Privacy

The short version

• We only post when you tell us to: publishing now, or a schedule you set.
• Platform access tokens are encrypted, never shown to your browser, and deleted when you disconnect.
• We do not sell your data, show ads, or use your videos, captions, comments or numbers to train AI models.
• You can disconnect any platform at any time, and delete your whole account yourself from Settings.

What we store

• Your account: name, email address, time zone, your avatar choice, and either a hashed password or the identity Google returns when you sign in with Google. We also note which days you were active, so streaks, weekly reports and support work.
• Media you upload: the video file, a poster frame, and technical details such as duration, resolution and aspect ratio. If you ask for captions from speech, the transcript is stored with the post.
• The posts you create: captions, hooks, titles, hashtags, schedules, approval requests, and the status each platform reported back.
• Connected accounts: the access and refresh tokens each platform issues (encrypted with AES-256-GCM), when they expire, and the account ID, username, display name and avatar the platform returns.
• Numbers and comments from your accounts: views, likes, comments, followers and similar figures for your posts, and the comments in your Inbox. Live figures are cached for about a minute and a half; per-post history is kept so your analytics can show trends.
• Billing: your plan, payment amounts, status and the gateway reference, and invoices with your name and email. Card and bank details go straight to the payment provider. We never see or store them. If you pay by UPI through YOUPI, we send it only the amount and an order number, never your name, email or phone.
• Teams: if you invite people to your studio, their email address, name and role.
• Support: what you write to Pip, our support assistant, and any ticket you open, including the conversation that led to it, so a person can pick it up.
• Operational logs: publish attempts, errors, timings and the emails we sent you, so a failed post or a missing email can be explained.

What each platform lets us do

You connect each platform yourself through its own sign-in screen. We never see your password for any of them, and we only ask for what the features below need. Only the owner of a studio can connect or disconnect accounts; teammates cannot.

Once a post is live on a platform, that platform holds its own copy under its own terms. Deleting a post in Outlly does not delete it there.

Google user data

Outlly’s use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We use YouTube and Google sign-in data only to provide the features you see in Outlly. We do not sell it, use it for advertising, let people read it except where you ask for support or the law requires it, or use it to train AI models. You can remove Outlly’s access at any time from your Google Account permissions.

Where uploads live

Uploaded files go to private object storage tied to your account. Nothing is publicly listed. Playback inside Outlly, and the copy Instagram, Threads or Facebook fetch when they publish, use signed links that expire after a short time. When you delete a media item, the stored file is deleted with it.

AI features

Outlly uses Google Gemini for its AI features. Here is exactly what is sent, and only when you use that feature:

• Captions, hooks, titles and hashtags: the text you write describing your video.
• Captions from speech: the audio track of your video, converted to a small sound file. The video picture is not sent. If we switch on our own speech-recognition server (FunASR), the sound file goes there instead of Google.
• Clip highlights: the subtitle text of your video, so it can suggest the moments worth their own clip.
• Reply suggestions: the comment or direct message you are replying to, and the sender’s display name.
• Insights on your analytics: your account and post numbers.
• Pip, the support assistant: your question and the last few messages of the chat.

AI suggestions are drafts. Nothing generated is published until you choose to publish it. Our team also uses Gemini, without training any model on it, on anonymised, aggregated product numbers (no names or email addresses) to understand how Outlly is used.

Who processes your data for us

• Vercel: hosts the website and app.
• Supabase: our database, sign-in and file storage.
• Cloudflare (R2): may store your uploaded videos and thumbnails instead of, or as a copy of, Supabase storage.
• Upstash: shared rate-limit counters that stop abuse. They are keyed by a scrambled form of your IP address, never the address itself, and expire within minutes.
• Resend: sends account, publishing, invoice and support emails.
• Stripe, Razorpay or PayPal: takes payments, depending on which you choose at checkout.
• YOUPI (UPI payments): a payment gateway we run on our own server. It confirms a UPI payment by matching it with our bank’s payment alert, so it sees the amount, time, UPI reference and any payer name or UPI ID the alert shows.
• Google (Gemini API): the AI features above.
• The social platforms you connect: as described above.

Each one only receives what it needs to do that job. Some are outside India, so your data may be processed in other countries under their safeguards.

Cookies and browser storage

• Sign-in (studio_session): keeps you signed in.
• Workspace (ol_ws): remembers which studio you are working in if you belong to a team.
• Connecting a platform: a short-lived, encrypted cookie that protects the sign-in round trip. It expires after 10 minutes.
• Preferences: your currency (ol_ccy), practice mode (studio_sim), theme, language and your cookie choice (outly-consent).
• Referrals (ol_ref): if a friend invited you, so both of you get the free month.
• Pip chat: your current conversation is kept in this browser tab only, and cleared when the tab closes.

There is no advertising or cross-site tracking. The cookie banner lets you allow or refuse analytics and marketing cookies; today we do not run any, and if we add them they will only load after you allow them.

Direct messages

When you connect Instagram or a Facebook Page, Meta sends Outlly the direct messages people write to that account, and the replies you send, so they appear in your Inbox. We store the text encrypted, together with the sender’s display name, username, profile picture link and the time. Photos and videos stay with Meta: we keep only the link Meta gives us. Messages are used only to show your conversations and send your replies. They are never used for advertising, never sold, and never used to train AI. Only you and the teammates you invite to your workspace can read them; editors can read but not reply.

Messages are deleted automatically 180 days after they were sent. Disconnecting the account, removing Outlly in Instagram or Facebook settings, or deleting your Outlly account deletes them straight away. Meta’s data deletion request does the same: it removes the connected account and its messages and gives you a confirmation code.

Disconnecting and deleting your data

• Disconnect a platform: open Accounts and choose Disconnect. The stored tokens for that platform, and any direct messages from it, are deleted straight away. You can also remove Outlly from the platform’s own settings (connected apps or business integrations), which stops access from their side too.
• Delete media or posts: from the content library, at any time.
• Delete your account: open Settings, then Your data, and choose Delete account. Your account, media, posts, connected accounts, comments, analytics and payment records are deleted straight away. Invoices are the one exception (see below). You can also ask from the Pip chat or the contact page using your account email.
• Take a copy: Settings, Your data, Download my data gives you a readable PDF with your profile, posts, schedule, library details, direct messages and invoices, or the same data as a JSON file to move to another service. Passwords and access tokens are never included.

Invoices stay on your Billing page for as long as you have an account. If you delete it, each invoice is kept until 8 years after the date it was issued, because Indian tax law requires it, and is then deleted automatically. A kept invoice holds only what was printed on it: the invoice number, date, plan, amount, tax and the name and email it was made out to. It is no longer linked to any account. Drafts nobody has touched for 3 days are removed automatically. Email logs are deleted after 90 days, post metric history after 180 days and sign-in codes after one day. Your source files stay downloadable from the library for as long as your account exists.

Your rights

You can ask for a copy of your data, ask us to correct or delete it, or withdraw a permission you gave, under India’s Digital Personal Data Protection Act and, where it applies to you, the GDPR. Ask through the contact page and we reply within 30 days. If you are not happy with our answer, you can complain to your data protection authority.

Security

Connections use HTTPS. Platform tokens are encrypted at rest and never reach the browser. Every request that changes something is checked to come from Outlly itself, and teammates only get the access their role allows.

Children

Outlly is not for anyone under 18, and we do not knowingly collect data from children.

Changes

If we start storing something new, ask a platform for a new permission, or send data somewhere new, this page is updated and the date at the top moves. Material changes are also announced in the app.

Asking us something

Questions about any of this, including a deletion request, go through the contact page or Pip, the chat in the corner.