Legal

Privacy Policy

Last updated: April 2026

This Privacy Policy explains how Standouta (“we”, “us”, “our”) collects, uses, and protects information you provide when using our website and services. By using our services, you agree to the practices described in this policy.

1. Information We Collect

Contact and account information: When you submit a discovery form or create an account, we collect your name, email address, phone number, company name, and website.
Discovery session data: Information you provide during your AI-powered discovery session, including your business goals, challenges, target audience, and project requirements.
Usage data: Information about how you interact with our platform, including pages visited, features used, and time spent.
Payment information: Payment transactions are processed by Polar, our payment provider. We do not store your full payment card details.
Communications: If you contact us via email or our contact form, we retain records of that correspondence.

2. How We Use Your Information

Service delivery: To provide our digital agency services, generate AI-powered strategic proposals, and manage your project engagements.
Account management: To maintain your client portal, process payments, and manage your active projects.
AI analysis: Your discovery session data is processed by Google Gemini to generate strategic insights and service recommendations. This processing is server-side only.
Communication: To respond to your inquiries and send important updates about your project or account.
Service improvement: To improve our platform, understand how clients use our services, and develop new features.

3. Data Sharing and Third Parties

Supabase: Our database and authentication provider. Your data is stored in their secure, GDPR-compliant infrastructure in the EU region.
Google Gemini: Your discovery session content is processed by Google's AI services to generate strategic recommendations. Google's privacy policy applies to this processing.
Polar: Our payment processor. Payment data is handled according to Polar's privacy policy and PCI DSS standards.
Sentry: Error monitoring service that may receive technical error information (stack traces, anonymous session data).
We do not sell your personal data to third parties. We do not use your data for advertising purposes.

4. Data Retention

Account and project data is retained for the duration of your engagement with Standouta and for a reasonable period thereafter for legal and business record-keeping purposes.
Discovery session data submitted without creating an account is retained for 90 days, after which it is anonymized.
You may request deletion of your personal data at any time by contacting us at hello@standouta.com.

5. Your Rights (GDPR and applicable laws)

Access: You have the right to request a copy of the personal data we hold about you.
Rectification: You may request that we correct inaccurate or incomplete data.
Erasure: You may request that we delete your personal data, subject to legal retention requirements.
Portability: You may request your data in a structured, machine-readable format.
Objection: You may object to certain processing activities.
To exercise any of these rights, contact us at hello@standouta.com. We will respond within 30 days.

6. Security

We implement appropriate technical and organizational measures to protect your personal data, including AES-256 encryption at rest, TLS encryption in transit, row-level security on all database tables, and role-based access controls.
Despite these measures, no internet transmission or electronic storage is 100% secure. We encourage you to use strong passwords and keep your login credentials confidential.

7. Cookies

We use session cookies for authentication purposes only. These are strictly necessary for the platform to function.
We do not use advertising or tracking cookies. We do not use third-party analytics cookies that track you across sites.
You can manage cookies through your browser settings, though disabling session cookies will prevent you from logging in.

8. Contact

If you have questions about this privacy policy or how we handle your data, please contact us at: hello@standouta.com
Data Controller: Standouta, Dubai, UAE.

1. Information We Collect

Contact and account information: When you submit a discovery form or create an account, we collect your name, email address, phone number, company name, and website.

Discovery session data: Information you provide during your AI-powered discovery session, including your business goals, challenges, target audience, and project requirements.

Usage data: Information about how you interact with our platform, including pages visited, features used, and time spent.

Payment information: Payment transactions are processed by Polar, our payment provider. We do not store your full payment card details.

Communications: If you contact us via email or our contact form, we retain records of that correspondence.

2. How We Use Your Information

Service delivery: To provide our digital agency services, generate AI-powered strategic proposals, and manage your project engagements.

Account management: To maintain your client portal, process payments, and manage your active projects.

AI analysis: Your discovery session data is processed by Google Gemini to generate strategic insights and service recommendations. This processing is server-side only.

Communication: To respond to your inquiries and send important updates about your project or account.

Service improvement: To improve our platform, understand how clients use our services, and develop new features.

3. Data Sharing and Third Parties

Supabase: Our database and authentication provider. Your data is stored in their secure, GDPR-compliant infrastructure in the EU region.

Google Gemini: Your discovery session content is processed by Google's AI services to generate strategic recommendations. Google's privacy policy applies to this processing.

Polar: Our payment processor. Payment data is handled according to Polar's privacy policy and PCI DSS standards.

Sentry: Error monitoring service that may receive technical error information (stack traces, anonymous session data).

We do not sell your personal data to third parties. We do not use your data for advertising purposes.

4. Data Retention

Account and project data is retained for the duration of your engagement with Standouta and for a reasonable period thereafter for legal and business record-keeping purposes.

Discovery session data submitted without creating an account is retained for 90 days, after which it is anonymized.

You may request deletion of your personal data at any time by contacting us at hello@standouta.com.

5. Your Rights (GDPR and applicable laws)

Access: You have the right to request a copy of the personal data we hold about you.

Rectification: You may request that we correct inaccurate or incomplete data.

Erasure: You may request that we delete your personal data, subject to legal retention requirements.

Portability: You may request your data in a structured, machine-readable format.

Objection: You may object to certain processing activities.

To exercise any of these rights, contact us at hello@standouta.com. We will respond within 30 days.

6. Security

We implement appropriate technical and organizational measures to protect your personal data, including AES-256 encryption at rest, TLS encryption in transit, row-level security on all database tables, and role-based access controls.

Despite these measures, no internet transmission or electronic storage is 100% secure. We encourage you to use strong passwords and keep your login credentials confidential.

7. Cookies

We use session cookies for authentication purposes only. These are strictly necessary for the platform to function.

We do not use advertising or tracking cookies. We do not use third-party analytics cookies that track you across sites.

You can manage cookies through your browser settings, though disabling session cookies will prevent you from logging in.