Privacy Policy

1. Scope and responsibility

We are responsible for personal information collected for our website and business communications. When we process customer data on a customer’s instructions, the applicable service agreement and data processing terms govern that processing; the customer is responsible for its own privacy notices and lawful instructions.

2. Information we collect

You may provide your name, work email, company, inquiry details and other information you choose to share. Name and email are required to submit our contact forms so we can respond; company details are optional. Please do not include passwords, payment details or sensitive personal information in an inquiry.

Our infrastructure processes technical information such as IP addresses, browser or device information, requested URLs, timestamps and error records to deliver and secure the service. We limit collection to information reasonably necessary for the purposes described here. Visiting this website or submitting a form does not give us access to your connected business accounts.

3. Purposes and legal bases

We use information to respond to requests, provide and support services, manage customer relationships, maintain security, improve reliability and comply with legal obligations. Where data protection law requires a legal basis, we rely on steps requested before a contract or performance of a contract, legitimate interests in operating and securing our business balanced against your rights, applicable legal obligations, or consent where required.

4. Anonymized information and product improvement

We may produce aggregated, anonymized statistics about service usage, performance and errors to understand adoption and improve our products. We treat information as anonymous only when individuals cannot reasonably be identified, including by combining it with other information. We do not attempt to re-identify anonymous information.

Removing names or replacing identifiers alone may not make data anonymous; information that remains linkable to a person is handled as personal information. Customer content is used to deliver the requested service under the applicable agreement. Using private customer content to train general-purpose AI models requires separate, explicit authorization.

5. Sharing and international processing

We use service providers for hosting, storage and communications, including Google Cloud Run, Google Cloud Firestore and Resend. Inquiry records are stored in the United States. Access is limited to people and providers who need the information for their work. We may also disclose information when legally required, to protect rights and security, or in a business transfer subject to appropriate confidentiality and privacy protections.

We do not sell personal information or share it for cross-context behavioral advertising. Where applicable law restricts international transfers, transfers must use a recognized legal mechanism, such as an adequacy decision or approved contractual safeguards. Contact us for information about safeguards applicable to your data.

6. Retention and security

We retain personal information only as needed for the purpose collected, taking account of the inquiry or service relationship, legal retention requirements, security needs and dispute resolution. When no longer needed, information is deleted or anonymized, subject to limited backup retention. We use reasonable technical and organizational safeguards appropriate to the information and restrict access to authorized personnel.

7. Browser storage, analytics and your choices

The website uses browser storage to remember your theme preference and the Google tag for Google Analytics to measure website use. Loading this service sends technical request information to Google. Google Analytics may process page views, interactions, browser and device information, approximate location and cookie or device identifiers to help us understand website use and improve it. Such identifiers and usage records may be personal information; they are not automatically anonymous.

We do not intentionally send names, email addresses or contact-form messages to analytics. Optional tracking that requires consent will be subject to your choice before activation. You can manage cookies and local storage through browser settings and use Google’s Analytics opt-out browser add-on where supported. Blocking measurement does not prevent you from browsing the website or contacting us.

8. Your privacy rights

Depending on applicable law, you may request access, correction, deletion, restriction or a portable copy of your personal information. You may object to processing based on legitimate interests and to direct marketing, and withdraw consent at any time without affecting earlier lawful processing. Use the privacy contact link below; we may verify your identity and will respond within the applicable legal deadline.

You may also complain to your local data protection authority. Our website does not make solely automated decisions with legal or similarly significant effects. Our services are intended for business and professional use, not directed to children under 18; contact us if a child has provided personal information.

9. Changes and contact

We may update this policy to reflect changes in our services or legal obligations. We will update the effective date and provide additional notice of material changes where required. Contact the ActOut team using the privacy contact link below with questions or requests.