PRIVACY POLICY

Outbindr ("we", "us", "our") operates the panel simulation platform at outbindr.com. This Privacy Policy explains what data we collect, how we use it, and your rights with respect to it.

Account data: When you create an account, we collect your email address and a hashed version of your password (managed by Supabase Auth — we never see your raw password). We also collect your full name and age (provided at account registration).

Session data: We store the content of your simulation sessions, including panel configurations you upload, pitch text you submit, AI-generated panel responses, scoring results, and conversation history. This is required to provide the resume and replay features.

Usage data: We may collect standard server logs including IP addresses, browser type, and request timestamps for security and rate-limiting purposes.

API keys: If you choose to save your Groq or ElevenLabs API keys to your account, they are stored encrypted in your Supabase user metadata. We do not use them for any purpose other than powering your simulations.

We use your data solely to provide, maintain, and improve the Service:

— Authenticate your account and maintain session state
— Store and retrieve your simulation history
— Power AI features by forwarding your content to third-party AI providers (see below)
— Detect and prevent abuse and enforce rate limits
— Send transactional emails (account confirmation, password reset)

We do not use your data for advertising, analytics profiling, or to train AI models.

To generate panel responses and transcribe audio, we send your content to the following third-party APIs:

— Groq, Inc. — processes your pitch text and panel configuration to generate AI responses. Groq's privacy policy is available at groq.com.
— ElevenLabs, Inc. — converts AI-generated text to speech (optional; only if you have an ElevenLabs key configured). ElevenLabs' privacy policy is available at elevenlabs.io.

We transmit only the content necessary to generate a response. We do not share your account information (email, name) with these providers.

Your account and session data is stored in a Supabase-managed PostgreSQL database hosted on AWS infrastructure. Data is encrypted at rest and in transit. Access is controlled by Row Level Security policies ensuring you can only access your own sessions.

We implement rate limiting and input validation to protect the Service against abuse. No system is perfectly secure — if you believe your account has been compromised, contact us immediately.

We retain your account and session data for as long as your account is active. You may request deletion of your account and all associated data at any time by emailing privacy@outbindr.com. We will process deletion requests within 30 days.

We do not sell, rent, or share your personal data with third parties for their own purposes. We may disclose data if required by law, court order, or to protect the rights and safety of Outbindr and its users. If you use the Replay Share feature, the session transcript becomes publicly accessible via a link — this is an explicit action you initiate.

The Service is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child has created an account, contact us and we will remove the account.

Depending on your location, you may have rights to access, correct, delete, or export your personal data. You may also have the right to object to or restrict certain processing. To exercise these rights, email privacy@outbindr.com. Users in the European Economic Area and United Kingdom have additional rights under GDPR and UK GDPR respectively.

We may update this Privacy Policy from time to time. We will notify registered users of material changes via email. Continued use of the Service after changes take effect constitutes acceptance of the revised policy.

For privacy-related questions or data requests: privacy@outbindr.com