Privacy Policy

Effective Date: January 15, 2024
Last Updated: January 15, 2024

Our Commitment to Privacy

Outrun is committed to providing quality services to you and this policy outlines our ongoing obligations to you in respect of how we manage your Personal Information.

We have adopted the Australian Privacy Principles (APPs) contained in the Privacy Act 1988 (Cth) (the Privacy Act). The APPs govern the way in which we collect, use, disclose, store, secure and dispose of your Personal Information.

A copy of the Australian Privacy Principles may be obtained from the website of The Office of the Australian Information Commissioner at https://www.oaic.gov.au/.

What is Personal Information and Why Do We Collect It?

Personal Information is information or an opinion that identifies an individual. Examples of Personal Information we collect include:

• Names and contact details
• Email addresses
• Company information and job titles
• Account and billing information
• Usage data and analytics
• Technical information (IP addresses, browser types)

This Personal Information is obtained through various means including account registration, correspondence, email communication, via our website getoutrun.com, through our data synchronization services, from cookies and tracking technologies, and from third parties with your consent. We don't guarantee website links or policies of authorized third parties.

We collect your Personal Information for the primary purpose of providing our data synchronization services to you, providing customer support, billing and account management, and improving our services. We may also use your Personal Information for secondary purposes closely related to the primary purpose, in circumstances where you would reasonably expect such use or disclosure. You may unsubscribe from our mailing/marketing lists at any time by contacting us in writing.

When we collect Personal Information we will, where appropriate and where possible, explain to you why we are collecting the information and how we plan to use it.

Data You Synchronize Through Our Service

Sensitive Information

Sensitive information is defined in the Privacy Act to include information or opinion about such things as an individual's racial or ethnic origin, political opinions, membership of a political association, religious or philosophical beliefs, membership of a trade union or other professional body, criminal record or health information.

Sensitive information will be used by us only:

• For the primary purpose for which it was obtained
• For a secondary purpose that is directly related to the primary purpose
• With your consent; or where required or authorized by law

Third Parties

Where reasonable and practicable to do so, we will collect your Personal Information only from you. However, in some circumstances we may be provided with information by third parties (such as through integrations with your existing systems like HubSpot, Salesforce, or Zoho CRM). In such cases we will take reasonable steps to ensure that you are made aware of the information provided to us by the third party.

International Data Transfers

Outrun operates globally with data centers in Australia, Europe, and the United States. We may transfer your Personal Information between these regions to provide our services effectively. When we transfer Personal Information internationally, we ensure appropriate safeguards are in place, including:

• Compliance with applicable data protection laws (GDPR, CCPA, Australian Privacy Act)
• Use of standard contractual clauses where required
• Ensuring adequate protection in the destination country
• Implementing technical and organizational security measures

Disclosure of Personal Information

Your Personal Information may be disclosed in a number of circumstances including the following:

• To service providers who assist us in providing our services (under strict confidentiality agreements)
• To third parties where you consent to the use or disclosure
• Where required or authorized by law
• To protect our rights, property, or safety, or that of our users or others
• In connection with a business transaction (merger, acquisition, etc.) with appropriate protections

Security of Personal Information

Your Personal Information is stored in a manner that reasonably protects it from misuse and loss and from unauthorized access, modification or disclosure. Our security measures include:

• Encryption of data at rest and in transit using industry-standard protocols
• Multi-factor authentication for all user accounts
• Regular security audits and vulnerability assessments
• SOC 2 compliance framework implementation
• Restricted access to Personal Information on a need-to-know basis
• Regular staff training on privacy and security practices

When your Personal Information is no longer needed for the purpose for which it was obtained, we will take reasonable steps to destroy or permanently de-identify your Personal Information. However, some Personal Information may be stored in backup systems or client files which will be kept by us for a minimum of 7 years for legal and compliance purposes.

Cookies and Tracking Technologies

We use cookies and similar tracking technologies to improve your experience on our website and services. These technologies help us:

• Remember your preferences and settings
• Analyze website usage and performance
• Provide personalized content and features
• Ensure security and prevent fraud

You can control cookie settings through your browser preferences. However, disabling certain cookies may affect the functionality of our services.

Access to Your Personal Information

You may access the Personal Information we hold about you and update and/or correct it, subject to certain exceptions. If you wish to access your Personal Information, please contact us in writing at privacy@getoutrun.com.

Outrun will not charge any fee for your access request, but may charge an administrative fee for providing a copy of your Personal Information.

In order to protect your Personal Information we may require identification from you before releasing the requested information.

Your Rights

Depending on your location, you may have additional rights regarding your Personal Information, including:

• Right to Access: Request access to your Personal Information
• Right to Rectification: Request correction of inaccurate Personal Information
• Right to Erasure: Request deletion of your Personal Information (subject to legal requirements)
• Right to Portability: Request transfer of your Personal Information to another service
• Right to Object: Object to certain processing of your Personal Information
• Right to Restrict Processing: Request limitation of processing in certain circumstances

Maintaining the Quality of Your Personal Information

It is important to us that your Personal Information is up to date. We will take reasonable steps to make sure that your Personal Information is accurate, complete and up-to-date. If you find that the information we have is not up to date or is inaccurate, please advise us as soon as practicable so we can update our records and ensure we can continue to provide quality services to you.

Data Retention

We retain Personal Information for as long as necessary to provide our services and fulfill the purposes outlined in this policy. Specific retention periods depend on the type of information and the purpose for which it was collected. When Personal Information is no longer needed, we securely delete or anonymize it.

Children's Privacy

Our services are not intended for children under the age of 13. We do not knowingly collect Personal Information from children under 13. If we become aware that we have collected Personal Information from a child under 13, we will take steps to delete such information promptly.

Policy Updates

This Policy may change from time to time and is available on our website at getoutrun.com/privacy. We will notify you of any material changes to this policy by email or through our service. Your continued use of our services after such notification constitutes acceptance of the updated policy.

Privacy Policy Complaints and Enquiries

If you have any queries or complaints about our Privacy Policy, please contact us at:

We will investigate any complaint and will notify you of our decision in relation to your complaint as soon as practicable after it has been made.

Regulatory Authorities

If you are not satisfied with our response to your privacy complaint, you may contact the relevant regulatory authority:

• Australia: Office of the Australian Information Commissioner (OAIC) - www.oaic.gov.au
• European Union: Your local Data Protection Authority
• United States: Federal Trade Commission (FTC) or relevant state attorney general