Privacy policy
Outfly Hub (hub.outfly.io) is Outfly's internal intranet. It is only available to invited members of the Outfly team. This policy explains what personal data the Hub uses, why, and your rights. Outfly ("we", "us") is the data controller.
What we collect
- Your Google account basics when you sign in: your name, your @outfly.io email address and your profile picture. We never see your Google password.
- Things you add to the Hub: kudos, updates, page edits, prompts, whether you've marked yourself in the office, and which policies you've confirmed reading.
- Work information from tools we already use, once connected: from CharlieHR, your job title, start date, leave dates and leave balance; from Productive, projects, your tasks and your logged hours. We don't collect salaries, bank details, sickness reasons, home addresses or HR documents.
- Basic technical data: sign-in times, and the server logs our hosting providers keep for security and troubleshooting.
Why we use it
To run the Hub: to let you sign in, show you the right content, show the team who's in and who's away, and keep a record of changes. Our legal basis is our legitimate interest in running an effective internal workplace tool, and, where relevant, the performance of your employment or engagement with us. We don't use Hub data for marketing, and we don't sell it.
Who can see it
- Everyone on the Hub sees the directory, kudos, updates, who's in, and who's away (dates only, never the reason).
- Only you see your own leave balance, tasks and logged hours.
- Admins manage members and content, and see business figures such as financial KPIs.
Service providers
We use trusted providers to run the Hub. They process data only on our instructions: Google (sign-in), Supabase (database and storage, hosted in the EU), Vercel (website hosting) and Bunny (video). Where data leaves the UK, it is protected by appropriate safeguards such as standard contractual clauses or an adequacy decision.
How long we keep it
For as long as you're part of the team. When you leave, we remove your access straight away and delete or anonymise your personal data within 90 days. Content you published to the Hub, such as page edits, may be kept for the record with your name removed. Backups roll off on our providers' normal schedules.
Your rights
Under UK data protection law you can ask to see, correct, delete or restrict the data we hold about you, or object to how we use it. Email tommy@outfly.io and we'll respond within one month. If you're unhappy with how we've handled your data, you can complain to the Information Commissioner's Office (ico.org.uk).
Cookies
The Hub uses only essential cookies to keep you signed in. There are no advertising or tracking cookies.
Changes
We'll update this page if anything changes and tell the team when we do.