Legal

Privacy Policy

Last updated: June 1, 2026

Outcheck is operated by SR Labs s.r.o. ("we", "us", "our"). This Privacy Policy explains how we collect, use, and protect information about you when you use Outcheck ("the Service"). By using Outcheck, you agree to the practices described below.

1. Who We Are

The Service is operated by:

SR Labs s.r.o.
Korunní 2569/108
101 00 Prague, Czechia
Company ID (IČO): 24426008

We are the data controller responsible for your personal data under applicable law, including the EU General Data Protection Regulation (GDPR).

2. What We Collect

We collect the following categories of information:

2.1 Account Data

When you register or sign in, we collect your name, email address, and password (stored as a bcrypt hash). If you sign in via a third-party provider (e.g., Google), we receive the profile data that provider shares with us.

2.2 Files and Content

We store files you upload for review (videos, images, PDFs, and other supported formats), comments and annotations you or your clients leave, and approval decisions with timestamps.

2.3 Usage Data

We automatically collect log data such as IP addresses, browser type, pages visited, and actions taken within the Service. This data is used to operate, improve, and secure the Service.

2.4 Payment Data

Payments are processed by LemonSqueezy, LLC. We do not store your full card number or payment credentials. We receive a transaction ID and subscription status from the payment processor. LemonSqueezy's privacy policy governs how they handle your payment data.

2.5 Cookies and Tracking

We use strictly necessary cookies to maintain your session. We may also use analytics cookies to understand how the Service is used. You can control non-essential cookies through your browser settings or our cookie banner.

3. How We Use Your Data

We use your personal data to:

  • Provide, operate, and maintain the Service
  • Process payments and manage your subscription
  • Send transactional emails (account verification, password reset, approval notifications)
  • Respond to your support requests
  • Detect and prevent fraud, abuse, and security incidents
  • Comply with legal obligations
  • Improve and develop the Service (using aggregated and anonymized data)

We do not sell your personal data. We do not use your files or content to train machine-learning models.

4. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA), our legal bases for processing are:

  • Contract performance — to deliver the Service you signed up for
  • Legitimate interests — for security, fraud prevention, and product improvement
  • Legal obligation — to comply with applicable law
  • Consent — for non-essential cookies and marketing communications

5. Data Sharing

We share your data only with:

  • LemonSqueezy — payment processing
  • Cloud infrastructure providers — hosting and storage (data stored within the EU/EEA where possible)
  • Email delivery providers — transactional email delivery
  • Analytics providers — service usage analytics (anonymized where possible)

We require all third-party processors to maintain appropriate security standards and to process data only on our instructions.

6. International Transfers

Some of our service providers are based outside the EEA. Where personal data is transferred outside the EEA, we ensure adequate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.

7. Data Retention

We retain your account data for as long as your account is active. Files and content are retained for as long as your subscription is active and for a reasonable period after account closure to allow for data recovery. Usage logs are retained for up to 12 months. You may request deletion of your data at any time (see Your Rights below).

8. Your Rights

If you are located in the EEA or the UK, you have the right to:

  • Access the personal data we hold about you
  • Correct inaccurate or incomplete data
  • Delete your data ("right to be forgotten"), subject to legal retention requirements
  • Restrict or object to certain processing activities
  • Data portability — receive your data in a structured, machine-readable format
  • Withdraw consent at any time where processing is based on consent
  • Lodge a complaint with your local supervisory authority (e.g., the Czech Data Protection Authority, ÚOOÚ)

To exercise any of these rights, contact us at the address below.

9. Security

We implement industry-standard technical and organisational measures to protect your data, including encryption in transit (TLS) and at rest, access controls, and regular security reviews. No method of transmission over the internet is 100% secure; we cannot guarantee absolute security.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email or by displaying a prominent notice within the Service. Your continued use of the Service after any changes constitutes your acceptance of the updated policy.

11. Contact

For privacy-related questions or to exercise your rights, contact us at:

SR Labs s.r.o.
Korunní 2569/108
101 00 Prague, Czechia
Email: support@outcheck.io