Your account
Outfruit uses your email address and account identifier to sign you in, protect your workspace and associate your content and plan with your account. You may provide your name when signing up.
If you choose Google, we request only your sign-in identity, email address and basic profile, which may include your name and picture. We do not request access to Gmail, Drive, your contacts or your calendar. Your Google password is not shared with Outfruit.
Google authenticates your identity; Supabase then manages your Outfruit account and session. Signing in with Google does not automatically grant an administrator role or an active subscription. You can review and remove the authorisation in your Google account connections.
Your enquiries and content
The contact form sends your contact details, website and enquiry to the Outfruit team so we can reply and prepare an offer. Information provided in the portal helps organise your distribution: content, instructions, markets, publications and results.
Account data and media are hosted with Supabase. Cloudflare provides website hosting, abuse protection, transactional email delivery, media validation and private encrypted backups. The contact mailbox currently uses OVH. Information needed for a publication is shared with TikTok within the scope agreed with you.
Sessions, security and website measurement
The portal stores your session information in your browser’s local storage. The admin uses a separate session on a different origin. Cloudflare and Turnstile protections process technical connection information, including for abuse prevention.
The site’s built-in measurement records page categories, clicks and campaign categories. This measurement dataset contains no email addresses, form content, IP addresses or persistent visitor identifiers, and uses no measurement cookies. “Do Not Track” and “Global Privacy Control” signals disable this measurement. This does not remove the hosting provider’s technical security processing.
Optional recordings on public pages
If you accept browsing analytics, Microsoft Clarity uses cookies to measure clicks, scrolling and browsing sessions on the public website. Microsoft receives technical navigation information, including IP and device information. We do not send your account identifier or your form contents to Clarity. All public forms are masked; the client portal and admin never load the recorder. Advertising consent is not granted.
Clarity is not loaded before your choice, after a refusal, or when your browser signals Do Not Track or Global Privacy Control. You can change your choice using “Privacy preferences” at the bottom of public pages. Withdrawing consent reloads the page without Clarity and removes its site cookies. We keep your yes/no preference in a separate cookie for 180 days. See Microsoft’s privacy statement and Clarity’s data retention documentation.
The portal also sends anonymous stage counts (registration attempt, authentication, checkout redirect or return) to our Cloudflare dataset. These counts never contain a password, email, account identifier or Auth URL. A browser return is not a payment: paid subscriptions are counted separately on the server only after Stripe confirmation, with access restricted to administrators with MFA. Aggregate stage counts cannot reconstruct an individual visitor’s complete journey.
Newsletter
If you choose to subscribe, Brevo processes your email address, your chosen language, confirmation of your consent and the technical information needed to operate the form, protect it against abuse and deliver emails. Sign-up is separate from creating an Outfruit account or making an enquiry. Your address is added to the newsletter list only after you click the confirmation email link.
The newsletter contains cases, distribution methods and Outfruit offers, at most once a week. Each newsletter includes an unsubscribe link. You can also request removal at [email protected]. Website click counts do not tell us whether you confirmed your subscription; subscriptions are managed separately in Brevo.
Retention and requests
The service is still being prepared. The controller’s legal identity, specific retention periods and information applicable to international transfers must be completed before commercial launch. Cancelling a subscription or archiving content in the portal does not automatically delete data or backups.
To request access, correction, export or deletion of your data, email [email protected]. We will verify your identity before handling an account-related request. You can also contact the relevant data protection authority, including the French CNIL.