Privacy policy
Last updated 5 November 2026
This explains what Outpublished ("Outpublished", "we") collects when you use outpublished.com, what we do with it, and what you can ask us to do. Questions go to [email protected].
What we collect
| What | Why |
|---|---|
| Account details. Your name (optional), email address and a salted hash of your password. If you sign in with Google, we receive your Google name and verified email only. | To create your account and sign you in. We never see or store your Google password. |
| Black Friday list. The email address you give us on our Black Friday page, if you join the list. | To ask you to confirm your address, then send you two emails: when your early access opens and before the deal closes. Each has a link to stop them. |
| Your settings. Your own site's address, the competitor sites you follow, topics, plans, and any corrections or notes you make. | To run the service you asked for. |
| Public web pages. The titles, headings, text and dates of pages on your site and your competitors' sites, read from the open web. | To find new pages and tell you whether you already cover each topic. |
| Sign-in sessions. A random session token in a cookie, and when it expires. | To keep you signed in. See Cookies. |
| How you use the site. Pages you visit, what you click, where you came from, your browser and device, your IP address and rough location, and recordings of your visits showing what was on screen. Anything you type into a form is hidden from recordings. Collected with PostHog, and linked to your account once you are signed in. In the EU, EEA, UK and Switzerland this runs only if you allow it; everywhere else you can turn it off. See Cookies. | To see which parts of the service help people, and to find what is broken or confusing. |
| Account milestones. A record against your account when you sign up, add a site, follow a competitor, create a brief or pay, whatever you choose in the cookie banner. These come from our server, with no cookies involved. | To understand how the service is used and improve it. |
| Billing details. Paddle, our Merchant of Record, collects your payment details at checkout. We receive your plan, its status and a customer reference, never your card number. | To charge you and keep records the law requires. |
| Server logs and errors. IP address, browser, the page requested and any error details. | To keep the service secure and fix bugs. |
| Messages you send us. | To reply to you. |
We do not run advertising trackers, and we do not sell your data.
Optional: Google Search Console
If you choose to connect Search Console, we ask Google for read-only access to your search performance data for the sites you pick, and use it only to show you that data inside Outpublished. You can disconnect at any time in Settings or from your Google account, and we then stop reading it.
Who else handles your data
- Hosting and security. The providers that run our servers, protect the site and store our backups.
- AI providers. To sort pages into topics and judge whether your site covers a topic, we send text from public web pages (titles, headings and short excerpts) to an AI provider. We do not send your name, email or password, and we only use providers whose terms say this data is not used to train their models.
- Payments. Paddle.com, which sells our plans as Merchant of Record and handles payments, invoices, tax and refunds under its own privacy policy.
- Analytics. PostHog, Inc. in the United States stores the usage data, recordings and error reports described above, under its own privacy policy. Your browser reaches PostHog through our address e.outpublished.com, which runs on Cloudflare.
- Email. A provider that sends our account emails.
- Sign-in. Google, if you choose Google sign-in.
We may also disclose information if the law requires it, or to protect the service from abuse.
How long we keep it
Account data is kept while your account is open. When you delete your account we remove your account, settings and notes, and copies in our backups are deleted on a rolling schedule. Pages we read from competitor sites contain no personal data about you. Billing records are kept for as long as tax law requires, and server logs only as long as we need them to keep the service running. Usage data and recordings are kept in PostHog only as long as they help us improve the service, and you can ask us to delete yours at any time.
Your rights
You can ask us to give you a copy of your data, correct it, delete it, or stop using it for a particular purpose. If you are in the UK or EU you also have the right to object and to complain to your data protection authority. Email [email protected] from the address on your account and we will answer within 30 days. Where we need your consent, you can withdraw it at any time.
Where the GDPR applies, our legal bases are: performing our contract with you (running your account), our legitimate interest in keeping the service secure and improving it (including account milestones and error reports), legal obligations (tax records), and your consent (analytics cookies and recordings, and optional connections such as Search Console).
Where data is processed
Our servers and our providers may be in countries other than yours, including the United States. Where required, we rely on standard contractual clauses or similar safeguards for transfers.
Children
Outpublished is for businesses and is not meant for anyone under 16. We do not knowingly collect their data.
Changes
If we change this page in a way that matters, we will email account holders before the change takes effect. The date at the top shows the latest version.