Frequently asked questions

🔒 Data & Security

1. What data does OutPrio access and store?

Locally: Full message bodies never leave your machine.

Remotely: Metadata only—sender, subject, timestamp, snippet (≤200 chars), read/unread status.

2. How long do you retain my email metadata?

We store metadata for up to 30 days to power historical look-ups; after that it’s purged automatically.

3. Where is my data hosted and processed?

Web/API: AWS (US East & Australia regions) & Supabase (PostgreSQL).

Billing: Stripe’s PCI-compliant infrastructure.

4. What encryption do you use (in transit & at rest)?

In transit: TLS 1.2+

At rest: AES-256 encryption on all stored records.

5. How do you protect against data breaches?

Regular security audits (quarterly).

SOC 2 Type II compliant processes.

Vulnerability disclosures handled via our Bug Bounty program on HackerOne.

6. Are you GDPR, CCPA, and other privacy-law compliant?

Yes. Our Privacy Policy documents your rights. You can request data export or deletion at any time.

7. Can I request a copy of my data or have it deleted?

Email privacy@outprio.com with “Data Request” or “Data Deletion” and we’ll fulfill within 30 days.

8. Do you use any third-party analytics or tracking?

We use Google Analytics (anonymized) to improve product usage. You can opt out in Account → Privacy.

9. How does OutPrio integrate with Stripe for billing?

No card data hits our servers—Stripe Elements securely collects and stores payment details. We only store your Stripe customer and subscription IDs.

10. Who has access to my data within your company?

Access is strictly on a need-to-know basis (Engineering & Support). All staff sign NDAs and undergo annual security training.

11. What happens to my data when I cancel?

Your metadata is purged 30 days after cancellation; all profile settings are wiped immediately.

12. Do you publish security audits or SOC reports?

Yes—enterprise customers can request our latest SOC 2 report under NDA.

13. How do you handle vulnerability disclosures?

Submit via our HackerOne page. We triage all reports promptly and award bounties for qualifying issues.

14. Is my payment info stored by OutPrio?

No—all card data is vaulted by Stripe under PCI Level 1 compliance. We only store non-sensitive subscription references.