Privacy Policy.

01Information We Collect

Information you give us directly

• Account information: your name, email address, password (stored hashed), and phone number.
• Intake form data: business name, industry, brand colors, design references, page requirements, audience description, goals, domain, and any other content you submit through your dashboard intake form.
• Edit-request content: the page name, description, and instructions you submit when requesting changes to your website.
• Communications: messages, emails, and phone notes when you contact our support team.
• Files and assets: logos, photos, copy, and any materials you upload or send for inclusion on your site.
• Booking data: when you book a meeting through Calendly, we receive your name, email, time-zone, scheduled time, and any answers to questions on the booking form.

Information collected automatically

• Device and usage data: IP address, browser type and version, operating system, referring URL, pages visited, time on page, and click-stream data.
• Cookies and similar technologies: see the Cookies & Tracking section.
• Authentication metadata: last login time, login method (email/Google), session tokens.

Information from third parties

• Payment information from Stripe: we do not store your full card number. Stripe processes your payment and returns to us a customer ID, subscription ID, last-4 digits, expiration month/year, and billing email so we can manage your account.
• OAuth providers: when you sign in with Google, we receive the name and email associated with that Google account.
• Analytics providers: aggregated, de-identified data about traffic and conversions.

02How We Use Information

We use the information we collect to:

• Build, launch, host, and maintain your website per your purchased plan;
• Process payments and manage your subscription;
• Provide customer support;
• Respond to your edit requests and meeting bookings;
• Send transactional emails (sign-up confirmations, password resets, security notifications, billing alerts);
• Send marketing emails about our services (only with your consent or where permitted by law — you can unsubscribe at any time);
• Detect, investigate, and prevent fraud, abuse, security incidents, and violations of our Terms;
• Comply with legal obligations and enforce our agreements;
• Improve our products and services through aggregated analytics.

03Legal Bases for Processing (EU/UK)

Where the EU or UK General Data Protection Regulation applies, we rely on the following legal bases:

• Contract: to provide the services you purchased.
• Legitimate interests: to operate, secure, and improve our business.
• Consent: where required, such as for non-essential marketing communications.
• Legal obligation: to comply with applicable laws.

04When We Share Information

We do not sell your personal information. We share data only in the following situations:

Service providers (sub-processors)

We use trusted third-party vendors to operate our service. Each is bound by appropriate data protection terms:

• Stripe — payment processing, subscription management;
• Supabase — authentication, database, transactional email;
• Netlify — website hosting, edge functions;
• Cloudflare — DNS, CDN, denial-of-service protection;
• Google — OAuth sign-in, analytics, Workspace email;
• Calendly — meeting scheduling;
• Meta — advertising platform (Partnership Program customers only);
• GoDaddy / SecureServer — domain registration referrals.

Legal and safety

We may disclose information when we believe in good faith that disclosure is necessary to comply with a law, regulation, legal process, or government request; protect the safety, rights, or property of OutletDomains, our customers, or the public; investigate fraud or security issues; or enforce our agreements.

Business transfers

If OutletDomains is involved in a merger, acquisition, financing, reorganization, or sale of assets, your information may be transferred as part of that transaction, subject to confidentiality obligations.

With your consent

We may share your information for any purpose disclosed to you at the time we ask for your consent.

05Cookies & Tracking Technologies

We use cookies, local storage, and similar technologies to keep you signed in, remember your preferences, secure your account, and measure traffic. Most browsers let you disable cookies, but some features of the site (like login and dashboard access) will not work without them.

We use both first-party cookies (set by outletdomains.com) and third-party cookies (set by service providers such as Stripe and Supabase). We may also use pixel tags and similar tools in our marketing emails to measure open rates and engagement.

06Data Security

We take reasonable administrative, technical, and organizational measures to protect your information from unauthorized access, loss, misuse, alteration, or destruction. These measures include encryption in transit (HTTPS/TLS), encryption at rest for sensitive data, hashed passwords, role-based access controls, isolated environments for production data, and routine security review of our vendors.

No system is one hundred percent secure. We cannot guarantee absolute security, and you use the service at your own risk. You are responsible for keeping your password and login credentials confidential.

07Data Retention

We retain personal information as long as your account is active and for a reasonable period afterward to comply with legal obligations, resolve disputes, enforce agreements, and prevent fraud. Specifically:

• Account data is retained while your account is active and for up to 7 years after deletion for tax and accounting purposes.
• Payment records are retained per Stripe's retention policy and applicable financial regulations.
• Communication and support records are retained for up to 3 years.
• Intake-form content and edit requests are retained for as long as the website is hosted by us, plus 90 days after cancellation.

08Your Privacy Rights

You have the right to:

• Access: request a copy of personal information we hold about you.
• Correct: request that we update inaccurate or incomplete data.
• Delete: request that we delete your data (subject to legal retention rules).
• Restrict or object: request that we restrict or stop certain types of processing.
• Portability: request a copy of your data in a structured, machine-readable format.
• Withdraw consent: where we rely on consent, you may withdraw it at any time.

To exercise any of these rights, email support@outletdomains.com. We will verify your identity before fulfilling the request and respond within thirty (30) days, or sooner if required by law.

09California Residents (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act and California Privacy Rights Act, including the right to know what personal information we collect, the right to delete it, the right to correct inaccurate information, and the right to limit the use of sensitive personal information. We do not sell or share personal information for cross-context behavioral advertising as those terms are defined under the CCPA. You will not be discriminated against for exercising any of these rights.

10EU/UK Residents (GDPR)

If you are in the European Union or United Kingdom, you have rights under GDPR including access, rectification, erasure, restriction, portability, and objection. You also have the right to lodge a complaint with your local supervisory authority. For data subjects in the EU/UK, our representative (if required by law) will be appointed upon written request to support@outletdomains.com.

11Children's Privacy

OutletDomains is not directed to children under 18. We do not knowingly collect personal information from anyone under 18. If you believe we have collected information from a minor, contact us immediately and we will delete it.

12International Data Transfers

OutletDomains operates from the United States. If you access our services from outside the United States, your information will be transferred to and processed in the United States. By using our services, you consent to this transfer. We use appropriate safeguards (such as Standard Contractual Clauses) where required.

13Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated version on this page and update the "Last Updated" date. Material changes will be communicated by email or by a prominent notice on the site. Continued use of OutletDomains after the change becomes effective constitutes acceptance.

14Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy, contact us: