This Privacy Policy describes how Nitro Outreach ("Nitro Outreach," "we," "us," or "our") collects, uses, discloses, and protects information in connection with our website, applications, and services (collectively, the "Service"). It also explains the rights and choices you have regarding your information. Please read it carefully. If you do not agree with this policy, please do not access or use the Service.
Nitro Outreach provides an all-in-one marketing workspace where users can build websites, generate content, schedule social media posts, plan advertising campaigns, and view related analytics. This policy applies to information we process when you visit our website, create an account, or otherwise use the Service. It does not apply to third-party products or websites that we do not control, even if they link to or from the Service.
For the purposes of applicable data protection laws (including the EU/UK GDPR), Nitro Outreach is the "controller" of personal information processed about account holders and visitors, except where we act as a "processor" on behalf of a customer with respect to content and end-user data that customer submits to their workspace.
We collect information directly from you when you create an account, complete onboarding, use features, connect accounts, subscribe, or contact us; automatically through your use of the Service and standard web technologies; and from third-party providers who help us deliver the Service (such as our payment and social-publishing partners).
We use a small number of cookies and local browser storage that are strictly necessary to operate the Service — primarily a session cookie to keep you signed in and browser storage to remember preferences (such as your selected billing cycle). We do not use third-party advertising cookies and do not track you across unaffiliated websites for advertising. Because the cookies we use are essential to providing the Service you request, they operate on that basis; you can control cookies through your browser settings, though disabling essential cookies may prevent the Service from functioning.
Where the GDPR applies, we process personal information under one or more of the following legal bases:
Certain features use artificial intelligence to generate content, websites, campaign plans, and assistant responses. When you use these features, the inputs you provide (such as your topic, business profile, and instructions) are sent to our AI provider to produce a result, which is returned to your workspace. We instruct our AI provider to process this data solely to deliver the requested output. AI-generated output may be inaccurate or incomplete; you are responsible for reviewing it before use. We do not use your private workspace content to train third-party foundation models where such use would require your consent.
We do not sell your personal information. We share information only as described here:
We rely on the following categories of providers to operate the Service. We share only the minimum data needed for each purpose:
| Provider | Purpose |
|---|---|
| Vercel | Application hosting and data storage |
| Anthropic | AI content and assistant generation |
| Stripe | Subscription billing and payment processing |
| Meta Platforms (Instagram/Facebook) | Publishing to social accounts you connect |
| Email delivery provider | Transactional email (verification, password reset, receipts) |
Each provider processes information under its own privacy terms and our agreements with it. This list may change as the Service evolves.
If you choose to connect a social account such as Instagram, we request only the permissions necessary to (a) identify the connected account and (b) publish the content you schedule. We store the access token securely and use it solely for these purposes. We do not read your private messages, and we do not sell or use this data for advertising. You may disconnect at any time, which revokes our ability to publish and deletes the stored token. Your use of connected platforms is also governed by those platforms' own terms and policies.
Paid subscriptions are processed by our third-party payment processor (Stripe). Your card details are collected and processed directly by the processor under its own security standards (PCI-DSS); we do not receive or store your full card number. We receive limited information such as your plan, subscription status, billing interval, and processor-issued identifiers, which we use to manage your subscription.
We retain personal information for as long as your account is active or as needed to provide the Service. You can delete your account at any time from Settings, which removes your workspace data. After deletion, we may retain limited information where necessary to comply with legal, tax, accounting, or security obligations, to resolve disputes, or to enforce our agreements, after which it is deleted or de-identified. Backups are cycled out in the ordinary course.
We implement reasonable technical and organizational measures designed to protect personal information, including password hashing, encryption of data in transit, access controls, and least-privilege practices. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security. You are responsible for keeping your account credentials confidential and for activity that occurs under your account. If we become aware of a security incident affecting your personal information, we will notify you and any regulators as required by law.
We operate from the United States and use providers that may store and process information in the United States and other countries. If you access the Service from outside the United States, you understand that your information may be transferred to, stored, and processed in the United States and other jurisdictions that may have different data-protection laws than your own. Where required, we rely on appropriate safeguards (such as Standard Contractual Clauses) for cross-border transfers of personal information.
Depending on where you live, you may have some or all of the following rights regarding your personal information:
To exercise these rights, contact us using the details in Section 22. We will respond within the time required by applicable law and may need to verify your identity first. You will not be discriminated against for exercising your rights.
If you are a resident of California or another U.S. state with a comprehensive privacy law, you may have rights to know/access, correct, delete, and obtain a portable copy of your personal information, and to opt out of "sale" or "sharing" of personal information and certain targeted advertising. We do not sell your personal information, and we do not share it for cross-context behavioral advertising. The categories of personal information we collect and the purposes for which we use them are described in Sections 2 and 5, and the categories of recipients in Sections 8–9. You may exercise your rights, including through an authorized agent, by contacting us as described in Section 22.
Nitro Outreach does not sell personal information and does not share personal information for cross-context behavioral advertising, as those terms are defined under applicable U.S. state laws. Because we do not engage in these activities, no opt-out is necessary; however, you may still contact us with any questions.
The Service is intended for businesses and for users aged 18 and over. It is not directed to children, and we do not knowingly collect personal information from children under 16. If you believe a child has provided us personal information, please contact us and we will take appropriate steps to delete it.
The Service may contain links to third-party websites or integrate third-party services. We are not responsible for the privacy practices or content of those third parties. We encourage you to review their privacy policies before providing information to them.
We do not use your personal information to make decisions that produce legal or similarly significant effects about you solely through automated means without human involvement.
We may update this Privacy Policy from time to time to reflect changes to the Service, our practices, or legal requirements. When we make material changes, we will update the "Last updated" date above and, where appropriate, provide additional notice. Your continued use of the Service after an update becomes effective constitutes acceptance of the revised policy.
If you have questions, requests, or complaints about this policy or your personal information, contact us at nitrooutreach@outlook.com. We will work in good faith to resolve your concern. If you are in the EEA or UK and believe we have not addressed your concern, you also have the right to lodge a complaint with your local data-protection supervisory authority.
This Privacy Policy reflects Nitro Outreach's current data practices and is provided for general informational purposes. It is not legal advice. Laws vary by jurisdiction; for advice specific to your situation, consult a qualified attorney.