Privacy Policy
Effective May 2026
This policy describes how Outfox Media (“we”, “us”) collects, uses, and safeguards information when you use our studio production platform at outfoxmedia.co.uk.
1. What we collect
- Identity from Google. When you sign in via Google, we receive your name, email address, and profile picture from Google's OAuth response.
- Discord handle. If you link Discord, we store your Discord username and numeric user ID so we can notify you about assignment updates in our Discord server.
- Production data. Projects, assignments, submissions, ideas, payments, and tasks you create or are assigned to within the platform.
- Contact & payment details. Information you voluntarily provide for invoicing (address, payment method, rate). Visible only to administrators and you.
- Cookies. Strictly-necessary cookies that keep you signed in. No third-party advertising or analytics cookies.
2. How we use it
- To run the studio dashboard you signed up for.
- To coordinate work and notify you of stage updates via Discord.
- To track payments owed to you and pay them.
- To protect against abuse, fraud, and security incidents.
We do not sell your data, ever. We do not use it to train AI models or for advertising.
3. Who can see your data
- You. You can always see your own profile, assignments, submissions, and payments.
- Studio administrators. Admins of the studio can see your name, email, role, channel memberships, work history, and payment status to coordinate the team.
- Service providers we rely on. Supabase (database hosting), Google (authentication), and Discord (notifications) each handle a portion of the data under their own privacy policies.
- Hosting. The site is served via Vercel.
4. Data retention
We keep your data while your account is active and for as long as we need it to run the studio. If you ask us to delete your account, we remove your personal information within 30 days (financial records may be retained longer where required by law, e.g. for tax purposes).
5. Your rights
Under UK GDPR you have the right to:
- Access the personal data we hold about you.
- Request correction of inaccurate data.
- Request deletion of your data (subject to legal retention).
- Export your data in a portable format.
- Withdraw consent and stop using the service at any time.
To exercise any of these rights, email us at the address below.
6. Security
Data is encrypted in transit (HTTPS), stored in Supabase's managed Postgres database with row-level security policies that restrict access per user, and never written to third-party logs or analytics tools.
7. International transfers
Our database is hosted in the European Union. Authentication (Google) and notifications (Discord) may involve transferring data to the United States under their own safeguards.
8. Changes to this policy
If we update this policy, we'll update the “Effective” date above. Material changes will be communicated via email to active users.
9. Contact us
Questions, data requests, or complaints — email hello@outfoxmedia.co.uk.