This Privacy Policy explains how Out Plane ("Out Plane", "we", "us") collects, uses, shares, and protects personal data when you visit our website, create an account, or use our platform (the "Service"). It also describes your rights and how to exercise them.
Who We Are and Our Role
The controller responsible for the personal data described in this policy is Out Plane LLC, a Delaware limited liability company located at 131 Continental Dr, Suite 305, Newark, DE 19713, US. You can reach us at [email protected].
Our role depends on the data:
- For account, billing, usage, and website data, we act as a data controller.
- For personal data contained in the content you deploy (your applications, databases, and files), you are the controller, and we act as a processor on your behalf. That processing is governed by our Data Processing Agreement (DPA), available to business customers on request.
Data We Collect
- Account data: the information you provide when you sign up, such as your name, email address, and authentication details from your connected accounts.
- Usage and technical data: how you interact with the console and website, plus limited technical data such as IP address, device information, and timestamps, used for security and abuse prevention.
- Billing data: payment details processed by our payment provider. We do not store full card numbers on our own systems.
- Support communications: messages you send us.
- Content you deploy: application code, environment variables, databases, and files you choose to run on the platform.
How We Use Your Data and Legal Bases
We process personal data on the following legal bases:
- To provide the Service (performance of a contract): operating, securing, and maintaining the platform, authenticating you, and processing payments.
- Our legitimate interests: improving our products, preventing fraud and abuse, keeping the platform secure, and sending limited communications to existing customers.
- Your consent, where required for non-essential analytics or marketing.
- Legal obligations, such as tax, accounting, and responding to lawful requests.
We do not sell your personal data.
Where Data Is Hosted and International Transfers
We primarily host platform workloads and managed databases on infrastructure located in the European Union. Depending on your configuration and on the sub-processors we use for functions such as payments, email, authentication, and analytics, some personal data may be processed in other countries. Where we transfer personal data outside the EEA or the UK, we rely on appropriate safeguards, such as an adequacy decision or the European Commission's Standard Contractual Clauses.
Sub-Processors
We use a limited set of sub-processors to help operate the Service. A current list is available on request. Business customers can enter into our DPA, which sets out the terms that apply to sub-processors.
Cookies and Analytics
We use a minimal set of cookies required to run the site and keep you signed in. Our product analytics are self-hosted and configured to avoid collecting unnecessary personal data. We do not use third-party advertising cookies.
Your Rights
Depending on your location, you may have the right to access, correct, delete, export, or restrict the use of your personal data, to object to certain processing, and to withdraw consent. To exercise these rights, contact us at [email protected]. You also have the right to lodge a complaint with your local data protection authority.
Data Retention
We retain personal data for as long as your account is active or as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements. You can request deletion of your account and associated data at any time.
Security
We use technical and organizational measures appropriate to the risk, including encryption in transit and at rest, access controls, and logging. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.
Children
The Service is not directed to children under 16, and we do not knowingly collect their personal data. If we learn that we have, we will delete it.
Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be reflected by the "last updated" date above and, where appropriate, communicated to you directly.
Contact
For any privacy questions or requests, contact us at [email protected].