OUTSPOKEN / Information
Privacy
A clear view of the information we use to talk, collaborate and deliver work.
Project enquiries
When you start a project, we collect the name, email, selected service and project details you provide, plus optional phone, company and budget information. We use these details to assess and respond to your enquiry and manage the resulting business conversation.
Accounts and collaboration
Our private workspaces hold account names, email addresses, roles and client memberships, along with project and deliverable information, uploaded materials, version history and review decisions. Access is limited according to account permissions and the client relationship. Passwords are stored as hashes, not readable passwords.
Session cookies and security
HQ and the Client Portal use necessary, HTTP-only session cookies to keep authorized users signed in. Signing out revokes the session. We use request rate limits, file safety checks and limited operational error information to help protect accounts and uploads. Network services necessarily process connection information such as IP addresses.
Files and service providers
Uploaded images are processed through Cloudinary with authenticated storage. Other supported files use private server storage. The application checks permissions before previews or downloads and scans new uploads for threats. Infrastructure, database and transactional email providers process information needed to operate these services; private materials are not part of the public website.
Transactional email
We use account and operational contact details for invitations, password recovery, review updates and enquiry notifications. These are service messages, not a marketing mailing-list subscription. Delivery depends on the configured email service.
Website measurement
Optional public-site measurement records a small set of aggregate events, such as opening the homepage or receiving a project brief. When enabled, our integration sends only an allowed event name and a general page path. It does not send form contents, names, email addresses, client identifiers, query strings or invitation links, and does not use analytics cookies, browser storage or fingerprinting. There is no analytics integration in HQ or the Client Portal. Measurement is off unless configured.
Retention and your requests
Enquiries, relationship records, project materials and review history are retained for business and account operations. There is currently no automatic deletion schedule for those records. Session and recovery links expire, but expiry is not the same as deleting every related record. Contact us to ask about your information, correction, access or deletion; we will review the request and any applicable obligations before taking action.
Contact us
Questions about this notice or your information? Write to contact@out-spoken.net.