Privacy Policy

1. Who we are

Outcomp is operated from Kungsgatan 8, 111 43 Stockholm, Sweden. In this policy, "Outcomp", "we", "us" and "our" refer to the Swedish company operating Outcomp.

For questions about this policy or your data, contact us at data@outcomp.ai.

2. What data we collect

We collect the following categories of personal data:

• Contact data: your work email address, submitted when you request a free benchmark.
• Incidental personal data: names, signatures, or contact details that may appear within invoices or rate cards you submit.
• Technical data: limited technical information such as IP address, browser information, timestamps, and security logs that may be processed automatically when you use our website.

You may also submit commercial pricing data (invoices, rate cards, operating metrics) for benchmarking purposes. That data is not, in itself, personal data, and how it is used is covered by our separate Data Contribution Terms. This policy only addresses any personal data that may incidentally appear within it.

3. Why we process this data (legal basis)

We process your work contact data where necessary for our legitimate interests in responding to your benchmark request, providing the requested service, and managing our related business communications.

Where invoices or rate cards you submit incidentally contain personal data (e.g. a contact name or signature), we process that data where necessary for our legitimate interests in receiving, reviewing, and validating the documents required to produce your benchmark. We minimize and remove such identifiers as part of the de-identification process described in our Data Contribution Terms before any data is used in aggregate benchmarks.

We process limited technical data where necessary for our legitimate interests in securing, maintaining, and operating our website and services.

Where we use non-essential cookies for analytics (see Section 10), this is based on your consent, collected via our cookie consent tool before such cookies are set.

4. De-identification of personal data

Where names, signatures or other personal identifiers appear within documents you submit, these are removed before any data is used in aggregate benchmarks or shared with other Outcomp customers.

5. Who we share data with

We do not sell your personal data. We use the following third-party service providers to operate Outcomp:

• Formspree: form submission processing.
• Vercel: website hosting and infrastructure.
• Google Workspace: business email and communications.
• Google Analytics: website analytics, used only after you consent via our cookie banner.
• CookieHub: cookie consent management.

For how de-identified commercial pricing data is shared in aggregate benchmark form, see our Data Contribution Terms.

6. International data transfers

Where your data is transferred outside the EU/EEA, for example to service providers based in the United States, we rely on appropriate safeguards, such as Standard Contractual Clauses, to ensure an adequate level of protection.

7. How long we keep your data

We retain work contact data for as long as reasonably necessary to manage your benchmark request and our related business relationship. Personal identifiers contained incidentally in submitted documents are retained only for as long as necessary to process, verify, and administer the submission. Retention of de-identified commercial data within the aggregate benchmark dataset is addressed in our Data Contribution Terms.

8. Your rights

Under GDPR, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request erasure of your data
• Object to processing based on our legitimate interests
• Restrict certain processing
• Request a copy of your data in a portable format, where applicable
• Withdraw consent at any time, where processing is based on consent
• Lodge a complaint with the Swedish Authority for Privacy Protection (IMY)

To exercise any of these rights, contact data@outcomp.ai.

9. Security

We take reasonable technical and organizational measures to protect your data, including restricting access to authorized personnel and using encrypted connections for data in transit.

10. Cookies and tracking

Outcomp uses Google Analytics to understand how visitors use our website. Non-essential analytics cookies are only set after you give consent through the cookie banner shown when you visit outcomp.ai, managed by our consent tool, CookieHub. You can change or withdraw your consent at any time through the cookie settings provided by that banner.

Our hosting and security providers may separately process limited technical logs necessary to operate and protect the service, regardless of your cookie preferences. Outcomp is intended for business and professional use.

11. Changes to this policy

We may update this policy as Outcomp's product evolves. Material changes will be reflected here with an updated revision date.