Privacy Policy
OutFront Data, operated by Makers' House LLC · Effective June 15, 2026 · Contact: seanaustin1@gmail.com
This Privacy Policy explains what information we collect when you use OutFront Data (the “Service”), how we use and share it, and the choices and rights you have. By using the Service, you agree to this Policy.
1. Who This Applies To
This Policy applies to users of the OutFront Data application — primarily small-business operators and their authorized team members (“you”) who use the Service to view financial insights about their business.
2. Information We Collect
Information you provide: account information such as your name, email address, and the business details you enter when you sign up or onboard.
Financial account data (via Plaid): when you connect a bank or card account, we use Plaid Inc. (“Plaid”) to securely access read-only information about that account, including transactions, balances, and account metadata. We do not receive or store your bank login credentials — those are handled by Plaid — and we do not initiate payments or move money.
Documents you upload: if you upload bank or card statements, we process them (including via an AI service) to extract transaction data for categorization.
Usage and technical data: standard log and device information (e.g., access times, IP address, browser type) generated when you use the Service.
3. How We Use Your Information
- Provide and operate the Service — connect accounts, categorize transactions, and generate cash-flow, cost-structure, and profit-allocation insights;
- Authenticate you and secure your account;
- Communicate with you about the Service;
- Maintain, troubleshoot, and improve the Service; and
- Comply with legal obligations.
We do not sell your personal or financial information.
4. Plaid
We use Plaid to connect your financial accounts. By using the Service to link an account, you also agree to Plaid's end-user privacy policy, available at plaid.com/legal. Plaid's handling of your information is governed by Plaid's own privacy policy.
5. How We Share Information
We share information only as needed to run the Service, with service providers (subprocessors) that process data on our behalf under appropriate confidentiality and security obligations:
| Provider | Purpose |
|---|---|
| Plaid | Bank/transaction data aggregation (read-only) |
| Supabase | Application database hosting |
| Clerk | Authentication and identity |
| Vercel | Application hosting |
| Inngest | Background job processing |
| Resend | Transactional email |
| Anthropic | AI extraction of statements you upload |
We may also disclose information if required by law, to protect our rights or users' safety, or in connection with a business transfer (e.g., a merger or acquisition). We do not sell your data or share it for third-party advertising.
6. Data Retention and Deletion
We retain your information only as long as needed to provide the Service or as required by law. You may disconnect a linked account at any time, after which we stop syncing new data and remove the associated access tokens. You may request deletion of your account and associated data by contacting us (see §12).
7. Security
We protect your information using industry-standard safeguards, including encryption in transit (TLS) and at rest (financial access tokens are encrypted with AES-256-GCM), role-based access controls, multi-factor authentication for privileged access, and tenant isolation. No method of transmission or storage is 100% secure, but we work to protect your information.
8. Your Rights and Choices
Depending on where you live, you may have rights to access, correct, delete, or obtain a copy of your personal information, and to withdraw consent (e.g., by disconnecting an account). Residents of certain U.S. states (e.g., California) and other jurisdictions (e.g., the EU/UK) may have additional rights. To exercise any right, contact us at the address in §12; we will respond as required by applicable law and will not discriminate against you for exercising your rights.
9. Cookies and Tracking
We use cookies and similar technologies only as necessary to authenticate you, keep you signed in, and operate the Service. We do not use them for third-party advertising.
10. Children's Privacy
The Service is intended for business use by adults and is not directed to children. We do not knowingly collect personal information from anyone under 18.
11. Changes to This Policy
We may update this Policy from time to time. We will post the updated version with a new effective date and, where appropriate, notify you.
12. Contact Us
Questions or requests regarding this Policy or your information:
Makers' House LLC — seanaustin1@gmail.com
Version 1.0 · June 15, 2026