Privacy Policy
Who we are
Outclass (outclass.design), based in India 🇮🇳, decides how your personal data is used: the "data fiduciary" under India's Digital Personal Data Protection Act 2023, and the "controller" under the GDPR. Contact: support@outclass.design. Grievance Officer: support@outclass.design, with "Grievance" in the subject.
What we collect
- Sign-in details: from GitHub, your username, name, avatar and verified email addresses; from Google, your name, picture, account ID and verified email.
- Your content: prompts, uploaded images and video frames, the designs and projects you create, and anything you put in share links.
- Usage records: AI operations, credits used, model and cost of each request, and timestamps.
- Billing records from Dodo Payments: customer and subscription IDs, plan, amounts, tax details you enter at checkout and payment status. We never see or store your card details.
- Fraud-prevention signals: a random device ID, a browser fingerprint hash (made in your browser by the open-source FingerprintJS library) and your IP address. We store these only as salted hashes, to stop people creating many accounts for free credits.
- Support and privacy requests you send us.
- Security logs: IP addresses and timestamps for sign-in, payments and admin actions.
Why we use it, and on what basis
- To run Outclass: sign you in, save your projects, generate designs (to perform our contract with you).
- To manage your plan, credits and payments (contract; legal obligation for tax records).
- To prevent abuse and keep the service secure (our legitimate interests; under the DPDP Act, preventing fraud).
- To answer your support and privacy requests (contract; legal obligation).
Where we rely on your consent, you give it when you sign in, and you can withdraw it at any time by deleting your account. Withdrawing doesn't affect processing that already happened.
We don't sell your data, we don't use it for advertising, and we don't use your content to train AI models.
Who we share it with
Only what each provider needs to run the service; the full list is on the Subprocessors:
- Anthropic: your prompts, images and the screens being worked on, to generate designs.
- Cloudflare: hosting and our database, where your projects are stored.
- GitHub and Google: sign-in.
- Dodo Payments: checkout, payments, tax and invoices, as merchant of record.
- Unsplash and Pexels: short search terms for stock photos (for example "mountain lake"), never your account details.
- Services your browser loads fonts, icons, scripts and exchange rates from (Google Fonts, jsDelivr, Iconify, ImageKit, open.er-api.com, and the Tailwind CSS CDN when you copy a design that uses Tailwind to Figma): they receive your IP address and browser details, like any website request.
- Authorities, when the law requires it.
International transfers
Our providers process data outside India, including in the United States and the EU. Where the GDPR or UK GDPR applies, transfers rely on the providers' Standard Contractual Clauses or an adequacy decision. We don't transfer data to any country the Indian government restricts under the DPDP Act.
Stored in your browser
The workspace keeps a copy of your projects and preferences in your browser's local storage so it loads quickly, plus the fraud-prevention device ID described above. The Cookie Policy explains each item. Clearing your browser data removes them; your projects stay on our servers.
How long we keep it
- Projects and screens: until you delete them or your account.
- Temporary export files: up to 7 days.
- Previews created through MCP connectors: 7 days.
- Payment, invoice and credit records: as long as Indian tax and accounting law requires, currently up to 8 years.
- Fraud-prevention hashes: kept after account deletion so a deleted account can't claim the free trial again. Write to support@outclass.design to ask for their removal.
- Security and admin audit logs: kept as a permanent security record; they hold account IDs, not your content.
- Support messages: until your account is deleted; their text is then erased.
Your rights
Wherever you live, you can:
- Download your data: Billing & Usage → Download my data (a JSON file of your account, plan, credits, payments, projects list, sign-in identities and fraud-prevention hashes; designs themselves export from the workspace as HTML, PNG or Figma).
- Correct your data: Billing & Usage → Ask for a correction.
- Delete your account: Billing & Usage → Delete my account. We erase your projects, screens, share links, sign-in links, team memberships and support message text, and anonymise your account; payment, invoice and credit records stay as tax law requires.
- Withdraw consent, object to or restrict processing, or ask about anything else at support@outclass.design.
- Nominate someone to exercise your rights if you die or become unable to (DPDP Act).
We reply within 30 days. If you're not satisfied, the Contact and Grievance Redressal explains the grievance process and how to complain to the Data Protection Board of India or your local data protection authority.
Children
Outclass isn't meant for anyone under 18, and we don't knowingly collect children's data. If you think a child has an account, write to support@outclass.design and we'll delete it.
Security
The Security and Data Protection describes how we protect your data. If a breach affects your personal data, we'll tell you and the authorities as the law requires.
Changes
When we change this policy, we'll tell you in Billing & Usage and say what changed. Earlier versions stay listed on this page.