Effective Date: May 18, 2025
Last Updated: May 18, 2025
1. Who We Are
This Privacy Policy explains how Benito Alvarez (“Provider,” “I,” “me,” or “my”) collects, uses, and protects your information when you access Outcome OS (the “Service”) during its private-beta phase. Outcome OS is operated by me as an individual—I have not (yet) formed a company for this project.
2. Why This Matters
Because the Service is experimental and pre-launch, I want to be transparent about what limited data I gather and set clear expectations—while also limiting my personal liability as much as the law allows.
3. Information I Collect
| Category | Examples | Source |
|---|---|---|
| Account Data | Name, email address, password hash, invite code | You |
| Workspace Content | Projects, tasks, comments, files you upload, AI-generated text | You & the Service |
| Usage Data | Page views, clicks, feature use, timestamps, error logs, IP address, device type | Automatic |
| Communications | Emails, support tickets, feedback forms, chat transcripts | You |
| Diagnostic / AI Metadata | Prompt text, embeddings, model responses, token counts | Generated during use |
No Sensitive Data Requested. Please avoid submitting government-ID numbers, health data, or other special categories unless absolutely necessary.
No Children’s Data. The Service is not intended for anyone under 18.
4. How I Use Your Information
- Operate the Service – authenticate you, save your tasks, run AI prompts, and keep things working.
- Improve & Debug – review aggregated logs and feedback to fix bugs and train future features.
- Communicate – send onboarding messages, beta updates, and important policy changes.
- Legal & Security – detect abuse, comply with lawful requests, and protect my rights.
I do not sell or rent your information to advertisers.
5. Legal Bases (EU/UK GDPR)
| Purpose | Legal Basis |
|---|---|
| Account creation, core features | Contract (Art. 6 § 1 (b)) |
| Optional marketing emails | Consent (Art. 6 § 1 (a)) |
| Debugging, improvement | Legitimate Interest (Art. 6 § 1 (f)) – keeping the Service functional and secure |
| Compliance & security | Legal Obligation (Art. 6 § 1 (c)) |
You may withdraw consent at any time without affecting prior processing.
6. When I Share Information
- Service Providers – e.g., OpenAI (LLM processing), Supabase & Vercel (hosting), email-delivery tools. They receive only what they need to perform their duties and must keep it confidential.
- Legal or Safety Reasons – if required by law or to protect rights, safety, or property.
- Business Transition – if I later form a company or transfer assets, data may move under equivalent protections.
No Third-Party Analytics Cookies are used at this stage; usage metrics come from server logs.
7. International Transfers
Servers are currently located in the United States. If you access from outside the U.S., you consent to transferring your data there. Where required, I rely on Standard Contractual Clauses (SCCs) for EU-to-U.S. transfers.
8. Security Measures
I employ reasonable technical and organizational safeguards—encryption in transit (HTTPS), hashed passwords, least-privilege access. However, no method is 100 % secure, and I cannot guarantee absolute security.
9. Data Retention & Deletion
| Data Type | Retention Policy |
|---|---|
| Account & Workspace Content | As long as your account is active + 90 days (for backups) |
| Logs & Usage Data | 12 months (aggregated thereafter) |
| Legal records | As required by applicable law |
You may request deletion by emailing support@outcomeos.io. I will erase or anonymize data within a reasonable time unless I must keep it for legal reasons.
10. Your Rights
Depending on where you live, you can:
- Access a copy of your data.
- Correct or update inaccuracies.
- Request deletion (“right to be forgotten”).
- Restrict or object to certain processing.
- Receive your data in a portable format.
To exercise any right, email support@outcomeos.io. I may verify your identity before acting.
11. Limitation of Liability
To the fullest extent permitted by law, my personal liability for any privacy breach, data loss, or indirect damages is limited to one hundred U.S. dollars (US $100). Nothing in this Policy limits liability for gross negligence or willful misconduct where such limitation is unenforceable.
12. Changes to This Policy
I may update this Privacy Policy as the Service evolves. Material changes will be emailed to account holders or displayed prominently in-app at least 7 days before they take effect. Continued use after the effective date constitutes acceptance.
13. Contact
Questions or concerns?
Email: support@outcomeos.io
Postal mail (for legal notices):
Benito Alvarez – Outcome OS Beta
Anna Politkovskaya Street, N 4G, Entrance 1, Floor 15, N82, Block 'C'
St, Tbilisi 0186
Plain-English Summary: I collect only what’s necessary to run this beta, use industry-standard security, and give you control over your data—but it’s experimental software, and I limit my personal liability as far as the law lets me.