OUTERO

Privacy Policy

Last updated: September 2026

This Privacy Policy explains what personal data OUTERO collects, why we collect it, and what rights you have over it.

OUTERO ("we", "us") is the data controller for the personal data described in this policy.

By using OUTERO, you agree to the collection and use of information in accordance with this policy.

1. Information we collect

Account information: your email address, password (stored securely by our authentication provider, never in plain text), and an optional display name.

Listing information: anything you add to a gear listing — title, description, category, price, city, and photos.

Booking information: dates, prices, and payment and deposit status for bookings you make or receive.

Messages: the content of messages you send through the platform, whether to coordinate a booking or through the contact form.

Location: the city you enter (for a listing or a search) is converted to an approximate map coordinate so search can work; if you use "Use my location", your device's coordinates are used for that search only and are not stored.

Technical information: your IP address and browser information, collected automatically by our hosting provider for security and troubleshooting.

We never see or store your full card number — payments are handled entirely by Stripe.

2. How we use your information

To operate the platform: creating your account, publishing your listings, processing bookings and payments, and enabling messages between a renter and an owner.

To send you emails and in-app notifications about your bookings, messages, and account.

To respond when you contact us for help or feedback.

To detect and prevent fraud, abuse, and security issues.

To comply with our legal and tax obligations.

3. Legal basis for processing

We process most of your information because it's necessary to provide the service you've signed up for (performance of a contract).

We process some information based on our legitimate interest in keeping the platform secure and working properly.

We process payment and transaction records as required by applicable tax and accounting law (legal obligation).

4. Who we share information with

We don't sell your personal data. We share it only with:

  • Supabase — our database, authentication, and file storage provider;
  • Stripe — our payment processor, for rental payments, deposits, and owner payouts;
  • Resend — our email provider, for transactional emails and notifications;
  • Vercel — our hosting provider;
  • OpenStreetMap Nominatim — to convert a city name into map coordinates for search (only the city text is sent, never your account information).

The other party to a booking sees your display name (or email, if you haven't set one) and any messages you send them.

We may disclose information if required by law or to protect the rights, property, or safety of OUTERO, our users, or others.

5. International transfers

Some of our service providers may process data outside Bulgaria or the European Economic Area. Where this happens, we rely on their compliance with applicable data protection safeguards, such as standard contractual clauses.

6. How long we keep your information

We keep your account and booking information for as long as your account is active.

After you delete your account, we keep transaction records for as long as required by tax and accounting law, and any information needed to resolve an open dispute.

Contact form submissions are kept for as long as needed to provide support and maintain a record of the conversation.

7. Your rights

Depending on your location, you may have the right to:

  • access the personal data we hold about you;
  • correct inaccurate data;
  • request deletion of your data;
  • restrict or object to certain processing;
  • receive your data in a portable format.

You can exercise most of these rights yourself from your profile, or contact us and we'll help.

If you're in the EU, you also have the right to lodge a complaint with your local data protection authority — in Bulgaria, the Commission for Personal Data Protection (CPDP).

8. Cookies

We use only the cookies necessary for the platform to work: one to keep you signed in, and one to remember your language preference.

We don't use advertising or tracking cookies.

9. Children

OUTERO is not intended for anyone under 18. We don't knowingly collect personal data from children.

10. Security

We use reasonable technical and organizational measures to protect your information, including encrypted connections and restricted access to our database.

No method of transmission or storage is completely secure, and we can't guarantee absolute security.

11. Changes to this policy

We may update this policy as OUTERO evolves. If we make a material change, we'll update the date at the top of this page.

12. Contact us

If you have a question about this policy or how we handle your data, please contact us through the platform.