Legal

Privacy policy

Last updated 10 September 2026

Review before you rely on this

This page describes what the platform does with data and is written to be accurate about it. It has not been reviewed by counsel and is not a substitute for a compliance review under India’s data protection law. Have it checked before launch.

The short version

Browsing Outshine needs no account and no sign-in.
If you hold an account we keep your email address, your name if you gave one, and a record of your sessions and sign-ins.
We publish your brand name and a placement’s clearing price once that placement is running. We never publish your budget, your total spend or your contact details.
Product analytics carry page paths, listing and category identifiers and campaign attribution. They do not carry your name, your email address or a profile of you.

What we collect

If you only browse

Requests are logged for security and reliability, including an IP address and a user-agent string, and are retained for a limited period. Nothing identifies you as a person.

If you arrive from a campaign link, the utm_* parameters on that link are held in your browser for the length of your visit so that an enquiry can be attributed to it. They are stored in your own browser’s session storage, cleared when you close the tab, and are never joined to an identity.

If you hold an account

Email address, and your name if you provided one.
A password, stored only as a cryptographic hash. We cannot read it.
Sessions: when each began, when it expires, and the IP address and user-agent it was created from — so you can see and revoke your own sessions.
Sign-in attempts, successful and failed, to detect account takeover.
Your bids, and the placements you won.

If you advertise

Your business details, billing address and tax identifiers.
Verification documents you submit, and the outcome of that review.
Payment records. Card and bank details are handled by the payment gateway, not by us.

What we publish

Once a placement you won is actually delivering, we publish the placement, your brand name, the clearing price and how many bids were in contention. Your advert is on the page for anybody to see, so naming you in a structured form discloses nothing a visitor cannot already read.

We do not publish, at any point:

your budget or your per-placement ceiling;
your total or aggregate spend;
your email address, phone number or billing address;
your verification documents or their contents;
anything about an auction while it is still open;
a placement you have won but which has not started running.

Analytics

The public site records a fixed, published set of product events: a listing view, a listing click, a category view, a search, a leaderboard view, a placement view, a bid started or submitted, an advertising enquiry, and a share. Each carries identifiers, category slugs, a page path and campaign attribution.

Search queries are recorded as typed. Do not put anything personal in a search box on any website, including this one.

Events carry no name, no email address and no cross-site identifier, and we do not build an advertising profile of visitors. If no analytics endpoint is configured for a deployment, events are discarded in the browser and never sent anywhere.

Where your data is stored in your browser

Your access token is held in session storage and your refresh token in memory only, so neither survives closing the tab and neither is written where a script on the page could quietly read it. We do not use cookies to track you across sites.

Sharing

We share data only with:

the payment gateway, to take a payment you initiated;
the email provider that delivers your verification and reset messages;
infrastructure providers that host the platform;
authorities, where we are legally required to — and we will tell you unless we are forbidden from doing so.

We do not sell personal data.

Retention

Account and advertising records are kept while your account is open and afterwards for as long as tax and accounting law requires. Security logs are kept for a limited period. Verification documents are kept for as long as the verification stands.

Your rights

You may ask for a copy of your data, ask us to correct it, ask us to delete it where we are not required to keep it, and withdraw consent where we relied on it. Contact us and we will respond within the period the law allows.

Children

Outshine is a business platform and is not directed at children.

Changes

If this policy changes materially we will notify account holders. The date at the top always reflects the current version.