Privacy Policy

• Account identifiers from platforms you connect (e.g., Google sub/channel id, TikTok open_id).
• OAuth tokens and refresh tokens that allow you to post content or read basic profile details within the scopes you grant.
• Content metadata you provide: titles, captions, tags, video URLs or uploads, and posting options (privacy, duet/stitch, comments).
• Diagnostics: basic server/app logs, device/browser info, and crash/error details.

We do not sell personal data or read your private messages. We only request the minimum scopes needed to perform the action you choose (e.g., video.publish on TikTok to publish on your behalf).

• Authenticate your social accounts and keep you signed in.
• Post content you explicitly request to the connected platform.
• Show connected profile info (name, avatar) inside the app.
• Prevent abuse, debug issues, and comply with legal duties.

• Performance of a contract (providing posting features).
• Consent (granting platform scopes, marketing emails).
• Legitimate interests (security, fraud prevention, analytics).

We share data with service providers strictly to deliver the service (e.g., cloud hosting, database, log monitoring). We also send data to platform APIs only when you choose an action that requires it (e.g., publishing to TikTok or YouTube).

We currently use these service providers (subprocessors):

• Vercel: hosting of the Outloq website and web app
• Hetzner: servers that run the Outloq API and background publishing jobs
• Neon: managed database
• Cloudflare: video and file storage (R2) and DNS
• Resend: transactional email such as verification and password reset
• Sentry: error monitoring
• Stripe, Paddle, Paystack: payment processing, depending on the payment method you use

Third-party platforms process your data according to their own terms and policies.

Outloq uses YouTube API Services to publish videos to a YouTube channel you connect, to post the first comment you write, and to show your videos' statistics. By connecting a YouTube channel you agree to the YouTube Terms of Service, and Google's handling of your data is described in the Google Privacy Policy.

• What we access: your channel's id and name; the videos you publish through Outloq; and their view, like and comment counts.
• Google sign-in: if you choose “Continue with Google”, we receive your Google account's email address, name and profile picture, and use them only to create and sign in to your Outloq account.
• How we use it: only to provide features you use: publish what you ask us to, post the first comment you wrote, show which channel a post goes to, and show your results in Analytics. We never use Google user data for advertising, to build profiles, for credit or lending decisions, or to train AI or machine-learning models, and we don't send it to AI services.
• Who we share it with: we never sell Google user data or give it to advertisers or data brokers. It is processed only by the hosting, database and error-monitoring providers listed in Sharing & Subprocessors, solely to run Outloq for you, and is otherwise disclosed only if the law requires it.
• How we protect it: data travels over HTTPS (TLS) only. Access and refresh tokens are encrypted at rest with AES-256-GCM and are only decrypted by Outloq's backend when it acts for you; no Outloq staff access them during normal operation.
• What we store, and for how long: the channel details, the ids of videos you published through Outloq, and the encrypted tokens, until you disconnect the channel or delete your account. Statistics are fetched from YouTube when you view them and cached for at most one hour.
• Removing access: disconnect the channel in Outloq, or revoke Outloq's access at any time on Google's security settings page. Either stops our access. To delete what we stored, disconnect the channel or delete your Outloq account (see Data Deletion below).

Outloq's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

• Access is restricted to backend services, and tokens are rotated whenever they are refreshed.
• You can disconnect at any time; we delete associated tokens and stop further processing.
• Logs/diagnostics are kept only as long as necessary for security and troubleshooting.

You can delete your account and all associated data immediately, at any time, from Profile → Danger zone. This revokes every connected platform's access, deletes your uploaded videos and stored content, and removes your account.

Disconnecting a single platform (for example, Facebook, Instagram, TikTok, or YouTube) from Settings immediately revokes and deletes the stored access token for that platform, without requiring deletion of your whole account.

If you can't access Settings, you can instead email hello@outloq.com to request deletion; we will delete your account, connected platform tokens, and stored content within 30 days of a verified request, except where retention is required by law.

We use essential cookies for session/authentication and may use privacy-respecting analytics. You can control cookies in your browser settings.

Depending on your region, you may request access, correction, deletion, restriction, portability, or object to processing. You can also lodge a complaint with a data protection authority, in Austria the Datenschutzbehörde (dsb.gv.at), or the authority where you live.

We may process data in countries outside your own. When required, we use appropriate safeguards (e.g., SCCs).

Our service is not directed to children under 13 (or the age specified by local law). Do not use the service if you are under the minimum age.

We may update this policy for legal, technical, or business reasons. We will revise the “Last updated” date and, when appropriate, notify you.

The controller responsible for your data is Victor Ejike, Ohlsdorfer Strasse, 4810 Gmunden, Austria. Questions or requests? Email hello@outloq.com or write to the address above. More details are in our Imprint.