Legal
Privacy policy
How we collect, use, and protect the information you share with us.
Pending final legal review. This policy is complete and accurate to the best of our knowledge, and has not yet been reviewed by legal counsel. Final wording lands before launch. If anything here is unclear, write to contact@outputease.com.
Who we are
OutputEase Inc. is based in Ottawa, Ontario, Canada. We are the controller of the personal data described here. We handle personal data in line with Canada’s PIPEDA, and we are set up to meet the GDPR in the EU and UK and the CCPA in California. For any privacy question or request, email contact@outputease.com.
Information we collect
We collect only what we need, and we never buy, sell, or rent your information:
- Lead and contact form data. The name, email, company, and message you send through our contact form.
- Booking survey data. The answers you give when you book a call: the workflows and pains you want to fix, the tools and systems you use, your team size and timeline, who will attend, and any other context you share so we can prepare.
- Account data. For signed-in clients, your profile, contact email, and the engagement details tied to your account.
- Analytics data. With your consent, usage and performance data about how the site is used, collected through Vercel Analytics and Sentry.
- Error and security data. Technical logs we use to keep the site running and secure.
- Identity memory.If you choose, your name, email, and company are saved in your browser’s local storage after you successfully send a form, so you do not have to retype them next time. This stays on your device. We never receive it unless you submit a form, and you can clear it any time by clearing your site data.
How we use your data, and our legal bases
| Data | Purpose | Legal basis |
|---|---|---|
| Lead, contact, and booking submissions | Replying to your message, preparing for and running your call, and following up about our services. | Your consent, and our legitimate interest in responding to you. |
| Client account and engagement data | Operating the client portal and delivering your engagement. | Performance of our contract with you. |
| Cookie and analytics data | Understanding which pages are useful and how the site performs, through Vercel Analytics and Sentry performance tracing. | Your consent (you opt in through the cookie banner). |
| Error and security logs | Keeping the site secure, reliable, and free of abuse. | Our legitimate interest in operating a secure service. Sentry session replay runs only with your consent. |
| Records we are required to keep | Meeting tax, accounting, and other legal requirements. | Compliance with a legal obligation. |
Service providers we work with
We use a small set of trusted providers to run our business. Each processes data only on our instructions, under a data processing agreement. We sign NDAs on request, and client project data is only accessible to the people working on your engagement.
| Provider | What they do | Data involved | Processing region |
|---|---|---|---|
| Notion Labs, Inc. | CRM, marketing content, and engagement and project state. | Lead, contact, and booking details, engagement metadata. | United States |
| Google LLC (Workspace and Drive) | Document and deliverable file storage. | Files we share with you, document metadata. | United States |
| Supabase, Inc. | Authentication and application state. | Account identity, cookie-consent records, audit log. | Canada |
| Functional Software, Inc. (Sentry) | Error monitoring and performance tracing. | Technical error data, optional session replay. | United States |
| Resend, Inc. | Transactional email delivery. | Recipient email address, message content. | United States |
| Vercel Inc. | Website hosting, analytics, and performance monitoring. | Site request data, optional usage analytics. | United States |
| Upstash, Inc. | Caching and rate limiting. | Transient request identifiers. | United States |
Our application database is hosted in Canada for data residency. The remaining providers process data in the United States, as shown above. When we transfer personal data outside Canada or the EEA, we rely on the providers’ data processing agreements and standard contractual clauses to keep your data protected.
How long we keep your data
| Data | Retention |
|---|---|
| Lead, contact, and booking records (in our CRM) | 7 years |
| Client account and engagement data | For as long as your engagement is active, plus 3 years after it ends. |
| Error logs | 90 days |
| Access logs | 30 days |
| Identity memory (saved on your device) | Until you clear it. We never receive it unless you submit a form. |
Your rights
Depending on where you live, you have some or all of the following rights over your personal data:
- Access. Ask for a copy of the personal data we hold about you.
- Rectification. Ask us to correct data that is wrong or out of date.
- Erasure. Ask us to delete your personal data.
- Portability. Receive your data in a portable, machine-readable format.
- Restriction. Ask us to limit how we use your data.
- Objection. Object to processing based on our legitimate interests.
To exercise any of these rights, email contact@outputease.com. Signed-in clients can also export their account data and request deletion directly from the account settings page. We reply within one business day, and within the timeframes set by applicable law.
Cookies and tracking
Essential cookies are always on, because the site cannot work without them. That includes your session, security cookies, and the record of your cookie choice itself. Analytics and error-monitoring cookies are optional, and they only load if you allow them. You can change your choice any time: .
Changes to this policy
We may update this policy as our services or the law change. When we do, we will revise the date below. If a change is significant, we will give you a clearer heads-up.
Questions
Questions about this policy or how we handle your data? Email contact@outputease.com or reach us through our contact page. We read every message.