Last updated: September 17, 2026
Outstand ("we," "our," or "us") operates the AI-directed video and content generation platform at outstand-ai.com (the "Service"). This Privacy Policy describes what data we collect, why we collect it, how we use it, and the rights you have over your information.
Outstand is a "bring your own key" (BYOK) platform: every AI generation you run — video, image, voice, or text — is powered by your own API keys for the providers you connect (such as Anthropic, ElevenLabs, and kie.ai), not a shared account we control. Section 4 explains exactly what that means for your data.
When you register, we collect your name, email address, and password (stored as a salted hash, never in plain text, via our authentication provider Supabase). Your account has one or more "workspaces," which hold your projects, media, and settings.
Payments are processed by Stripe. We do not store your full card details — Stripe handles all payment data under its own PCI-DSS certified infrastructure. We retain billing records (transaction amounts, dates, plan details, subscription status) to operate your account and to comply with accounting and tax obligations. Some plans start with a card-required free trial; Stripe automatically charges the card on file when the trial ends unless you cancel first (see our Terms of Service for details).
If you connect your own API key for a provider such as Anthropic, ElevenLabs, kie.ai, or OpenAI, we store it encrypted at rest (AES-256-GCM) in our database. It is decrypted only at the moment your workspace makes a generation request to that provider, is never logged in plain text, and is never shared with any other user or workspace. We do not use your keys for anything other than fulfilling the generation requests you initiate. You can remove a stored key at any time from Settings → Credentials, which deletes it immediately.
Prompts, scripts, and other inputs you provide to generate content, along with the resulting videos, images, and audio, are stored in your workspace's media library (hosted on Cloudflare R2) so you can review, download, and manage them. This content is sent to the AI provider(s) you've connected, under your own API key, to be generated — we do not use your content to train any model, ours or a third party's.
We collect logs of API requests, feature usage, session activity, error events, and performance metrics, used for security monitoring, troubleshooting, and improving the Service.
When you visit outstand-ai.com, we automatically collect your IP address, browser type, operating system, pages visited, and referring URLs, used for security, fraud prevention, and aggregate analytics.
If you are located in the European Economic Area (EEA), we process your personal data on the following grounds:
If you join our affiliate program, we track referrals through a cookie tied to your unique referral link and associate resulting sign-ups and payments with your affiliate account, so we can calculate and pay out commissions. This data is only used for that purpose.
We use cookies and similar technologies for authentication, session management, security, remembering your current workspace, affiliate referral attribution, and aggregate analytics. You can control cookie preferences through your browser settings. Disabling certain cookies may affect the functionality of the Service.
We do not sell or rent your personal data. We may share your information with:
Your data may be processed in countries outside your own, including the United States, where our infrastructure providers operate. We ensure appropriate safeguards (such as Standard Contractual Clauses) are in place for any transfers outside the EEA.
We implement industry-standard security measures including TLS/SSL encryption for all data in transit, AES-256-GCM encryption at rest for stored API keys and other sensitive credentials, row-level access controls on our database, and regular security reviews. However, no system is completely immune to risk. In the event of a data breach that affects your rights and freedoms, we will notify you and applicable authorities as required by law.
Depending on your location, you may have the right to:
To exercise these rights, contact us at hello@jahidh.me. We will respond within 30 days.
Our Service is not intended for individuals under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided us with their information, please contact us immediately and we will delete it.
We may update this Privacy Policy from time to time. We will notify you of material changes via email or a prominent notice on our platform at least 14 days before changes take effect. Continued use of the Service after that date constitutes acceptance of the updated policy.
If you have questions or requests about this Privacy Policy, please contact us:
Email: hello@jahidh.me
Website: outstand-ai.com