Privacy Policy
Last updated: March 5, 2026
1. Introduction
outer.bot ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Workspace, website, and related services (collectively, the "Service").
By using outer.bot, you agree to the collection and use of information in accordance with this policy.
2. Information We Collect
2.1 Information You Provide
- Account Information: Email address and password when you create an account
- Payment Information: Processed securely by Stripe; we do not store credit card numbers
- Profile Information: Optional display name and preferences
- Support Communications: When you contact us for support
2.2 Information Collected Automatically
- Usage Data: Feature usage statistics (anonymized)
- Device Information: Operating system, browser type (for web features)
- Log Data: Error logs to improve service reliability
2.3 What Happens to a Connected Project
When you connect a project to the Workspace, we clone it to our servers, in full, so the Workspace can read, edit, and run it on your behalf — this is not optional for a connected project, and any page that has told you otherwise was describing an earlier, retired version of the product. If you'd rather your code never reach our servers at all, that option exists too: our hooks-based setup runs entirely on your own machine, with no proxy in the loop. Details are in our writeup on trust levels.
Hosted working files are retained until explicitly deleted. Automatic deletion after inactivity is disabled to protect uncommitted changes and unpushed commits. Disconnecting a project does not instantly delete its hosted files.
Hosted working files are not backed up. Commit and push changes to your connected git repository to keep a durable copy. Explicit workspace cleanup deletes the hosted copy, including any uncommitted changes and unpushed commits, and requires acknowledgment of that deletion.
Request and response bodies — what you send to a model and what it sends back — pass through our systems in the moment a request is made and are not persisted afterward.
2.4 Optional API Keys (Pro BYOK)
Pro members may optionally provide their own Anthropic or OpenAI API key for direct billing. If provided, your key is transmitted over TLS and stored encrypted (AES-256-CBC) on our servers. It is never logged, never shared with third parties, and only decrypted server-side to make API calls on your behalf. You can remove your key at any time from Account Settings.
3. How We Use Your Information
We use the information we collect to:
- Provide, maintain, and improve the Service
- Process payments and manage subscriptions
- Send important updates about the Service
- Respond to support requests
- Analyze usage patterns to improve features (anonymized data only)
- Prevent fraud and abuse
4. Data Storage and Security
4.1 Your Project's Memory: Two Modes
Your project's memory — its briefing, the facts it has learned, any fact you've rejected, its skills, and its compiled rules — has two possible homes, and you choose which:
- Connected to your own git repository (recommended): that repository is the record. It's plain markdown and YAML, in a repo you host, under your own access controls. We keep a copy on our servers too, but only as a cache to serve it quickly — that cache is rebuilt from your repository, never the other way around. Disconnect your repository and connect an empty one in its place, and the cached copy is rebuilt to match: empty. We've verified this directly, live, not just designed it to work that way, and the same rebuild logic is covered by our automated tests. That rebuild is best-effort: if it fails partway (logged on our side when it does), the old cached copy can persist until the next successful reconnect rather than being guaranteed gone the instant you disconnect.
- Not connected: that same memory lives directly in our database instead, with no repository backing it. This is a real, supported mode, not a degraded one — but the deletion guarantee above only applies to a connected repository, since there's nothing else for our copy to be a cache of.
Either way, all data is encrypted in transit (TLS 1.3) and at rest (AES-256) where it touches our servers, stored in secure data centers, with access strictly controlled and logged.
4.2 What Stays on Our Servers Regardless of Mode
Some things are ours to hold no matter how you've configured your project's memory, because they describe our side of the relationship, not yours:
- Your account and billing records: who you are as a customer, your subscription, your connections to other services.
- Encrypted credentials: any API key you've provided us (BYOK), and the deploy key used to reach your connected repository — both encrypted at rest, never stored in plain text.
- Usage and cost metadata: which model you called, when, and how many tokens — not the content of the request itself.
- A connected project's cloned code: see 2.3.
- Operational state: things like a proposed-but-not-yet-accepted fact your project hasn't decided to keep. This is working state, not your memory, and is not covered by the deletion guarantee in 4.1.
You can export or delete your data at any time; see Section 7.
5. Data Sharing
We do not sell your personal information. We may share data with:
- Service Providers: Stripe (payments), AWS (hosting)
- Legal Requirements: When required by law or to protect our rights
- Business Transfers: In the event of a merger or acquisition (with notice)
6. Third-Party Services
outer.bot integrates with third-party services that have their own privacy policies:
- Anthropic (Claude API): Privacy Policy
- OpenAI: Privacy Policy
- Groq: used server-side as part of our free-tier model routing, even if you never choose it yourself — Privacy Policy
- Stripe (Payments): Privacy Policy
- GitHub (OAuth): Privacy Policy
If you configure a custom OpenAI-compatible provider (Account Settings), you're directing your prompts, briefing content, and code to an endpoint of your own choosing — outside the service-provider list above. We relay your request there; we don't vet, control, or take responsibility for what that endpoint does with it. This is stated again at the point you configure one.
When you use your own API keys via the optional BYOK feature (Pro), your usage is also subject to the respective provider's terms.
7. Your Rights
You have the right to:
- Access: Request a copy of your data
- Correction: Update inaccurate information
- Deletion: Delete your account and associated data
- Export: Download your data in a portable format
- Opt-out: Unsubscribe from marketing communications
To exercise these rights, contact us at privacy@outer.bot.
8. Data Retention
- Account Data: Retained while your account is active
- Cloned Project Code (cloud Workspace): Retained until explicitly deleted; automatic inactivity deletion is disabled. Hosted working files are not backed up — see Section 2.3
- Local Data: Controlled by you; delete anytime
- Logs: Retained for 90 days
- Payment Records: Retained as required by law (typically 7 years)
When you delete your account, we remove your data within 30 days, except where retention is required by law.
9. Children's Privacy
outer.bot is not intended for users under 13 years of age. We do not knowingly collect information from children under 13. If you believe we have collected such information, please contact us immediately.
10. International Data Transfers
If you are accessing outer.bot from outside the United States, your information may be transferred to, stored, and processed in the US. We use appropriate safeguards for international transfers.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes by:
- Posting a notice on our website
- Sending an email to registered users
- Updating the "Last updated" date
12. Contact Us
If you have questions about this Privacy Policy, please contact us:
- Email: privacy@outer.bot
- GitHub: Open an issue