Privacy Policy

• Account identifiers from platforms you connect (e.g., Google sub/channel id, TikTok open_id).
• OAuth tokens and refresh tokens that allow you to post content or read basic profile details within the scopes you grant.
• Content metadata you provide: titles, captions, tags, video URLs or uploads, and posting options (privacy, duet/stitch, comments).
• Diagnostics: basic server/app logs, device/browser info, and crash/error details.

We do not sell personal data or read your private messages. We only request the minimum scopes needed to perform the action you choose (e.g., video.publish on TikTok to publish on your behalf).

• Authenticate your social accounts and keep you signed in.
• Post content you explicitly request to the connected platform.
• Show connected profile info (name, avatar) inside the app.
• Prevent abuse, debug issues, and comply with legal duties.

• Performance of a contract (providing posting features).
• Consent (granting platform scopes, marketing emails).
• Legitimate interests (security, fraud prevention, analytics).

We share data with service providers strictly to deliver the service (e.g., cloud hosting, database, log monitoring). We also send data to platform APIs only when you choose an action that requires it (e.g., publishing to TikTok or YouTube).

We currently use these service providers (subprocessors):

• Vercel: hosting of the Outloq website and web app
• Hetzner: servers that run the Outloq API and background publishing jobs
• Neon: managed database
• Cloudflare: video and file storage (R2) and DNS
• Resend: transactional email such as verification and password reset
• Sentry: error monitoring
• Stripe, Paddle, Paystack: payment processing, depending on the payment method you use

Third-party platforms process your data according to their own terms and policies.

• Access is restricted to backend services, and tokens are rotated whenever they are refreshed.
• You can disconnect at any time; we delete associated tokens and stop further processing.
• Logs/diagnostics are kept only as long as necessary for security and troubleshooting.

You can delete your account and all associated data immediately, at any time, from Profile → Danger zone. This revokes every connected platform's access, deletes your uploaded videos and stored content, and removes your account.

Disconnecting a single platform (for example, Facebook, Instagram, TikTok, or YouTube) from Settings immediately revokes and deletes the stored access token for that platform, without requiring deletion of your whole account.

If you can't access Settings, you can instead email contact@outloq.com to request deletion; we will delete your account, connected platform tokens, and stored content within 30 days of a verified request, except where retention is required by law.

We use essential cookies for session/authentication and may use privacy-respecting analytics. You can control cookies in your browser settings.

Depending on your region, you may request access, correction, deletion, restriction, portability, or object to processing. You can also lodge a complaint with a data protection authority, in Austria the Datenschutzbehörde (dsb.gv.at), or the authority where you live.

We may process data in countries outside your own. When required, we use appropriate safeguards (e.g., SCCs).

Our service is not directed to children under 13 (or the age specified by local law). Do not use the service if you are under the minimum age.

We may update this policy for legal, technical, or business reasons. We will revise the “Last updated” date and, when appropriate, notify you.

The controller responsible for your data is Victor Ejike, trading as Clear Wave Services, Ohlsdorfer Strasse 12, 4810 Gmunden, Austria. Questions or requests? Email contact@outloq.com or write to the address above. More details are in our Imprint.