Privacy Policy

Outcomesy OÜ, registry code 17093201, Sepapaja tn 6, Lasnamäe linnaosa, 15551 Tallinn, Harju maakond, Estonia. Contact for privacy matters: support@outcomesy.com.

• Account data: email address, login credentials (passwords are hashed; we never see them in plain text).
• Waitlist / contact data: email address and, for consultation requests, the website and message you submit.
• Customer Data you upload: advertising and store exports (e.g. spend, revenue, orders, product names). These are business records of the brand you operate; upload only data you are authorised to process.
• Usage and technical data: basic logs needed to run and secure the service (timestamps, request metadata, error logs).
• Bot-protection data: our public forms use Cloudflare Turnstile, which processes technical browser signals to distinguish humans from bots.

• Providing the service you request — briefings, actions, reports (performance of contract).
• Managing the waitlist and responding to consultation requests (legitimate interest / pre-contractual steps).
• Securing the service against abuse (legitimate interest).
• Communicating service messages such as invites and account emails (performance of contract / legitimate interest).
• We do not sell personal data and do not use your Customer Data for advertising.

To generate briefings, recommendations, and reports, relevant Customer Data is processed by Google's Gemini API acting as our processor. We use a paid API tier under terms that do not permit the use of your data to train Google's models. Outputs are generated for your workspace only; we do not pool your data across customers.

We use a small set of infrastructure providers to run the service:

Some providers may process data outside the EEA; where they do, we rely on appropriate safeguards such as EU Standard Contractual Clauses as implemented by those providers.

• Account and Customer Data: retained while your account is active; deleted within 90 days of account deletion, except minimal records we must keep for legal reasons.
• Waitlist data: retained until the beta programme ends or you ask us to remove you.
• Logs: retained for a short rolling window for security and debugging.

You may request access to, correction of, deletion of, or a portable copy of your personal data, object to or restrict certain processing, and withdraw consent where processing is based on consent. Write to support@outcomesy.com. You may also lodge a complaint with a supervisory authority — in Estonia, the Data Protection Inspectorate (Andmekaitse Inspektsioon), or the authority in your country of residence.

The service uses only cookies and local storage strictly necessary to operate (such as keeping you signed in). We do not currently use advertising or third-party analytics cookies. If we introduce analytics (e.g. Google Analytics), this policy will be updated and a consent banner added first.

Data is encrypted in transit; access is scoped per workspace with row-level security; public forms are protected against automated abuse. No system is perfectly secure — if we become aware of a breach affecting your data, we will notify you as required by law.

The service is for business use and not directed at anyone under 18.

We will post updates here and, for material changes, notify you before they take effect.