Legal

Privacy Policy

Last updated: May 30, 2026

OutProof ("we," "us," or "our") is committed to protecting your privacy. This policy explains what information we collect when you use OutProof at outproof.ai and app.outproof.ai, how we use it, and how we keep it safe.

By using OutProof, you agree to the practices described in this policy. If you do not agree, please do not use the service.

1. Information We Collect

We collect only what we need to provide the service.

Account information

  • Name and email address, provided via Google OAuth at sign-in
  • Google user ID

Profile and content data

  • Brand profile settings you configure, including niche, audience, tone, and CTA preferences
  • Content you create, including reels, carousels, overlays, captions, and scheduled posts
  • Media files you upload, such as video clips and images stored in Supabase Storage
  • Content calendar data including scheduling preferences and post history

Payment information

  • Billing and subscription data is processed by Dodo Payments. We do not store your full payment card details on our servers.

Usage data

  • In-app interactions, such as button clicks and feature usage, collected via PostHog for the purpose of improving the product. This data is kept internal and is never sold.

Connected TikTok account data

  • If you connect TikTok, we store TikTok account identifiers and public profile metadata provided by TikTok, such as open ID, display name, avatar URL, authorised scopes, connection timestamps, token expiry dates, revocation status, and connection errors.
  • We store TikTok access and refresh tokens securely so OutProof can maintain your connection and send drafts only when you choose to do so.
  • When you send a post to TikTok, we store draft delivery records such as the post type, media type, title, caption, TikTok publish ID, delivery status, response metadata, and error messages.

Connected Instagram account data

  • If you connect Instagram, we store Instagram account identifiers and public profile metadata provided by Meta/Instagram, such as Instagram user ID, username, display name, profile picture URL, account type, authorised scopes, connection timestamps, token expiry dates, revocation status, and connection errors.
  • We store Instagram access tokens securely so OutProof can maintain your connection and publish only when you choose to do so or when you enable Instagram auto-publishing for scheduled posts.
  • When you publish a post to Instagram, we store publishing records such as the post type, media type, caption, Instagram container ID, Instagram media ID or publish ID where available, publish status, response metadata, and error messages.

2. How We Use Your Information

We use the information we collect to:

  • Provide, operate, and improve OutProof
  • Link the content you create to your account
  • Send transactional emails, including post reminders, scheduling nudges, subscription confirmations, and billing notifications via Resend
  • Process subscription payments through Dodo Payments
  • Connect your TikTok account, maintain that connection, and send user-initiated ready reels or carousel posts to TikTok as inbox drafts
  • Check and display TikTok draft delivery status inside OutProof
  • Connect your Instagram account, maintain that connection, and publish user-initiated or scheduled ready reels and carousel posts to Instagram
  • Check and display Instagram publishing status inside OutProof
  • Create short-lived public asset links for carousel images only when needed for TikTok to retrieve the assets for a draft you requested
  • Create short-lived public asset links when needed for Meta/Instagram to retrieve media for a post you requested
  • Use PostHog for internal product analytics to understand how users interact with OutProof, diagnose errors, and improve product features. We do not sell this data or use it for anything else.
  • Respond to support requests and account inquiries

OutProof can publish to Instagram only when you connect an eligible Instagram professional account and choose to publish manually or enable auto-publishing. TikTok delivery sends ready posts to TikTok as inbox drafts, but you finish review and posting inside TikTok. OutProof does not add platform music, licensed music, trending audio, audio stickers, or other Instagram/TikTok audio features to posts.

3. Google Authentication

OutProof uses Google OAuth exclusively for account sign-in. We do not support password-based authentication. By signing in with Google, you are also subject to Google's Privacy Policy.

We access only the information Google provides at sign-in: your name, email address, and user ID. We do not access your Google Drive, Gmail, YouTube, or any other Google services.

You can revoke OutProof's Google sign-in access at any time through your Google security settings. Upon revocation request, we will promptly delete your associated authentication data.

4. TikTok Connection and Draft Delivery

TikTok connection is optional. If you connect TikTok, you are also subject to TikTok's own terms, privacy policy, and platform rules.

OutProof uses TikTok's API only to support account connection and user-initiated inbox draft delivery. We do not read your TikTok feed, analytics, followers, comments, direct messages, or other TikTok account data beyond the information TikTok returns for connection and draft delivery.

You can disconnect TikTok from OutProof at any time from Settings > Integrations. Disconnecting prevents future draft delivery requests from OutProof, but it does not remove content or drafts already sent to TikTok. You may also revoke OutProof's access from your TikTok account settings where TikTok makes that option available.

5. Instagram Connection and Publishing

Instagram connection is optional. If you connect Instagram, you are also subject to Meta's and Instagram's own terms, privacy policies, platform rules, account eligibility requirements, and API limitations.

OutProof uses Meta/Instagram APIs only to support account connection, user-initiated publishing, scheduled auto-publishing when you enable it, and publishing status checks. We do not read your Instagram feed, followers, comments, direct messages, insights, or other Instagram account data beyond the information Meta/Instagram returns for connection and publishing.

OutProof's Instagram publishing feature does not add music or audio to posts. We do not provide access to Instagram's licensed music library, trending audio, audio stickers, or in-app music selection tools. If you want Instagram-provided music or audio on a post, you must add or edit it manually inside Instagram where Instagram makes that available.

You can disconnect Instagram from OutProof at any time from Settings > Integrations. Disconnecting prevents future publishing requests from OutProof, but it does not remove content already published to Instagram. You may also revoke OutProof's access from your Meta or Instagram account settings where Meta/Instagram makes that option available.

6. Data Storage and Security

Your account data, content, and media files are stored securely using Supabase infrastructure. Uploaded media is stored in Supabase Storage and accessed via signed, time-limited URLs.

We implement industry-standard security practices including encrypted data in transit (TLS) and at rest. No method of storage or transmission over the internet is 100% secure, and we cannot guarantee absolute security, but we take protecting your data seriously.

7. Email Communications

We send emails using Resend from presh@outproof.ai. The emails we send include:

  • Post scheduling reminders and at-publish nudges for subscribed users only
  • Morning digest emails for subscribed users who opt in
  • Subscription confirmations and payment receipts
  • Account and billing notifications

You can manage your notification preferences at any time from Settings > Notifications inside the app. Scheduling reminder emails are sent only to active subscribers.

8. Data Sharing and Third Parties

We do not sell your personal data. We do not share your data with advertisers or data brokers. We work with the following third-party services to operate OutProof:

  • Supabase - database, authentication, and file storage
  • Dodo Payments - subscription billing and payment processing
  • Resend - transactional email delivery
  • PostHog - anonymous product analytics
  • Anthropic / OpenAI - AI content generation. Your niche context and content atoms are sent to these APIs to produce your generated content.
  • TikTok - optional account connection and user-initiated inbox draft delivery for ready reels and carousel posts.
  • Meta/Instagram - optional account connection, user-initiated publishing, scheduled auto-publishing when you enable it, and publishing status checks for ready reels and carousel posts.

Each of these providers processes data only as required to deliver the service and operates under their own data protection policies.

9. AI Content Generation

When you generate content using OutProof, the inputs you provide, including your niche description, content atoms, and angle selections, are sent to AI model providers (Anthropic and OpenAI via Supabase Edge Functions) to produce your overlay text, captions, and slide content.

We do not use your content to train AI models. Generated content belongs to you.

10. Cookies and Tracking

OutProof uses cookies that are strictly necessary to operate the service, including session management and authentication. We use PostHog to collect anonymous in-app interaction data to understand how features are used. This data is not linked to identifiable individuals and is never sold.

We do not use advertising cookies or share tracking data with ad networks.

11. Data Retention

We retain your account data, profile settings, and content for as long as your account is active. If you cancel your subscription, your data remains accessible until you request deletion.

To delete your account and associated data, email presh@outproof.ai. We will process deletion promptly.

12. Your Rights

You have the right to:

  • Request access to the personal data we hold about you
  • Request correction of inaccurate data
  • Request deletion of your account and associated data
  • Revoke Google authentication access at any time
  • Disconnect TikTok from OutProof at any time
  • Disconnect Instagram from OutProof at any time
  • Opt out of non-essential email notifications via in-app settings

To exercise any of these rights, contact us at presh@outproof.ai.

13. Children's Privacy

OutProof is not intended for use by individuals under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.

14. Changes to This Policy

We may update this policy from time to time. When we do, we will update the "Last updated" date at the top of this page. For material changes, we will notify you by email. Continued use of OutProof after changes are posted constitutes your acceptance of the updated policy.

15. Contact

If you have questions about this Privacy Policy or how your data is handled, reach out at:

presh@outproof.ai