Privacy Policy

Last updated: 27 September 2026

This policy explains what personal data OutsourceHub24 collects when you use OutsourceHub24, why, and your rights. We are the data controller. Contact: support@outsourcehub24.com.

What we collect

Account data: name, email, password (stored only as a salted hash), and optional two-factor settings.
Business profile and briefs: the information you give us so we can produce your projects, and the files we deliver.
Payments: pack, amount and payment status. Card details go straight to Stripe; we never see them. If you cash out, Stripe collects your bank details; we only keep the bank name and last four digits.
Usage and security data: sign-in times, device type, IP address, and security events (for example failed sign-ins).
Analytics (only if you accept analytics cookies): pages viewed and buttons used, linked to a random identifier.
Support messages you send us.

Why we use it (and our legal basis)

To provide the service and deliver your projects — contract.
To take payments, keep accounting records and prevent fraud — legal obligation and legitimate interests.
To keep accounts secure (sign-in alerts, rate limits, abuse controls) — legitimate interests.
To send transactional emails (receipts, project updates, security alerts) — contract. Optional announcements follow your notification preferences.
To understand and improve the product — consent (analytics cookies) or legitimate interests (aggregate service metrics).

We use trusted processors, under contract, only to run the service:

Anthropic (Claude) and Google (Gemini) — to generate and review your deliverables from your brief.
Stripe — payments, refunds and bank payouts.
Resend — sending email.
Amazon Web Services (London region) — hosting and backups.
Google Fonts — web fonts (your browser requests these from Google).

Some processors may handle data outside the UK; where they do, appropriate safeguards (such as standard contractual clauses) apply. We never sell your data.

How long we keep it

Account and project data: while your account is open. When you delete your account we delete your profile, briefs and delivered files straight away.
Payment and credit records: 6 years, as UK law requires, then deleted.
Sign-in sessions: up to 30 days (14 days if unused). Security events: 180 days. Error logs: 90 days. Analytics: 13 months. Sent-email records: 30 days.
Backups: overwritten within 14 days.

Your rights

You can access, correct, export, restrict, object to, or delete your data. Most of this is self-service: Account → Privacy lets you download everything we hold about you and delete your account. For anything else, email support@outsourcehub24.com. You can also complain to the UK Information Commissioner's Office (ico.org.uk).

Cookies

See our Cookie Policy.

Children

The service isn't for anyone under 18.

Changes

We'll post updates here and tell you about significant changes by email or in the app.