Privacy Policy

Who We Are

ShareOut (“ShareOut,” “we,” “us”) operates the publishing platform at shareout.site. This Privacy Policy describes how we handle personal information when you use our website, product, and APIs.

Our Role (Controller and Processor)

For content you publish and connect, ShareOut acts as a data processor on your behalf; for your account and billing details, we act as the controller. Teams and Enterprise customers can request our Data Processing Agreement at security@shareout.site.

Information We Collect

We collect information in these categories:

• Account information — email address, name, profile details, and authentication identifiers when you sign in (including via OAuth providers you choose).
• Content you publish — pages, files, structured data, comments, and configuration for artifacts you create or upload.
• Usage and device data — IP address, browser type, pages viewed, feature usage, timestamps, and diagnostic logs used to operate and secure the Service.
• Payment information — billing name, plan, and transaction history. Card numbers are collected and processed by our payment partners; we do not store full card numbers on our servers.
• Communications — messages you send to support and optional notification preferences.

How We Use Information

• Provide, maintain, and improve the Service — publishing, hosting, collaboration, and integrations.
• Authenticate you, secure accounts, and prevent fraud and abuse.
• Process subscriptions, invoices, and customer support requests.
• Send essential service notices (for example, security alerts or billing receipts).
• Analyze aggregated usage to improve reliability and product design.

We do not sell your personal information and we do not use third-party advertising cookies.

Legal Bases (EEA, UK & Argentina)

Where privacy law requires a legal basis, we rely on: (a) performance of our contract with you; (b) legitimate interests in operating and securing the Service; (c) your consent where required (for example, optional marketing); and (d) compliance with legal obligations.

Cookies & Similar Technologies

We use essential cookies and local storage to keep you signed in, remember preferences (such as language), and protect the Service. You can control cookies through your browser settings; disabling essential cookies may limit functionality.

Sharing & Subprocessors

We use a small set of service providers to run ShareOut: Cloudflare (hosting, storage, email delivery), OpenAI and Anthropic via Vercel AI Gateway (AI features), Rebill (payments), and Google, Telegram and Slack (sign-in and integrations you choose to connect). Each is bound by contract to use your data only to provide their service to us. We keep a current list at shareout.site/security and will give notice before adding a new subprocessor that handles your content.

We may also disclose information if required by law or to protect rights, safety, and security.

Data Storage & Security

ShareOut runs on Cloudflare’s global infrastructure. Your content and account data may be stored and processed in data centers in multiple countries. We encrypt data in transit using TLS, and we encrypt stored credentials and connection secrets at rest using AES-256-GCM. We enforce access controls on our internal systems and keep audit logs of when connection credentials are used. No method of transmission or storage is 100% secure, so please use a strong password and protect your API tokens. To report a vulnerability or security incident, email security@shareout.site.

If Something Goes Wrong

If we ever discover a security breach that affects your personal data, we will notify affected account owners without undue delay — and within 72 hours where the law requires — describing what happened and what we’re doing about it.

Your Published Content

Artifacts are private by default unless you change visibility. Public pages may be viewed, indexed, and cited by people, search engines, and AI systems. You control visibility settings and can unpublish or delete content at any time.

Connected Integrations

When you connect a third-party data source, we access only the data needed to render your pages, using credentials you authorize. Heavy data may be fetched directly from your source; ShareOut acts as a control plane, not a permanent warehouse for your connected datasets. You can disconnect integrations at any time.

AI Features

AI features send the prompts and context you provide to our AI providers, OpenAI and Anthropic (through Vercel AI Gateway), solely to generate your result. They process this content under API terms that do not use it to train their public models, and we do not use your private workspace content to train any model. Don’t submit sensitive data you aren’t authorized to share.

Data Retention

We keep account and content data while your account is active. Workspace audit logs are kept for 12 months. When you delete content or close your account, we remove the associated data within 30 days, and purge it from backups within a further 90, except where we must keep it for legal, security, or billing reasons.

Your Rights & Choices

Depending on where you live, you may have the right to access, correct, export, or delete your personal information, object to or restrict certain processing, and withdraw consent where processing is consent-based. The fastest way to get your data is to export it yourself: you can download any artifact, or a whole workspace as a zip, from the product at any time. To exercise these rights, email hello@shareout.site. You may also lodge a complaint with your local data protection authority.

California Privacy Rights

California residents may request disclosure of categories of personal information collected, deletion, and correction. We do not sell personal information or share it for cross-context behavioral advertising as defined by California law. To make a request, contact hello@shareout.site.

International Transfers

If you access ShareOut from outside Argentina, your information may be transferred to countries with different data-protection laws. Where required, we use appropriate safeguards such as standard contractual clauses.

Children

ShareOut is not directed to children under 13 (or the minimum age required in your jurisdiction), and we do not knowingly collect their personal information. Contact us if you believe a child has provided data and we will delete it.

Changes

We may update this policy from time to time. When we do, we will revise the effective date above and, for material changes, provide additional notice. Your continued use after changes take effect constitutes acceptance.