PRIVACY POLICY

Effective Date: 01.03.2026 Last Updated: 01.03.2026

This Privacy Policy (“Policy”) describes how Outset PR (“Outset,” “we,” “us,” or “our”) collects, uses, discloses, and protects personal data in connection with Outset Media Index (the “Service”).

This Policy applies to all users of the Service, including visitors, trial users, and paid subscribers.

By accessing or using the Service, you acknowledge that you have read and understood this Policy.

1. Data Controller

Outset PR registered at Suite 305, Griffith Corporate Centre, Beachmont, Kingstown, St. Vincent and the Grenadines Email: legal@outsetpr.io

Outset PR acts as the data controller for personal data processed in connection with the Service, unless otherwise required by applicable law.

2. Scope of This Policy

This Policy applies to personal data collected through:

• the Service and its interfaces, • account registration and subscription management, • communications with users, • multi-user business account functionality

This Policy does not apply to third-party websites, platforms, or services that may be linked from the Service.

3. Personal Data We Collect

3.1 Information You Provide Directly

We may collect personal data that you voluntarily provide, including:

• Full name • Business email address • Company or organization name • Job title or role • Account credentials • Billing and subscription-related information (processed by third-party payment providers) • Communications, inquiries, and support requests • Information submitted through forms, surveys, or feedback tools

Accounts must be registered using a business or organizational email address. Use of personal, disposable, or anonymized email addresses may result in restricted access or account suspension.

3.2 Information Collected Automatically

When you access or use the Service, we may automatically collect certain technical and usage information, including: • IP address • Device type, browser type, and operating system • Log files, timestamps, and session data • Pages viewed, features used, and interaction patterns • Referring URLs and approximate geographic location (city/country level)

This information is used for security, analytics, performance monitoring, and Service improvement.

3.3 Information About Additional Users

If you add employees, contractors, or other authorized users to your account, we may process limited personal data about such users (including name, business email address, and role).

You represent and warrant that you have the authority to provide this information and that affected individuals have been informed accordingly.

3.4 Cookies and Similar Technologies

We use cookies and similar technologies to: • authenticate users and maintain sessions • store preferences • analyze usage and performance • enhance security

You can control cookies through your browser settings. Disabling cookies may limit certain features of the Service.

4. How We Use Personal Data

We process personal data for the following purposes: • Providing, operating, and maintaining the Service • Creating and managing user accounts and subscriptions • Enabling multi-user access and account administration • Processing payments and billing • Communicating with users about the Service • Providing customer and technical support • Monitoring usage, security, and compliance • Improving features, analytics, and performance • Complying with legal and regulatory obligations

We do not sell personal data.

5. Legal Bases for Processing

Where applicable under data protection laws (including GDPR), personal data is processed based on one or more of the following legal grounds:

• Performance of a contract • Legitimate business interests (such as security, analytics, and product improvement) • Compliance with legal obligations • Consent, where required by law

6. Aggregated and Anonymized Data

Outset PR may generate aggregated or anonymized data derived from use of the Service for analytics, benchmarking, research, reporting, and product development purposes.

Such data does not identify any individual user or organization and is not considered personal data.

7. Data Sharing and Disclosure

We may disclose personal data only in the following circumstances:

7.1 Service Providers

To trusted third-party service providers that support the operation of the Service, including hosting, infrastructure, payment processing, analytics, and customer support. These providers are subject to confidentiality and data protection obligations.

7.2 Legal and Regulatory Requirements

Where disclosure is required to comply with applicable law, regulation, court order, or lawful governmental request.

7.3 Business Transactions

In connection with a merger, acquisition, reorganization, or sale of assets, subject to appropriate safeguards.

Outset PR does not share personal data with third-party data providers used for analytics or scoring within the Service.

8. International Data Transfers

Personal data may be processed or stored in jurisdictions outside your country of residence.

Where required, Outset PR implements appropriate safeguards to ensure lawful international data transfers.

9. Data Retention

Personal data is retained only for as long as necessary to:

• provide the Service • fulfill contractual obligations • comply with legal requirements • resolve disputes and enforce agreements

Data may be retained after account termination for a commercially reasonable period unless deletion is required by law.

10. Data Security

Outset PR implements reasonable technical and organizational measures designed to protect personal data from unauthorized access, loss, misuse, alteration, or disclosure.

11. Your Rights

Depending on your jurisdiction, you may have the right to: • request access to your personal data • request correction or deletion • object to or restrict processing • request data portability • withdraw consent where processing is based on consent

Requests may be submitted to: privacy@outsetpr.io

We may require verification of identity before responding.

12. Business Accounts and Administrative Access

For business or organizational accounts, designated administrators may manage users, access usage-related data, and control subscription settings.

Such access is an inherent part of the Service and governed by the Terms of Use.

13. Children’s Data

The Service is not intended for individuals under the age of 18. Outset PR does not knowingly collect personal data from minors.

14. Changes to This Privacy Policy

We may update this Policy from time to time. The “Last Updated” date will reflect the effective date of revisions.

It is your responsibility to review this Policy periodically. Continued use of the Service constitutes acceptance of the updated Policy.

15. Contact Information

If you have questions about this Privacy Policy or data practices, please contact:

Outset PR Email: privacy@outsetpr.io Address: Suite 305, Griffith Corporate Centre, Beachmont, Kingstown, St. Vincent and the Grenadines