Privacy Policy

Effective October 8, 2026

Outlier is run from Ontario, Canada. This page says what we collect, why, who else touches it, and how to get rid of it.

What we collect

Account: your email address, and the password you set, stored only as a hash. What you tell us: your onboarding answers — goals, content types, niches, and any channels you enter. How you use Outlier: credits spent, searches run, channels you track and compare, reports you generate. Billing: your plan, subscription status, renewal date, and the Stripe customer and subscription ids that identify you to Stripe. Technical: request data such as browser and IP address, used for security, rate limiting, and error monitoring. IP addresses used for rate limiting are stored only as one-way hashes.

We never see your card. Card numbers are entered on Stripe's own checkout and never reach our servers or our database.

Waitlist: if you joined the waitlist instead of subscribing, we hold your email address and whatever else you chose to fill in on the form — your name, channel link, niche, what you'd use Outlier for, and how you heard about us — plus the referral link you came through, if any.

Site visits: to see how many people visit, where they came from, and how many reach pricing and checkout, we record each page view with the page, the site or app that linked you (for example YouTube), any campaign tag or creator code in the link, whether you're on a phone, tablet or computer, and how long the page was on screen and how far you scrolled. So that someone coming back counts as one visitor, your browser gets a first-party cookie (outlier_vid) holding a random id; we only store a scrambled version of it. If cookies are blocked, a visitor is counted with a code made by scrambling your IP address and browser together with the date, which changes every day and can't be turned back into your IP address. We never store the IP address itself for this, and these records aren't tied to your name or email, aren't shared with anyone, and aren't used for advertising. When you pay, the scrambled id goes along with the payment so we can see which site paying customers came from. Admins' own visits aren't counted. If your browser sends a Global Privacy Control signal we don't set the cookie, and you can turn counting off below.

Referral links and creator codes: if you arrive through someone's link, we remember the link so they get credit and you get any discount. If you subscribe with a creator's code, the code is recorded on your subscription so we can pay that creator their commission. The creator sees totals — how many people subscribed with their code and what it has earned — never your name or email. If you're a creator with a code, we hold your name, your code, the commissions it has earned, and whatever payout details you give us.

How we use it

To run your account and take payment for it, to send the emails the service depends on — your signup link, receipts, and notices about your plan — to personalize research and recommendations, to keep the service up and stop abuse, and to fix errors. We don't sell your personal information and we don't use it to train models. We won't send you marketing email you didn't ask for.

Legal basis

If you're in the UK or EEA: we process your account and billing data to perform our contract with you, your usage data under our legitimate interest in running and securing the service, and anything optional with your consent, which you can withdraw.

Who else processes it

We keep the list short on purpose. Each of these processes data only to provide its service to us:

Contabo — the server Outlier runs on, including its database.
Supabase — the database and authentication software, self-hosted by us on that server.
Stripe — payments, subscriptions, receipts, and the billing portal. Stripe is the seller of record and handles card data under its own privacy policy.
Resend — delivering the emails we send you.
Anthropic (Claude), Google (Gemini) and OpenRouter — the AI models behind the Script Writer and the labels on niches. They receive what you type into those tools (topics, notes, sample scripts) along with public video data, never your email or payment details, and process it to write the response under their own API terms. Please don't put anything confidential into the Script Writer.
Google / YouTube Data API — the public YouTube statistics Outlier shows. We send them search terms and channel or video ids, never anything about you.
Sentry — error reports when something breaks, which can include your user id and the page you were on.

Some of these operate outside your country, so your data may be processed abroad under their own safeguards.

YouTube data

Outlier uses YouTube API Services to display public channel and video statistics. We don't ask for access to your YouTube account and we can't see anything private about it. YouTube data is refreshed regularly and handled according to the YouTube Terms of Service and the Google Privacy Policy. You can revoke third-party access to your Google account at Google security settings. Outlier is not affiliated with YouTube or Google.

How long we keep it

Your account data stays while your account exists. If you cancel, it stays until you ask us to delete it, so your research is still there if you come back. When you ask for deletion we remove your account, onboarding answers, tracked channels, and research within 30 days. Two things outlive that: billing records, which we and Stripe must keep for tax purposes, and hashed IP records used for rate limiting, which age out on their own. Public YouTube statistics aren't personal data about you and stay in our cache.

Your rights

You can see and change your onboarding answers and preferences any time from your settings, and your billing details from Billing. Email support@useoutlier.online to get a copy of your data, correct it, or delete your account and everything in it — we'll confirm within 30 days. Depending on where you live you may also have the right to object to processing, restrict it, or complain to your local data protection authority. We won't charge you or treat you differently for asking.

Children

Outlier is for people 13 and over — older where your country sets a higher age for consenting to online services on your own — and it isn't directed at younger children. We don't knowingly collect personal information from anyone under 13, and we don't ask anyone for their age beyond their agreement to our Terms. If you're a parent or guardian and your child has given us their information without your permission, email support@useoutlier.online and we'll delete the account and everything in it.

Security

Traffic is encrypted in transit, passwords are hashed, access to the database is restricted, and one person's research isn't visible to another. No service is perfectly secure, so if something does go wrong in a way that puts you at risk, we'll tell the people affected.

Cookies

Outlier sets only first-party cookies: ones that keep you signed in; if you arrived through a referral link or creator code, one that remembers that link for 30 days so the credit and the discount you came for still apply when you subscribe; and outlier_vid, which lasts a year and is used only to count unique visitors as described above. Your browser's local storage also remembers small things like a popup you closed. There are no advertising or cross-site tracking cookies, and nothing is shared with ad networks.

Changes

We'll update this page if our practices change and note the new effective date. If a change matters to you, we'll say so by email or in the app.