a record by phone number alone.
Access. We tell you what we still hold about you (Results from the last 30 days, at most) and which kind of source it came from.
Customers can update account data in the app or by emailing support. Billing is handled through our payment processor.
US state notices
Residents of US states that give privacy rights (including California, Colorado, Connecticut, Utah, Virginia, Oregon, Montana, Texas, and others as their laws apply) may ask us for access, correction, deletion, and to opt out of sale or sharing of personal information.
Categories we disclose, and to whom:
| Category | Examples | Disclosed to |
|---|---|---|
| Identifiers | name, email, LinkedIn URL | the customer that asked for the lookup (we act as its service provider); the vendors that run the lookup |
| Professional information | title, employer, employment status | same |
| Contact | work email; personal email (sometimes); mobile and direct-dial numbers; do-not-call flags where a vendor supplies them | same |
| Internet / device | IP, user agent, cookie ids, pages | hosting provider; advertising vendors after consent |
| Commercial | plan, credits used, invoices | payment processor; the customer |
For person Results we act as a service provider to the customer that asked; we pass your request to that customer as section 9 describes. You can also email privacy@outboundsync.com to opt out of sale or sharing, or use GPC on the website for advertising cookies.
We do not use or disclose sensitive personal information for purposes that US state laws treat as requiring a limit-use right, because we do not collect those categories for Results.
We do not knowingly sell or share personal information about anyone under 18.
10. International
We process data in the United States. Our subprocessors may process in the US and in other countries where they operate.
If EU or UK data-protection law applies: our legal bases are in section 5 (for person Results, the customer’s basis applies and we act as its processor); your rights are in section 9; our contact is privacy@outboundsync.com; we have no EU or UK representative yet; a transfer to the US relies on the vendor’s and our transfer tools (for person Results and other customer data, the DPA annex applies the EU Standard Contractual Clauses and the UK addendum by reference if an EU or UK customer signs up).
11. Security
We host the Service on a major cloud platform (serverless compute, database, and object storage). Traffic uses TLS. Vendor keys are stored for routing, not written into error logs. Error reports are scrubbed. Access to production is limited to the people who operate the Service. We do not claim a SOC 2 report or any other certification in this policy.
12. Children
KingMinos is not directed to children. The Service is for business users 18 or older. We do not knowingly collect personal information from children.
13. Changes and contact
We may update this policy. The version date is at the top. Before a material change takes effect, we email it to the address on each KingMinos account at least 30 days in advance, unless the law requires a faster change. Customers who keep using the Service after a change takes effect accept the updated policy, as section 22 of the KingMinos Service Terms describes. People in Results can always read the current version here and in the data notice.
Privacy requests and questions: privacy@outboundsync.com.