Privacy Policy

Last updated: February 24, 2026

Blox Labs Inc. ("Outfeed AI," "we," "us," or "our") operates the website outfeed.ai and the Outfeed AI application (collectively, the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

By accessing or using the Service, you agree to this Privacy Policy. If you do not agree, please do not use the Service.

1. Information We Collect

1.1 Information You Provide to Us

  • Account Information: When you create an account, we collect your name, email address, password, and optional profile information such as your company name and job title.
  • Payment Information: When you subscribe to a paid plan, we collect billing details including your payment card number, expiration date, and billing address. Payment processing is handled by our third-party payment processor (Stripe), and we do not store your full card details on our servers.
  • Social Media Account Credentials: When you connect social media platforms (e.g., Instagram, Facebook, TikTok, X/Twitter, LinkedIn, Threads, YouTube, Pinterest, Bluesky), we receive OAuth access tokens that allow us to publish content on your behalf. We never store your social media passwords.
  • Content Data: Posts, messages, media files, captions, and other content you create, upload, or publish through the Service.
  • Communications: Information you provide when contacting us for support, submitting feedback, or participating in surveys.

1.2 Information Collected Automatically

  • Usage Data: Pages visited, features used, actions taken, time spent on the Service, and interaction patterns.
  • Device Information: Browser type and version, operating system, device type, screen resolution, and unique device identifiers.
  • Log Data: IP address, access timestamps, referring URLs, and error logs.
  • Cookies and Similar Technologies: We use cookies, web beacons, and similar technologies to collect information about your browsing activity. See our Cookie Policy for details.

1.3 Information From Third Parties

  • Social Media Platforms: When you connect your accounts, we may receive profile information, follower counts, engagement metrics, and post analytics from the connected platforms, as authorized by you.
  • Analytics Providers: We may receive aggregated or anonymized analytics data from third-party analytics services.

2. How We Use Your Information

We use the information we collect for the following purposes:

  • Provide and Maintain the Service: To create and manage your account, process transactions, deliver the features you request, and publish content to your connected social media accounts.
  • AI-Powered Features: To generate content suggestions, optimize post timing, and provide platform-specific content recommendations using our AI systems. Your content data may be processed by our AI models to deliver these features, but is not used to train general-purpose AI models.
  • Improve the Service: To understand usage patterns, diagnose technical issues, and develop new features.
  • Communications: To send you transactional emails (account confirmations, billing receipts, security alerts), and, with your consent, marketing communications about product updates and promotions.
  • Security and Fraud Prevention: To detect, prevent, and respond to fraud, abuse, or security incidents.
  • Legal Compliance: To comply with applicable laws, regulations, legal processes, or governmental requests.

3. How We Share Your Information

We do not sell your personal information. We may share your information in the following circumstances:

  • Social Media Platforms: When you use our Service to publish content, we transmit that content to the social media platforms you have connected. Each platform's use of your data is governed by their own privacy policies.
  • Service Providers: We share information with third-party vendors who perform services on our behalf, including payment processing (Stripe), cloud hosting (Amazon Web Services), email delivery, and analytics. These providers are contractually obligated to use your information only to provide their services to us.
  • AI Service Providers: Content you create may be processed by third-party AI service providers (such as OpenAI or Anthropic) to generate suggestions and optimize content. These providers process data under strict data processing agreements and do not use your data for their own training purposes.
  • Business Transfers: In connection with a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.
  • Legal Requirements: We may disclose your information if required by law, court order, or governmental authority, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.
  • With Your Consent: We may share your information for other purposes with your explicit consent.

4. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you the Service. After account deletion, we retain certain data for up to 30 days to allow for account recovery, and thereafter delete or anonymize it, except where we are required to retain it for legal, accounting, or regulatory purposes (typically up to 7 years for financial records).

Content published to social media platforms remains on those platforms subject to their own retention policies. Deleting your Outfeed AI account does not delete content already published to third-party platforms.

5. Data Security

We implement industry-standard security measures to protect your information, including:

  • 256-bit TLS/SSL encryption for all data in transit
  • AES-256 encryption for sensitive data at rest
  • OAuth 2.0 for secure social media platform authentication
  • Regular security audits and penetration testing
  • Role-based access controls for internal systems
  • SOC 2 Type II compliance program

No method of electronic transmission or storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

6. Your Rights and Choices

Depending on your jurisdiction, you may have the following rights regarding your personal information:

  • Access: Request a copy of the personal information we hold about you.
  • Correction: Request that we correct inaccurate or incomplete information.
  • Deletion: Request that we delete your personal information, subject to certain legal exceptions.
  • Portability: Request a machine-readable copy of your data.
  • Restriction: Request that we limit the processing of your information.
  • Objection: Object to our processing of your information for certain purposes.
  • Withdraw Consent: Where processing is based on your consent, you may withdraw it at any time.

To exercise any of these rights, contact us at privacy@outfeed.ai. We will respond to your request within 30 days (or as required by applicable law).

6.1 Marketing Communications

You can opt out of marketing emails at any time by clicking the "unsubscribe" link in any marketing email or by updating your preferences in your account settings. You will continue to receive transactional emails related to your account.

6.2 Social Media Account Disconnection

You can disconnect any linked social media account at any time through your Outfeed AI dashboard or by telling the AI assistant. Upon disconnection, we revoke the associated access tokens and cease accessing that platform on your behalf.

7. International Data Transfers

Outfeed AI is operated from Canada. If you access the Service from outside Canada, your information may be transferred to and processed in Canada and other countries where our service providers operate. We ensure appropriate safeguards are in place for international transfers, including Standard Contractual Clauses where required.

8. Children's Privacy

The Service is not intended for individuals under the age of 16. We do not knowingly collect personal information from children under 16. If we learn that we have collected personal information from a child under 16, we will take steps to delete that information promptly. If you believe a child has provided us with personal information, please contact us at privacy@outfeed.ai.

9. California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA):

  • The right to know what personal information we collect, use, and disclose.
  • The right to delete your personal information.
  • The right to opt out of the "sale" or "sharing" of your personal information. We do not sell your personal information.
  • The right to non-discrimination for exercising your privacy rights.
  • The right to correct inaccurate personal information.
  • The right to limit the use of sensitive personal information.

To exercise these rights, contact us at privacy@outfeed.ai or call us at the number listed below.

10. European Economic Area, UK, and Swiss Residents (GDPR)

If you are located in the European Economic Area (EEA), the United Kingdom, or Switzerland, we process your personal data under the following legal bases:

  • Performance of a Contract: To provide the Service you have requested.
  • Legitimate Interests: To improve our Service, ensure security, and communicate with you.
  • Consent: For marketing communications and non-essential cookies.
  • Legal Obligation: To comply with applicable laws.

You may lodge a complaint with your local supervisory authority if you believe your rights under GDPR have been violated.

11. Third-Party Links

The Service may contain links to third-party websites and services. We are not responsible for the privacy practices of those third parties. We encourage you to review their privacy policies before providing any personal information.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page with a revised "Last updated" date and, where appropriate, by email notification. Your continued use of the Service after changes are posted constitutes your acceptance of the updated policy.

13. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us: