Privacy policy

1.Who processes the data

The controller of personal data for the Outlier Shorts service is [COMPANY / SOLE TRADER], [REGISTRATION NUMBER], [ADDRESS], [COUNTRY]. Contact for data questions: support@outliershorts.com.

This policy explains what data we collect, why, who we share it with, how long we keep it and how to delete it.

2.What data we collect

• Account: email address, name (if you provided one), password hash, and the country you chose or that we detect from the request (to apply regional rules and taxes). We do not store the password itself.
• Sessions: a technical sign-in token (only its hash is stored in the database), expiry date, browser type.
• Provider API keys: the keys you added (for example Anthropic, ElevenLabs, YouTube Data API, Black Forest Labs, OpenAI, Google, Stability AI, Replicate, fal.ai, Cloudflare, Hugging Face). They are stored encrypted (AES-256-GCM); the interface shows only the last 4 characters.
• Content: channel presets, projects, scripts, hooks, prompts, uploaded and generated images and audio, competitor search results, the publishing plan.
• Payments: your customer and subscription IDs at our payment provider (Lemon Squeezy), plan, subscription status and dates, and the time you accepted the terms at checkout. Card details are processed by Lemon Squeezy; we do not receive them.
• Usage records and product events: the number of projects, searches and AI actions per period (for plan limits), and simple product events linked to your account — signed up, email confirmed, first video rendered, checkout started, subscribed, canceled — to see where the Service needs work.
• Cancellation feedback: if you cancel, the reason you pick and the comment you add, if any.
• Preferences: the interface language you chose.
• Technical logs: IP address and request time — to protect against abuse and to find errors.

The finished video is assembled in your browser and is not sent to our server unless you upload it yourself.

3.Why we use the data

• to provide the Service under our agreement: sign-in, storing projects, calling AI providers on your command;
• to accept payments and enforce plan limits;
• to send service emails: password recovery, payment notices and changes to the terms;
• to protect the Service from hacking and abuse (legitimate interest);
• to meet legal requirements, such as keeping payment records.

We do not sell data, do not show ads and do not use your content to train models.

4.Who receives the data

• AI providers, using your keys — Anthropic (text), ElevenLabs (voice), Google (YouTube Data API and, if you choose them, Imagen and Gemini image models), and the image providers you choose (Black Forest Labs, OpenAI, Stability AI, Replicate, fal.ai, Cloudflare, Hugging Face). They receive only the content of the specific request you started. Their processing is governed by their own policies and your agreement with them.
• Built-in free AI — when you use the built-in free AI, the text of your request is sent from our server (or, for the keyless option, from your browser) to free AI services such as Google Gemini, Groq, Cerebras, Mistral, OpenRouter or Pollinations. Requests from the EEA, the UK and Switzerland are not sent to Google's free Gemini tier. Built-in voices run on our own server.
• Free image generators — when you use the free options without a key, your browser sends the scene prompt directly to Hugging Face (a public FLUX Schnell Space) or to AI Horde (a network of volunteer GPUs). They see your IP address and the prompt, but not your account data. Do not put personal data in prompts.
• Lemon Squeezy — payments, receipts, sales tax and subscription management. As merchant of record, Lemon Squeezy processes the payment and billing data it collects (name, email, billing address, card) as an independent controller under its own privacy policy.
• Hosting and database — [HOSTING PROVIDER AND REGION].
• Email service — [EMAIL PROVIDER], for service emails.
• Public authorities — only on a lawful request.

Some recipients are located outside [COUNTRY], including in the USA. Transfers are based on our agreement with you and, where required, on the providers' standard contractual clauses.

5.Cookies

We use two cookies: the necessary fs_session to keep you signed in, and lang to remember the interface language. There are no analytics or advertising cookies. [IF YOU ADD ANALYTICS, DESCRIBE IT HERE].

6.How long we keep data

• Account, keys and content — as long as the account exists.
• Sessions — until you sign out or for 30 days.
• Password reset links — 1 hour.
• Product events and cancellation feedback — up to [PERIOD, E.G. 24 MONTHS], then deleted or anonymised.
• Technical logs — up to [PERIOD, E.G. 30 DAYS].
• Database backups — 14 days, then overwritten.
• Payment records — as long as the tax law of [COUNTRY] requires; Lemon Squeezy keeps its own records under its policy.

7.Deleting data and your rights

You can delete your account yourself in Settings. Projects, files, channels, keys and sessions are deleted with it immediately. Backups are overwritten within 14 days. You can delete an individual API key there at any time.

You can also write to support@outliershorts.com and ask us to: show what data we hold about you; correct it; export it; delete it; restrict or object to its processing. We will reply within 30 days. To protect your account, we may ask you to write from the address it is registered to.

If you believe your rights have been violated, you may file a complaint with the data protection authority: [AUTHORITY NAME].

8.Security

The connection is protected by HTTPS. Passwords are stored as bcrypt hashes, API keys are encrypted, session tokens are stored as hashes. Access to each user's data is limited to their account. No system is completely secure; in the event of a breach affecting your data, we will notify you and the regulator within the time required by law.

9.Children

The Service is not intended for people under [AGE]. We do not knowingly collect their data.

10.Changes to this policy

We will notify you of material changes by email or in the Service. The revision date is shown at the top of the page. The terms of the Service are on the Terms of use page.

11.Contacts

Data questions and support: support@outliershorts.com.