Privacy Policy

• Account: your email address, when you signed up and last signed in, your plan, and whether you are an invited or admin account.
• Usage: for each scan, the time, its status and what it cost us to run, plus a keyed hash of your IP address (not the address itself) to stop abuse and enforce rate limits.
• Billing: your Stripe customer and subscription IDs, plan, status and renewal date. Card details stay with Stripe.
• Your drafts: the thumbnails and titles you scan are processed to run the scan and are not stored on our servers afterwards.
• Your channel, if you add it: the YouTube channel and niche you pick when you start, and your channel's public numbers from YouTube (refreshed at most once a day) to build your dashboard.
• Waitlist: if you joined it, your email and where you joined from.
• Product events: when you sign up, run a scan (its niche, how many drafts, how long it took), start checkout or change your subscription. These are linked to your account ID, not your email, and never include your titles or thumbnails.
• Analytics, only if you accept cookies: pages you visit, buttons you click, your browser and device, and an approximate location from your IP address. Also session recordings, in which everything you type and every image is hidden, and inside the app all text is hidden too.

Your scan history (small previews and results) is saved in your own browser, not on our servers. You can clear it any time in Plan & usage.

• To provide the service you signed up for: sign-in, scans, plans and billing (performing our contract with you).
• To keep Outlier secure and fair: rate limits, abuse prevention and spending caps (our legitimate interest).
• To keep invoices and payment records as tax law requires (legal obligation).
• To understand which features help creators and to find problems: product events (our legitimate interest; you can object by email) and browser analytics (only with your consent).
• To email you about your account, billing and important changes. We'll only send marketing emails if you opt in, and you can opt out any time.

We use these providers, only for the purposes listed, under agreements that require them to protect your data:

• Supabase: Database and sign-in: your account, plan and usage records.
• Vercel: Hosting: every page and request passes through its servers.
• Stripe: Payments, invoices and the billing portal. Stripe holds your card and billing details.
• Anthropic: AI models that read your thumbnail and write the analysis.
• Voyage AI: Turns your thumbnail and title into numbers so we can find similar videos.
• TypeSafe AI: Answers yes/no checks about your title and thumbnail description.
• Our email provider: Sends your sign-in links.
• Mixpanel: Product analytics, stored in the EU: which pages and features get used, and (with your consent) session recordings.
• Google: Only if you choose Google sign-in.

Some of these providers are in the United States. Where data leaves the UK or EEA, it is protected by the providers' standard contractual clauses or an equivalent safeguard. Public video data in reports comes from the YouTube Data API and is not about you.

Some cookies are needed to run the site: they keep you signed in and remember access settings. Analytics (Mixpanel) only starts if you choose Accept on the cookie banner; it then stores an ID in your browser. You can change your choice any time with Cookie settings at the bottom of the site. We don't use advertising cookies. If that changes, we'll update this policy and ask for your consent first.

We keep account, plan and usage records while your account is open. If you ask us to delete your account, we delete your data within 30 days, except billing records we must keep by law (Stripe keeps invoices for the period tax law requires).

You can ask us for a copy of your data, to correct it, to delete it, or to stop or limit how we use it, and you can object to processing based on our legitimate interests. Email [CONTACT_EMAIL] and we'll reply within 30 days. You can also complain to your local data protection authority.

Outlier isn't meant for anyone under 16, and we don't knowingly collect their data.

If we change this policy in a way that matters, we'll tell you by email or in the app before it applies.