Legal

Privacy Policy

This policy explains how Outstatic handles personal data for both the free service and Outstatic PRO.

Last updated: February 20, 2026

1. Information we collect

We collect information needed to operate Outstatic, including:

  • Account information such as email address and authentication provider.
  • Workspace and project metadata required to run repository-based CMS features.
  • Usage and diagnostic data, such as logs, timestamps, and IP-related metadata.
  • Billing and subscription records for Outstatic PRO.

2. How we use information

  • Provide and secure the service.
  • Authenticate users and manage permissions.
  • Process subscriptions, trials, and seat-based billing.
  • Support product reliability, abuse prevention, and troubleshooting.
  • Improve existing features such as social login flows and AI assistance.

3. Repository content and ownership

Outstatic is designed around Git-native content. We process repository content and edits so you can draft, review, and publish from the dashboard.

Your content remains yours. We only process it to provide service functionality and related security operations.

4. Third-party providers

Outstatic relies on infrastructure and integrations such as Supabase, GitHub, Google, and a billing provider. These providers may process data according to their own privacy terms.

When you connect a third-party account, you authorize the data access needed for that integration.

5. AI features

Outstatic PRO includes AI completion features. Prompts and related context may be processed by model providers to return generated output and operate abuse safeguards.

Avoid submitting highly sensitive personal data in AI prompts unless you have an appropriate legal basis to do so.

6. Cookies and similar technologies

We use cookies and similar storage for sessions, security, and essential preferences. Additional categories are described in our Cookie Policy.

Browser settings can block certain cookies, but this may affect authentication and product functionality.

7. Data retention

We retain personal data for as long as needed to provide the service, satisfy legal obligations, resolve disputes, and enforce our agreements. Retention periods may vary by data type and account status.

8. Security

We apply technical and organizational safeguards intended to protect personal information. No internet service is completely secure, so you should also use strong authentication and access controls on connected accounts.

9. Your choices

You can manage account data and workspace access from within Outstatic. You can also disconnect third-party integrations and cancel subscriptions.

Depending on your location, you may have legal rights to request access, correction, or deletion of personal data.

10. Policy updates

We may update this policy as the product and legal requirements evolve. Material changes will be reflected by updating the date above and, when appropriate, by additional notice.