Privacy Policy

Effective Date: July 1, 2025
Last Updated: October 12, 2026

1. Introduction

This Privacy Policy describes how Outlyne, Inc. (“we,” “our,” or “us”) collects, uses, and protects your personal information when you use our AI-powered website building service at outlyne.com (the “Service”). We are committed to protecting your privacy and ensuring transparency about our data practices.

Important Notice About AI: Our Service uses artificial intelligence technology to help you build websites. This means that some of your interactions with our platform may involve AI systems that process your content and inputs to provide website generation and optimization services.

2. Information We Collect

2.1 Information You Provide Directly

• Account Information: Name, email address, password, billing information, and payment details
• Website Content: Text, images, videos, and other content you upload or input into our platform
• AI Interaction Data: Your prompts, instructions, and inputs provided to our AI systems
• Communication Data: Messages sent through our support channels, feedback, and survey responses
• Profile Information: Optional information such as company name, website preferences, and business type
• Text and Email Editing Information: The mobile numbers and email addresses you add for sending us changes to your website, your consent to receive text messages (when you gave it and the wording you agreed to), any opt-out, and the messages you send us this way

2.2 Information We Collect Automatically

• Usage Data: How you interact with our Service, features used, time spent, and user behavior patterns
• Device Information: IP address, browser type, operating system, device identifiers, and screen resolution
• Log Data: Server logs including access times, pages viewed, and system activity
• Cookies and Tracking Technologies: Information collected through cookies, web beacons, and similar technologies
• Campaign and Referral Data: Where your first visit came from: the website that referred you, the campaign parameters in the address you arrived at (such as UTM tags, and which ad-click identifier it carried, but not its value), the page you landed on, and whether you arrived in an app’s built-in browser
• Product Usage: How you use the Service, such as starting, generating, editing, and publishing a site, recorded under a pseudonymous identifier before you sign up and linked to your account when you register
• Performance Data: Website loading times, error reports, and technical performance metrics

2.3 Information from Third Parties

• Integration Data: Information from third-party services you connect to your account (e.g., social media platforms, analytics tools)
• Payment Processors: Transaction information from our payment partners

3. How We Use Your Information

3.1 Primary Purposes

• Service Provision: Creating, hosting, and maintaining your websites
• AI Processing: Operating our AI systems to generate and optimize website content from your prompts and inputs
• Account Management: Managing your account, authentication, and user preferences
• Payment Processing: Processing payments and managing billing
• Customer Support: Responding to inquiries and providing technical assistance
• Communication: Sending service updates, security alerts, and administrative messages
• Editing by Text and Email: Verifying the numbers and addresses you send changes from, making the changes you text or email us, replying to you about them, and sending you suggested updates if you opt in to them

3.2 AI-Specific Uses

No Training on Your Content: We do not use Your Content, your prompts, or your generated websites to train generative AI models. We may use aggregated, de-identified usage telemetry (such as feature usage and performance metrics) to improve the Service, but this does not include the substance of Your Content.

Content Generation: Your inputs and prompts are processed by our AI systems to generate website content, layouts, and features tailored to your needs.

Personalization: We use AI to personalize your experience, recommend features, and optimize website performance based on your usage patterns.

3.3 Secondary Purposes (with appropriate legal basis)

• Analytics and Research: Understanding user behavior and improving our Service, including keeping records of how each person uses the Service, and using them to contact people who seem to have gotten stuck
• Marketing: Sending promotional content (with your consent where required)
• Legal Compliance: Meeting legal obligations and protecting our rights
• Security: Detecting fraud, preventing abuse, and maintaining platform security

3.4 Text Messages

If you add a mobile number in your settings and agree to receive texts, we send text messages to it about your website: a one-time code to verify the number, and a reply to each change you text us. If you separately opt in to suggestions, we also text you updates we suggest for your website from time to time, which you can approve, ask us to change, or decline or ignore. We use the number only for these texts. Message frequency varies: apart from the verification code, we text you only in reply to a text you send us, unless you have opted in to suggestions. Message and data rates may apply. Reply STOP to any of our texts to opt out, or HELP for help. You can also remove the number in your settings at any time.

When you agree to receive texts, we keep a record of that consent: your number and the account you added it from, what you agreed to and when, whether and when you verified the number, and, once the consent ends, when and why. We keep the record for five years after the consent ends, including after you remove the number or delete your account, or longer if the law requires it. Its only use is to show that we had your consent to the texts we sent.

No mobile information will be sold or shared with third parties or affiliates for promotional or marketing purposes. Text messaging opt-in data and consent are not shared with any third party, except the service providers that deliver our texts and where the law requires it.

4. Legal Basis for Processing (GDPR)

For users in the European Economic Area, United Kingdom, and Switzerland, we process your personal data based on:

• Contract Performance: Processing necessary to provide our Service
• Legitimate Interest: Improving our Service, security measures, and business operations
• Consent: Marketing communications and non-essential cookies (where required)
• Legal Obligation: Compliance with applicable laws and regulations

5. Data Sharing and Disclosure

The categories of sharing in this section do not cover text messaging opt-in data and consent, which are shared only as Section 3.4 describes.

5.1 Service Providers

We share information with trusted third-party service providers who help us operate our Service:

• Cloud Hosting Providers: For data storage and website hosting
• Payment Processors: For payment processing and billing
• AI Model Providers: For AI processing capabilities (with appropriate data protection agreements)
• Analytics Services: For usage analytics and performance monitoring
• Customer Support Tools: For providing customer service
• Messaging Providers: For delivering the emails and text messages we send you, and receiving the ones you send us

5.2 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the new entity, subject to the same privacy protections.

5.3 Legal Requirements

We may disclose information when required by law, court order, or to protect our rights, property, or safety, or that of our users or others.

5.4 With Your Consent

We may share information for other purposes with your explicit consent.

6. AI and Automated Decision-Making

6.1 AI System Notifications

Our Service uses AI systems for:

• Website Generation: Automated creation of website layouts and content
• Content Optimization: AI-powered suggestions for improving your website
• Performance Analysis: Automated analysis of website performance metrics
• User Experience Enhancement: Personalized recommendations and interface adjustments

6.2 Your Rights Regarding AI Processing

• Transparency: You can request information about how our AI systems process your data
• Human Review: For significant decisions affecting your account, you can request human review
• Opt-out Options: You may opt out of certain AI-powered features where technically feasible
• Data Correction: You can request corrections to data used in AI processing

7. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure adequate protection through:

• Standard Contractual Clauses (SCCs): For transfers to countries without adequacy decisions
• Adequacy Decisions: Relying on jurisdictions recognized as providing adequate protection
• Binding Corporate Rules: For transfers within our corporate group

8. Data Retention

We retain your personal information for as long as:

• Your account remains active
• Necessary to provide our Service
• Required for legal, regulatory, or business purposes
• You have consented to the retention

Specific Retention Periods:

• Account Data: Until account deletion plus 30 days for system cleanup
• Text Message Consent Records: Five years after the consent ends, including after you remove your number or delete your account (see Section 3.4)
• Website Content: Until you delete it or terminate your account plus up to 30 days in backups
• Log Data: Typically 12 months unless required longer for security purposes
• Usage Records: Kept while your account exists, and the identifiers that tie them to you are cleared when it is deleted. If you never create an account, the pseudonymous identifier is kept until the anonymous account record created when you started a site is deleted.
• Individual Usage Events: About three months
• Payment Information: As required by financial regulations (typically 7 years)

9. Your Privacy Rights

9.1 General Rights

• Access: Request a copy of your personal information
• Rectification: Correct inaccurate or incomplete information
• Erasure: Request deletion of your personal information
• Portability: Receive your data in a machine-readable format
• Restriction: Limit how we process your information
• Objection: Object to processing based on legitimate interests
• Withdraw Consent: Withdraw consent for processing that relies on consent

9.2 US State-Specific Rights (California, Virginia, Colorado, Connecticut, etc.)

• Right to Know: Information about data collection and sharing practices
• Right to Delete: Request deletion of personal information
• Right to Opt-Out: Opt out of the “sale” or “sharing” of personal information
• Right to Correct: Request correction of inaccurate personal information
• Non-Discrimination: We won’t discriminate against you for exercising your rights

9.3 Exercising Your Rights

To exercise your privacy rights:

• Email: privacy@outlyne.com
• Account Settings: Manage certain preferences directly in your account

We will respond to your request within the timeframes required by applicable law (typically 30 days for GDPR requests, 45 days for US state law requests).

10. Cookies and Tracking Technologies

10.1 Types of Cookies We Use

• Essential Cookies: Required for authentication, user sessions, and core Service functionality
• Attribution Cookie (outlyne_ft): Remembers where your first visit to outlyne.com came from, under a random identifier, so we can tell which websites and campaigns bring people who go on to build a site. It expires after 90 days.

10.2 Cookie Management

You can control essential cookies through your browser settings, though disabling them may affect core functionality like login and session management.

10.3 Do Not Track and Global Privacy Control

We honor Global Privacy Control (GPC) signals and treat them as valid opt-out requests for the sale/sharing of personal information under applicable state privacy laws.

11. Data Security

We implement appropriate technical and organizational measures to protect your personal information:

• Encryption: Data encryption in transit and at rest
• Access Controls: Limited access on a need-to-know basis
• Security Monitoring: Continuous monitoring for security threats
• Regular Audits: Periodic security assessments and updates
• Incident Response: Procedures for responding to security incidents
• Employee Training: Regular privacy and security training for our team

12. Children’s Privacy

Our Service is not intended for anyone under 18. We do not knowingly collect personal information from anyone under 18. If we discover we have, we will delete it.

13. Third-Party Websites and Services

Our Service may contain links to third-party websites or integrate with third-party services. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies.

14. Changes to This Privacy Policy

We may update this Privacy Policy periodically. We will:

• Post Updates: Display the updated policy on our website
• Notification: Notify you of material changes via email or in-app notification
• Effective Date: Changes take effect on the date specified in the updated policy

15. Regional-Specific Information

15.1 California Residents (CCPA/CPRA)

Categories of Personal Information Collected (Last 12 Months):

• Identifiers (names, email addresses, IP addresses, cookie identifiers)
• Commercial information (payment details, purchase history)
• Internet activity (website usage, preferences)
• Geolocation data (general location based on IP address)
• Professional information (business type, company name)
• Inferences (preferences, characteristics, behavior)

Sources and Business Purposes: We collect this information directly from users and automatically through our service to provide website building services, process payments, improve our platform, and provide customer support. We do not sell or share this information for cross-context behavioral advertising.

Shine the Light: California residents may request information about data shared with third parties for marketing purposes.

15.2 European Users (GDPR)

Supervisory Authority: You have the right to lodge a complaint with your local data protection authority.

16. Contact Information

For privacy-related questions, concerns, or requests:

Email: privacy@outlyne.com
Address: 1510 Eddy St, San Francisco, CA 94115

For general inquiries:

Website: https://outlyne.com
Support: support@outlyne.com

Acknowledgment: By using our Service, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy.