Privacy Policy

Effective date: May 22, 2026

Outlyo (“Outlyo,” “we,” “our,” or “us”) operates the platform at outlyo.com. This Privacy Policy explains how we collect, use, share, and protect information about you when you use our Service. By using Outlyo you agree to the practices described here.

If you have questions or requests regarding your data, contact us at support@outlyo.com.

1. Information We Collect

Account information

When you create an account we collect your email address and, optionally, your full name and profile picture (if you sign up via a social login provider such as Google). We use this to identify your account, communicate with you, and provide the Service.

YouTube channel data

When you connect a YouTube channel to Outlyo, we access publicly available data onlyvia the YouTube Data API v3. This includes: your channel’s title, handle, subscriber count, video count, upload list, and public video metadata (titles, view counts, publish dates, thumbnails). We also fetch public video transcripts where available. We do not request access to your private YouTube data, analytics, or the ability to post or modify content on your behalf.

Usage data & analytics

We collect information about how you interact with the Service — pages visited, features used, actions taken (such as generating ideas or writing scripts), and technical information such as browser type, device type, operating system, IP address, and referring URL. This data is used to improve the product and diagnose issues.

Payment information

Payments are processed by Dodo Payments as the Merchant of Record. When you make a purchase, your payment card details are collected and stored directly by Dodo Payments — we do not store your full card number, CVV, or payment credentials on our servers. We receive a payment confirmation and a customer identifier from Dodo Payments, which we use to update your subscription status.

Communications

If you contact us by email or another channel, we store those communications to help resolve your query and improve our support.

Information you provide in the Service

Content you input into Outlyo (such as writing samples for Channel Voice training or script drafts) is stored associated with your account so you can access it later.

2. How We Use Your Information

• To create and maintain your account and deliver the Service.
• To generate AI-powered video ideas and scripts based on your channel data and preferences.
• To send transactional emails (account confirmation, password reset, credit receipts, subscription notices).
• To send product emails you have opted into, such as the weekly outlier digest. You can unsubscribe at any time.
• To process payments and manage your subscription through Dodo Payments.
• To monitor product usage, detect abuse, and improve the Service through analytics.
• To comply with legal obligations and enforce our Terms of Service.

3. Sub-processors & Third-Party Services

We share data with the following third-party sub-processors to operate the Service:

• Supabase — database, authentication, and file storage. Hosts your account data, channel data, scripts, and ideas.
• Dodo Payments — payment processing and subscription management. Processes payment card data as the Merchant of Record.
• Resend — transactional and marketing email delivery.
• Google Analytics 4 — product analytics and usage tracking. Subject to Google’s Privacy Policy.
• Anthropic — AI model inference for script generation (Claude). Your script prompts and channel context may be sent to Anthropic to generate responses.
• OpenAI — AI model inference for idea generation, niche inference, and summarization (GPT). Your channel and idea data may be sent to OpenAI to generate responses.
• Google / YouTube Data API v3 — used to fetch publicly available YouTube channel and video metadata. Subject to Google’s Privacy Policy.
• Vercel — hosting and serverless infrastructure. Processes request data (including IP addresses) to serve the application.

We do not sell your personal information to any third party. We share data with sub-processors only to the extent necessary to provide the Service.

4. Cookies & Tracking

We use cookies and similar technologies (such as local storage) to maintain your session, remember your preferences, and support analytics. Specifically:

• Session cookies — required for authentication and to keep you logged in.
• Analytics cookies— set by Google Analytics 4 to help us understand how the product is used. These may be disabled by configuring your browser or by using Google’s opt-out tools (Google Analytics opt-out browser add-on).

We do not use third-party advertising cookies or sell your browsing behavior to ad networks.

5. Data Retention

We retain your account data for as long as your account is active. If you delete your account, we will delete or anonymize your personal data within 30 days, except where we are required to retain it for legal or financial compliance reasons (for example, payment records required by applicable law).

YouTube channel data and cached video metadata are retained only as long as needed to provide the Service and are refreshed or deleted on a rolling basis.

6. Your Rights

Depending on where you are located, you may have the following rights regarding your personal data:

• Access — request a copy of the personal data we hold about you.
• Correction — ask us to correct inaccurate or incomplete data.
• Deletion— request that we delete your personal data (“right to be forgotten”).
• Data portability — request an export of your data in a machine-readable format.
• Restriction — ask us to restrict processing in certain circumstances.
• Opt out of marketing — unsubscribe from marketing emails at any time using the link in any email, or by contacting us.
• California residents (CCPA) — you have the right to know, delete, and opt out of sale of personal information. We do not sell personal information.

To exercise any of these rights, email support@outlyo.com from the address associated with your account. We will respond within 30 days (or the timeframe required by applicable law). We may need to verify your identity before processing certain requests.

7. Children

The Service is not intended for children under 13 years of age (or the applicable minimum digital age in your jurisdiction). We do not knowingly collect personal information from children. If you believe we have inadvertently collected data from a child, please contact us and we will delete it promptly.

8. Security

We implement industry-standard technical and organizational measures to protect your data, including encrypted connections (TLS), role-level access controls in our database (Supabase Row-Level Security), and server-side API key management. No method of transmission over the internet is completely secure, however, and we cannot guarantee absolute security.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will update the “Last updated” date at the top and, for material changes, notify you by email. Continued use of the Service after a change constitutes acceptance of the updated policy.

10. Contact

For privacy-related questions, requests, or concerns, contact us at support@outlyo.com. We aim to respond within 1–2 business days.