Back to home

Privacy Policy

Last updated: September 2026

1. Who we are

Outerview is a service operated by My Dreams Are These Oy (business ID 3622718-6), a company registered in Finland. We are the data controller for the personal data described in this policy, and we process it under the EU General Data Protection Regulation (GDPR) and Finnish law.

Contact for anything in this policy: info@outerview.app

2. What this policy covers

This policy covers our website at outerview.app and the Outerview application at app.outerview.app.

It applies to three kinds of people:

  • Personal account holders — you sign up, run interviews, and generate your own content.
  • Team members — you belong to a team account, and some of what you record is shared with the colleagues who manage it. Section 8 is written for you.
  • Invited guests — you were sent a link to answer questions for somebody else's team, and you never created an account. Section 9 is written for you.

3. The data we collect

Account and identity

Your email address, first and last name, and a hashed password. If you sign in with Google, we store your Google account identifier and the profile picture Google gives us instead of a password. You may upload your own profile picture, which we store in place of that one.

Your professional profile

What you tell us during onboarding and on your profile page: your full name, LinkedIn URL, role, industry, the topics you write about, what you are known for, samples of your own writing, your preferred post length, and your coaching preferences.

Background research about you

When you sign up, and if you give us your name, company or LinkedIn URL, we search the public web for what has already been published about you and summarise it into a short briefing that we store on your profile and give to the interviewer so it can ask better questions. This is described in detail in section 6. It runs from information you type into the sign-up form, and it can run before your account exists.

Interviews

Interviews are conducted either by voice or as a written chat. We store the topic, the full transcript, each individual speaking turn, a summary, the insights our AI extracts from it, its duration, and any files you attach. Voice audio is streamed to our speech provider in real time and we do not keep a copy of the audio.

Video recordings

If you switch on video recording before an interview, we capture your camera and the audio of the call, store the resulting file on our servers, and — when you open the clip editor — send it to our video service so it can cut clips. Video is never recorded unless you turn it on for that interview. See section 10.

Content you and our AI produce

Posts, articles, drafts, ideas, notes, strategy documents and their full edit history, including a word-level record of the changes made to each draft.

Team data

If you use a team account: the team name, its website address and our summary of it, the context you write about the company, its member list and each member's role, invitations sent by email address, the shared briefs your team creates, and who has answered them.

Connected accounts

If you connect LinkedIn: your LinkedIn member identifier, the name and email address LinkedIn returns, the permissions you granted, and access tokens which we encrypt before storing. If your team connects Slack: the workspace identifier and name, an encrypted bot token, and the Slack user identifier we matched to your account. See section 11.

Publishing and post performance

If you publish through Outerview, we store the LinkedIn identifier of the published post and the statistics LinkedIn reports back for it — impressions, reach, reactions, comments and reshares.

Payment data

Your subscription plan, its status and billing period, the number of seats on a team, and the customer and subscription identifiers held by our payment processor. For invoiced team deals we also store the billing country and VAT number. We never see or store your card number — card details go directly to Stripe.

Usage and technical data

A record of each interview, generation and refinement you use against your plan's allowance; the ratings you give when we ask how something went, and any comment you add; the notifications we send you; an audit record of security-relevant events such as sign-ins and administrative actions; and, in our server logs, your IP address, browser and device information.

4. Where your data comes from

  • From you — what you type, say, record and upload.
  • From your interviews — transcripts, and what our AI derives from them.
  • From the public web — the background research described in sections 3 and 6.
  • From services you connect — LinkedIn and Slack, if you or your team connect them.
  • From your colleagues — if somebody adds you to a team or invites you to answer a brief, they give us your email address before you have done anything.

5. Why we process your data, and our legal basis

  • To run the service — conducting interviews, transcribing them, generating and refining content, publishing what you ask us to publish, and sharing a team's shared content with that team. Legal basis: performance of our contract with you.
  • To manage your account and subscription — authentication, plan limits, billing, invoices and VAT. Legal basis: performance of our contract, and legal obligation for accounting and tax records.
  • To research your public background so the interviewer can ask informed questions instead of generic ones. Legal basis: legitimate interest, assessed against your rights in a Legitimate Interest Assessment. You can ask us to delete the briefing at any time.
  • To send you service messages — invitations, password resets, notifications about content waiting for you. Legal basis: performance of our contract.
  • To keep the service secure — audit logging, abuse and fraud prevention, rate limiting. Legal basis: legitimate interest in a secure service.
  • To improve the product — understanding which features are used, and reading the ratings and comments you give us. Legal basis: legitimate interest; analytics that use cookies run only with your consent (section 16).
  • To meet legal obligations — retaining accounting records, responding to lawful requests. Legal basis: legal obligation.

Where we rely on legitimate interest, you have the right to object — see section 15.

6. AI processing

Outerview is built on AI models we do not operate ourselves. This is what leaves our servers, and where it goes:

  • Your voice is streamed to OpenAI during a voice interview so the interviewer can hear you and reply. OpenAI transcribes it and returns the interviewer's speech.
  • Your transcripts, profile, writing samples and drafts are sent to Anthropic (Claude) to extract insights, write posts and articles, refine drafts, and conduct written interviews.
  • Your name, company and LinkedIn URL are sent to Tavily, a web search provider, during the background research described above. What it finds is then summarised by Anthropic.
  • Text prompts are sent to OpenAI when you generate an image for a post.
  • Your video recording is sent to our video service, which analyses the footage and its transcript to cut clips.
  • Topic and brief text is sent to ContentEngine, our own content research service, to suggest subjects and interview questions. It receives an opaque identifier rather than your name or email address.

Your content is not used to train anybody's models. Our agreements with OpenAI and Anthropic are commercial API agreements under which inputs and outputs are not used for model training. We do not sell your data, and we do not use your interviews or content to train models of our own.

7. Service providers and sub-processors

We share personal data with the following providers, each only to the extent needed for the purpose named. We have data processing agreements in place with them as GDPR requires.

  • Railway — hosting and databases (European Union).
  • OpenAI — voice interviews, transcription, image generation (United States).
  • Anthropic — content generation, written interviews, insight extraction (United States).
  • Tavily — public web search for background research (United States).
  • Stripe — payments, subscriptions, invoices and VAT (United States and Ireland).
  • Mailjet (Sinch) — transactional email such as invitations and password resets (European Union).
  • Slack — only if your team connects a Slack workspace (United States).
  • LinkedIn — only if you connect your LinkedIn account (United States and Ireland).
  • Google — sign-in with Google, and Google Analytics if you consent to analytics cookies (United States and Ireland).
  • PostHog — product analytics, on their EU infrastructure, only with your consent (European Union).
  • ContentEngine and VideoSplitter — our own content research and video services, operated by My Dreams Are These Oy on the same EU infrastructure as Outerview.

We also use a self-hosted, cookieless analytics tracker on our own infrastructure, which does not identify you (section 16).

We do not sell personal data, and we do not share it for advertising.

8. Team accounts: what your colleagues can see

If you belong to a team, some of what you record is deliberately visible to the people who manage that team. This is the point of a team account, and it is worth being precise about where the line falls.

Managers and admins of your team can see:

  • Your name and email address on the team roster, and your role.
  • Any interview you record against one of the team's shared briefs — including its full transcript and summary.
  • The articles and drafts produced from those interviews, which they may also edit. An article may quote you by name.
  • Whether you have answered a brief, and when.

They cannot see your personal interviews, your personal posts and drafts, your voice profile, your strategy notes, or anything else outside a shared brief. Those remain yours, and stay yours if you leave the team.

A post you write keeps you as its owner even when a colleague edits it, and publishing, scheduling and deleting it stay with you.

If your team has connected Slack, our assistant may post about the team's content in a shared channel and send you direct messages inviting you to answer a brief. To do that we look your email address up in your team's Slack workspace in order to find your Slack account, and the assistant reads messages in the channel it has been invited to so it can respond when addressed.

If your team is on an invoiced plan, the team's administrators can see how many seats are in use, but not the content of your personal work.

9. Guests invited to answer a brief

A team can invite someone from outside the company — a customer, an advisor, a partner — to answer questions by sending them a private link. If that is you:

  • You do not have an Outerview account, and you never set a password. The link itself is your credential, and it works only for the one brief it was issued for.
  • The team that invited you holds your email address, because somebody there typed it in.
  • The interview you give belongs to that team. Its transcript, and any article written from it, are visible to the team's managers, and you may be quoted by name.
  • You can interview by voice or in writing, whichever you prefer.
  • We are the processor of that interview on our own behalf as controller of the platform, but the team decides what to do with it. If you want your interview removed, contact the team who invited you, or write to us at info@outerview.app and we will act on it.

10. Voice, video and transcripts

Voice. During a voice interview your audio is streamed to OpenAI and transcribed as you speak. We store the resulting text, not the audio — no recording of your voice is kept by us after the call ends.

Video. Video recording is off by default and switched on by you, per interview, on the screen before the call starts. When it is on we capture your camera along with the audio of the call, store the file on our servers, and send it to our video service when you open the clip editor so it can produce clips. Only you and, for a team brief, your team's managers can reach it.

We do not delete video recordings automatically. A recording stays until you ask us to remove it or your account is deleted. If you want a recording gone sooner, write to info@outerview.app and we will delete it.

If you record other people — for example while recording a call — it is your responsibility to tell them and to have a lawful basis for doing so.

11. Connected accounts

LinkedIn. Connecting LinkedIn lets you publish and schedule posts from Outerview and see how they performed. We request only the permissions needed to identify you and post on your behalf. Access tokens are encrypted before we store them and are never sent to your browser. You can disconnect LinkedIn at any time from the app, which deletes the stored tokens.

Slack. A team administrator can connect a Slack workspace. We store an encrypted bot token and match team members to their Slack accounts by email address. The assistant posts in the channel it is invited to and can send direct messages to team members. Messages it reads in that channel are sent to Anthropic so it can reply. Disconnecting the workspace removes our access.

Google. If you sign in with Google we receive your email address, name and profile picture. We do not receive access to your Gmail, Drive or Calendar.

12. Support access to your account

We onboard teams by hand, and to support you our staff can sign into your account and see what you see. We are telling you this because most services do not.

This access is limited by design: it is recorded in an audit log under both the staff member's identity and yours, it expires automatically after one hour, and it cannot be used to change your password, alter your billing, or delete your team. It is used for support and onboarding, not for reading your content.

13. How long we keep data

  • Account, profile and voice profile: for as long as your account exists. Deleted within 30 days of account deletion.
  • Transcripts, posts and generated content: for as long as your account exists, unless you delete them earlier. Deleted within the same 30-day window.
  • Voice audio: not stored. Transcribed in real time and discarded.
  • Video recordings: kept until you ask us to delete them or your account is deleted. Not deleted automatically.
  • Team content: a shared brief and the interviews answering it belong to the team. Deleting a brief does not delete the interviews people recorded — those stay with the person who recorded them.
  • Payment and invoicing records: retained as Finnish accounting law requires, currently six years.
  • Audit and security logs: up to 12 months.
  • Server and technical logs: up to 90 days.
  • Session cookies: expire after 7 days, or when you log out.

To delete your account, write to info@outerview.app and we will erase it and everything above within 30 days, except records we are legally required to keep.

14. Where your data is stored, and transfers outside the EU

Outerview runs on infrastructure in the European Union, and that is where your account, transcripts, content and recordings are stored.

Several of the providers in section 7 — OpenAI, Anthropic, Tavily, Slack, LinkedIn, Google and Stripe — are established in the United States, so using the service means your data is transferred there. Those transfers are made under appropriate safeguards: Standard Contractual Clauses approved by the European Commission, and the EU-US Data Privacy Framework where the provider is certified under it. We have carried out transfer impact assessments where required.

15. Your rights

Under the GDPR you have the right to:

  • Access — get a copy of the personal data we hold about you.
  • Rectification — have inaccurate data corrected. Most of it you can edit yourself in the app.
  • Erasure — have your data deleted.
  • Portability — receive your data in a structured, machine-readable format.
  • Restriction — ask us to limit how we use your data while a question about it is resolved.
  • Object — object to processing we base on legitimate interest, including the background research described in sections 3 and 6.
  • Withdraw consent — where we rely on consent, such as analytics cookies, withdraw it at any time without affecting what was done before.

To exercise any of these, write to info@outerview.app. We will respond within 30 days. There is no charge unless a request is manifestly unfounded or excessive.

If you are unhappy with our response, you can complain to the Finnish Data Protection Ombudsman (Tietosuojavaltuutetun toimisto) at tietosuoja.fi, or to the supervisory authority in the EU country where you live.

16. Cookies and analytics

Essential cookies. One session cookie keeps you signed in. It is restricted to our own site, unreadable by scripts, sent only over HTTPS, and expires after 7 days. It is strictly necessary for the service to work and does not require consent.

Local storage. We store your cookie choice and a few interface preferences in your browser. This never leaves your device.

Analytics you consent to. Google Analytics and PostHog run only after you press Accept on our cookie banner. PostHog runs on EU infrastructure. Before you consent, neither loads at all, and pressing Decline keeps them off.

Cookieless analytics. We run a self-hosted tracker on our own infrastructure that counts page views without cookies and without identifying you.

Two things we deliberately do not do. We do not use advertising or cross-site tracking cookies. And we do not record your screen: session replay is switched off, because interview transcripts and unpublished drafts are visible throughout the app and a cookie banner is not consent to film them.

We also remove credentials from the addresses reported to analytics, so that a private invitation link is never sent to an analytics provider. Analytics reporting is suspended entirely while a staff member is signed into an account for support.

To change your choice, clear this site's data in your browser and the banner will ask again.

17. Automated decision-making

Our service uses AI throughout: to interview you, to decide what is interesting in what you said, to write drafts, and — for teams that enable it — to suggest a topic and which colleagues to ask about it.

None of this makes a decision with legal or similarly significant effects about you. Nothing is published on your behalf without you approving it, a suggested topic is approved by a person before anything happens, and you can edit or discard any draft. You remain in control of everything that leaves the app in your name.

18. Security

We protect your data with encrypted connections (TLS) everywhere, passwords stored only as strong one-way hashes, encryption at rest for the third-party access tokens you entrust to us, role-based access control between team members, session confinement for guest links, and audit logging of security-relevant events. Staff access to production accounts is limited, time-boxed and logged, as described in section 12.

No system is perfectly secure. If a breach affects your personal data and is likely to result in a risk to your rights, we will notify the Finnish supervisory authority within 72 hours and inform you where the law requires it.

19. Children

Outerview is a professional tool and is not directed at children. You must be at least 16 to use it, and we do not knowingly collect personal data from anyone younger. If you believe a child has given us data, write to info@outerview.app and we will delete it.

20. Changes to this policy

We update this policy as the product changes. The date at the top always reflects the current version. If a change materially affects how we handle your data, we will tell you by email or in the app before it takes effect.

21. Contact

For any question about this policy, your data, or to exercise any of the rights in section 15:

My Dreams Are These Oy
Business ID 3622718-6
Email: info@outerview.app
Finland, European Union