Privacy policy

Last updated 6 November 2026

This page explains what personal data Outsense collects on outsense.ai, why we collect it, who helps us process it and what you can ask us to do with it.

Who we are

Outsense is a product of GROU d.o.o. We decide how your personal data is used on outsense.ai, which makes us the controller under the GDPR.

Company: GROU d.o.o.
Address: Litostrojska cesta 58C, 1000 Ljubljana, Slovenia
Registration number: 8157898000
Contact: [email protected]

What we collect when you join the waitlist

Your email address.
Your invite code, and the code of the person who invited you, if you joined through their link.
Your points and the actions that earned them: confirming your email, following or sharing Outsense, and people who joined through your link.
Where you came from, for example a link shared on LinkedIn or a scanned QR code.
A scrambled version of your IP address (a salted hash), used only to stop spam and abuse. We never store your IP address itself.
The dates and times of these actions, and a record of the emails we send you.

When you create a share image, the name, handle and photo you add stay in your browser. They are never sent to us.

How we use it, and why we are allowed to

To run the waitlist: save your spot, count your points and invites, and give early access in the order of the list. This is a step you asked for before a possible contract (GDPR article 6(1)(b)).
To email you about your spot: the confirmation email, a note when someone joins through your link, milestone emails, a weekly spot update if we turn it on, and the news when Outsense opens for you. This is our legitimate interest in running the waitlist you joined (article 6(1)(f)). Every update email has a link to stop them.
To keep the list fair and safe: spam checks, limits on repeated sign-ups and blocking temporary email addresses. This is our legitimate interest in protecting the waitlist (article 6(1)(f)).
To understand how the site is used, so we can improve it. This is our legitimate interest too (article 6(1)(f)), see “Analytics” below.

We do not sell your data, and we do not use it for advertising.

The public part of the waitlist

The waitlist on the thank-you page shows other people only the first two letters of each email address, followed by ***, with their points and number of invites. Nothing else about you is shown to anyone.

Analytics

We use PostHog, on its EU servers, to see which pages people visit and what they click, so we can make the site better. We set it up not to store cookies on your device. It records things like the page, the type of device and browser, and an approximate country.

Your browser

We save your personal status key and the invite code you arrived with in your browser’s local storage, so the site remembers your spot. This is needed for the waitlist to work. We do not use advertising cookies.

To check that sign-ups come from people and not bots, we use Cloudflare Turnstile. It looks at technical details of your browser and connection for that check only.

Who helps us run this

These companies process data for us under data processing agreements, and only to provide their service:

Supabase: database and API, servers in Ireland (EU).
Resend: sending our emails, EU region (Ireland).
Cloudflare: website hosting, the Turnstile spam check, and forwarding emails sent to [email protected].
PostHog: site analytics, EU servers.
Google Workspace: our inbox, where emails you send to [email protected] arrive.

Some of these companies are based in the United States. Where your data may leave the EU, they use the safeguards the GDPR requires, such as the EU standard contractual clauses or the EU-US Data Privacy Framework.

How long we keep it

Waitlist data is kept until 12 months after Outsense launches. After that we delete it, unless you have become a customer.
If you ask us to delete it sooner, we do it.
The scrambled IP records used for spam limits are deleted after two days.

Your rights

You can ask us to show you the data we hold about you, correct it, delete it, limit how we use it, or send it to you in a common format. You can also object to how we use it, including the update emails. Write to [email protected] from the address you signed up with. We reply within one month.

If you think we handle your data wrongly, you can complain to the Slovenian data protection authority, the Information Commissioner (Informacijski pooblaščenec), at ip-rs.si, or to the authority in your own EU country.

Changes

If we change this policy, we update this page and the date at the top. If a change matters for how we use your data, we also email the people on the waitlist.