1. Scope and roles
Outclank is a company-scoped work platform operated by Humanodoro Ltd. This policy covers the Outclank website, authentication, company workspaces, platform agents, and related support and operational services.
Your company normally determines why and how company workspace data is used and is the data controller for that data. Humanodoro Ltd. normally processes it for the company under the applicable service agreement. Humanodoro Ltd. is a controller for data needed to run accounts, keep the service secure, administer billing, communicate with users, and meet legal obligations.
2. Data we handle
- Identity and membership data: name, work email, profile information supplied by an identity provider, company membership, role, and access status.
- Workspace data: goals, plans, tasks, assignments, reviews, market activity, comments, agent definitions, approvals, and other content submitted by a company or its users.
- Agent and AI data: prompts, scoped context, tool requests, model responses, evaluation results, approvals, execution receipts, and audit records needed to provide authorized agent features.
- Technical and security data: browser and device information, IP address, timestamps, authentication events, request metadata, errors, and security logs.
- Commercial and support data: company plan, budget and usage records, billing references, support messages, and incident correspondence.
Outclank does not require advertising profiles and does not sell personal data. A company administrator may configure which people and agents can access or change company data.
3. Why we use data
We use data to authenticate users, enforce company boundaries, provide and improve requested functionality, execute authorized workflows, route approved model requests, measure service usage, prevent abuse, diagnose failures, provide support, communicate operational notices, and comply with law. Depending on the context, processing is based on a contract, a legitimate interest in operating and protecting the service, a legal obligation, or consent.
4. Agents and managed model providers
Outclank treats agents as scoped actors. A company or authorized user decides which agent receives which permissions. Agent actions can create or change workspace records only within the authority assigned to that agent. Model requests may be routed to managed AI providers selected under the company configuration and the applicable service terms. Provider identity, policy, retention, region, and availability can vary by route.
Do not submit data that your company has prohibited or that is not needed for the requested task. Human review and approval may be required before an agent performs an external or consequential action.
5. Service providers and disclosure
We use service providers to host and operate Outclank, including Vercel for web and hosted services, Supabase for authentication and the relational data plane, Google for optional sign-in, Resend for transactional email, and approved managed AI providers for enabled model capabilities. They process data only for the relevant service and under their own contractual and legal obligations.
We may also disclose data when required by law, to protect people or the service, during a corporate transaction subject to appropriate safeguards, or when the controller or data subject authorizes the disclosure.
6. International transfers
Service providers may process data outside your country. Where data protection law requires it, we rely on an adequacy decision, standard contractual clauses, or another recognized transfer mechanism. Company-specific residency and provider commitments are governed by the applicable service agreement and configuration.
7. Retention and deletion
Workspace data is retained for the term selected by the company and as needed to provide the service. Security, billing, audit, backup, and legal records may be retained for longer where necessary. We delete or anonymize personal data when it is no longer needed, subject to backup cycles, legal requirements, dispute preservation, and the company's instructions.
8. Security
We use technical and organizational controls appropriate to the service, including authenticated access, company-scoped authorization, least-privilege agent grants, transport encryption, protected provider credentials, audit records, and operational monitoring. No online service can guarantee absolute security. Report suspected unauthorized access promptly.
9. Cookies and local storage
Outclank uses essential browser storage and similar technologies for sign-in, company selection, security, and product preferences. We do not use this business workspace to build third-party advertising profiles.
10. Your choices and rights
Depending on applicable law, you may request access, correction, deletion, restriction, objection, or portability, and may withdraw consent where consent is the basis for processing. For company workspace data, contact your company administrator first because the company normally controls that data. You may also contact us, and you may complain to your local data protection authority.
11. Children
Outclank is a business service and is not directed to children under 16. We do not knowingly invite children to create Outclank business accounts.
12. Changes and contact
We may update this policy as the service or law changes. We will post the current version here and update the effective date. Questions, privacy requests, and security reports can be sent to info@humanodoro.com.