Version 2026-10-24.draft-1
Privacy Policy
Draft for legal review. This text has not yet been approved by counsel and is not in force.
What Outreason collects, why, who it is shared with, and the choices you have.
What Outreason collects
- Account: your email address, your name and picture if you sign in with Google, and the answers you give at sign-up (18 or older, United States resident, acceptance of these documents) with their dates.
- Billing: your plan and payment history. Card details go to Stripe and never reach Outreason.
- Your work: the questions, files and explorations you put into the tools, and what the tools produce for you.
- Usage: credits used and a record of each AI call (tool, model, size and cost), which the service needs to bill and to protect its limits.
- Security: sign-in times, and the IP address and browser of each active session, kept while the session lasts.
- Analytics, if switched on: which features you use, with your device type, browser and time, under a random analytics id.
What analytics never collect
Analytics never record what you write or receive: no questions, theses, explorations, files, search terms, prompts or model answers, and no name, email, IP address or session replay. No analytics script runs in your browser; events go to Outreason’s own server first.
Who it is shared with
Outreason sells nothing and shares data only with the services that run it:
- Render (servers and database) and Amazon Web Services (domain records and backups), in the United States;
- Stripe (payments, tax and the billing portal);
- Postmark (sign-in codes and account email);
- Google, if you choose to sign in with Google;
- Cloudflare Turnstile, the bot check on the sign-in page, which reads signals from your browser to tell people from bots;
- Anthropic and OpenAI, which process what you send to the tools in order to answer it, under business terms that keep it out of model training; each request carries a random identifier, not your name or email;
- PostHog (analytics, if switched on) and Sentry (error reports, with personal data removed).
Your choices
- Account → Privacy turns analytics off at any time; doing so also deletes your past analytics events.
- A browser that sends Global Privacy Control starts with analytics off.
- Account → Your data downloads everything Outreason holds about you, and deletes your account.
- To review or correct anything else, write to support@outreason.ai.
Outreason does not respond to Do Not Track signals beyond honoring Global Privacy Control as described above, and no third party tracks you across other sites through Outreason.
How long it is kept
Your account and work are kept until you delete them. Deleting your account removes them within 30 days, except: records of your agreement to automatic renewal, kept for three years as California law requires; billing records kept for tax law; and database backups, which expire within 7 days.
Changes
Outreason will email you before a material change to this policy and show the new effective date here.