Outlot Privacy Policy
Version: 1.3
Effective date: 2026-10-30
Web address: outlot.co/privacy
1. Who we are
Outlot is made by Platte LLC, a California limited liability company ("Platte LLC," "we," "us," or "our"). Outlot helps professional estate sale companies catalog a sale. You photograph items and, if you like, record voice notes. Outlot then drafts a title, description, maker, condition, and suggested price for each item, along with comparable sales and listings from other websites.
This policy explains what information we collect, how we use it, who receives it, how long we keep it, and the choices you have. It covers the Outlot iPhone app, the Outlot web app and website at outlot.co, and the forms on our website (together, the "Service"). Our Terms of Service at outlot.co/terms also apply when you use the Service.
Outlot is in a free beta. The iPhone app is available by invitation through Apple's TestFlight.
Questions or requests: [email protected]
2. The short version
- We use your photos, voice notes, and sale details to draft listings and suggested prices. That is what the Service does.
- To do this, we send photos, voice notes, and item and sale details to OpenAI, and we send item photos to Google Lens through a search service called SerpApi. Section 5 explains exactly what goes where.
- We do not sell your personal information, and we do not use it for advertising.
- We do not use your photos, voice notes, or listings to train our own AI models.
- You can export a sale, delete items and sales, or delete your account at any time.
3. Information we collect
3.1 Account information
- Name and email address.
- Password, if you sign up with email. Our sign-in provider, Supabase, stores it in hashed (scrambled) form. We cannot see it.
- Sign in with Apple. If you use it, Apple gives us your name and email address. If you turn on Apple's Hide My Email, we get a private relay address instead of your real email.
- Business details you choose to add, such as your business name, logo, and website, and the contact email and phone number you show on a sale.
3.2 Sales, items, photos, and voice notes
- Item photos you take in the app or choose from your camera roll. Outlot removes photo metadata, including any location data, before storing a photo. For camera-roll imports, the app first reads the date and time each photo was taken, so Outlot can group photos of the same item.
- Voice notes you record, and the transcripts made from them.
- Sale details, such as the sale's name, dates, hours, address, notes, terms, and payment methods.
- Listings Outlot drafts, and your changes to them, including the prices you set and comparable sales you add yourself.
3.3 Information about other people
Your sales can include information about other people, such as a client's home address or a family name in your notes. We use it only to provide the Service to you. Please add only what you have the right to share. Section 5.4 explains how photos and voice notes can capture more than the items.
3.4 Website forms
- Early-access form: your email address. We use it to review your request, invite you to the beta, and follow up with you about it.
- Contact form: your name, email address, and message. We use these to reply to you.
3.5 Feedback and support
When you send feedback in the app, email us, or send feedback or screenshots through TestFlight, we receive what you send. Feedback sent from the app includes your name and email address so we can follow up.
3.6 Information collected automatically
- Usage events. We record how the Service is used, in our own database. Examples: creating or joining a sale, opening a screen, editing an item, exporting a sale, and how you respond to the AI processing prompt. These events are linked to your account.
- Device and app details. Your device model, iOS version, and Outlot app version, recorded with usage events.
- Server logs. Our hosting and database providers record standard details of each request, such as IP address, browser type, the web address requested, and the time.
We do not use third-party analytics or advertising tools, and we do not collect advertising identifiers.
3.7 Information from Apple
If you test Outlot through TestFlight, Apple shares some information with us under Apple's own terms. This can include your name and email address if we invited you by email, your device model and iOS version, crash reports, and any feedback and screenshots you choose to send through TestFlight.
3.8 What we do not collect
- Your device's location. The app does not ask for location access. A sale address you type in is stored as part of the sale, not as your location.
- Contacts, calendars, or health data.
- Payment information. The beta is free, and Outlot does not process payments for you or your buyers.
4. How we use information
- To provide the Service: keep your account and sales in sync, identify items, draft listings and suggested prices, find comparable sales and listings, transcribe voice notes, group imported photos into items, and let you export your sales.
- To find local prices: for large items such as furniture, we use the sale's city and state to look for comparable listings near the sale (section 5).
- To let your crew work with you: give the people you invite to a sale access to it (section 7.2).
- To publish sale pages you choose to publish (section 6).
- To communicate with you: beta invitations and updates, service notices, replies to your messages, and notice of important changes to this policy or our terms.
- To improve the Service: we use usage events, logs, and feedback to find bugs and learn which features help. When needed to fix a problem or check the quality of Outlot's results, we may look at a specific item or listing. We do not use your photos, voice notes, or listings to train our own AI models.
- To keep the Service safe and follow the law: prevent abuse and security incidents, enforce our terms, and meet legal obligations.
5. How Outlot drafts listings: OpenAI and SerpApi
This section matters most. Please read it.
5.1 OpenAI
We use OpenAI's API, its service for businesses, to identify items, assess condition, write listings and sale descriptions, suggest prices, transcribe voice notes, and group photos into items.
What we send to OpenAI:
- Item photos.
- Voice notes, to be transcribed, and their transcripts.
- Item and listing details, such as the item's type, maker, condition notes, and draft listing text.
- Sale details when Outlot writes a sale description, such as the sale's name, address, dates, and notes.
- The sale's city and state, to identify the sale's local market for price searches.
- On public sale pages, the sale's details and the questions visitors type into the sale assistant (section 6).
We do not send OpenAI your password or other sign-in details. Your name and account email are not sent unless you have added them to a sale's details or say them in a voice note.
How OpenAI handles it: Under OpenAI's API terms, OpenAI does not use data sent through its API to train its models. OpenAI keeps API inputs and outputs for up to 30 days to monitor for abuse, then deletes them, unless the law requires it to keep them longer. See OpenAI's Enterprise Privacy page and Data Processing Addendum.
5.2 SerpApi and Google
To find comparable items online, we use SerpApi, a search service. SerpApi submits item photos to Google Lens and runs Google searches for us.
- Photos are shared through a time-limited link. The link stops working one hour after we create it.
- Searches use words that describe the item, such as its type, maker, or model. For large items such as furniture, a search may be limited to Craigslist listings in the sale's area.
- We do not send SerpApi your name, email address, account details, or the sale's street address.
SerpApi and Google handle the photos and searches they receive under their own terms and privacy policies, which we do not control. That includes how long they keep the data and how Google uses images submitted to Google Lens. See SerpApi's terms and privacy policy and Google's privacy policy.
5.3 We ask before sending
Before Outlot sends your photos or voice notes for processing the first time, the app explains this and asks for your permission. If you decline, Outlot cannot draft listings for you, because this processing is how the Service works. There is no setting that keeps the capture and listing features but turns processing off.
To stop all future processing, stop adding photos and voice notes, or delete your account (section 10). Deleting your account does not recall data already sent to OpenAI, SerpApi, or Google. That data is handled as described above.
5.4 Photos and voice notes can capture more than items
Photos taken in a client's home can show people, family photographs, mail, bank or medical papers, prescription labels, and other personal documents. Anything visible in a photo goes wherever the photo goes, including to OpenAI and Google Lens. Please:
- Frame each photo on the item. Keep people and personal documents out of the shot.
- If a photo shows them by accident, retake it and delete the original in Outlot.
- Record only your own narration. If anyone else could be recorded, tell them and get their permission first. California and several other states require everyone's consent to record a conversation.
6. Public sale pages
In the web app, you can publish a sale page that anyone with the link can view. Depending on what you add, it can show the sale's name, dates, hours, and address (by default, only the city until the day of the sale), your business name, logo, and contact details, your terms and payment methods, and item photos and descriptions. You decide whether to publish, and you can unpublish at any time. After you unpublish, the link stops working, but visitors may have saved what they saw.
Visitors to a sale page can ask questions of an AI assistant. To answer, the assistant sends the visitor's messages and the sale's details to OpenAI. We do not store these messages in our database. The visitor's browser keeps a copy of the conversation so it is there on the next visit, and clearing browser data removes it. Visitors should not type personal information into the assistant.
7. Who receives your information
7.1 Service providers
We use these companies to run the Service. Each receives only what it needs for its role.
| Provider | What it does for us | What it receives |
|---|---|---|
| OpenAI | Identifies items, writes listings and sale descriptions, suggests prices, transcribes voice notes, answers sale page questions | Item photos, voice notes, item and sale details, and sale page questions (section 5.1) |
| SerpApi | Submits item photos to Google Lens and runs Google searches for comparable items | Time-limited photo links and search terms that describe the item (section 5.2) |
| Supabase | Database, sign-in, and file storage | Everything stored in the Service, including account information, sales, photos, voice notes, listings, usage events, and form submissions |
| Railway | Hosts our web app and servers | Information passing through our servers, and server logs |
| Cloudflare | Runs our domain name system (DNS) and forwards email sent to outlot.co addresses | Email you send us, including to [email protected] |
| Apple | Sign in with Apple, and beta distribution through TestFlight | Your sign-in request if you use Sign in with Apple. Apple's own terms apply to TestFlight. |
| Slack | May notify us when someone submits a website form | The contents of the form |
| Resend | May email us when someone submits a website form | The contents of the form |
7.2 People you work with
Each sale has an invite code. Anyone you give it to can join the sale and see and work on its items, photos, voice notes, and listings. Share invite codes only with people you want on that sale.
7.3 The public, if you publish a sale page
See section 6.
7.4 Legal and safety reasons
We may disclose information if the law requires it, such as in response to a valid subpoena or court order, or if we believe in good faith that it is needed to protect the rights, safety, or property of our users, the public, or Platte LLC.
7.5 If our business changes hands
If Platte LLC is part of a merger, acquisition, or sale of assets, your information may transfer to the new owner. This policy will keep applying to it, and we will tell you before your information becomes subject to a different policy.
7.6 With your permission
We share information for other purposes only if you ask us to or agree to it.
We do not sell your personal information. We do not share it for targeted advertising, and we do not let other companies track your activity across websites through Outlot.
8. Cookies and browser storage
- Sign-in cookies. The outlot.co web app uses essential cookies to keep you signed in. It does not work without them.
- Browser storage. The web app uses your browser's storage to remember display settings during a visit. Public sale pages use it to keep a visitor's conversation with the sale assistant.
- No advertising or analytics cookies. We do not use cookies for advertising, analytics, or tracking.
Because we do not track you across websites or sell or share personal information, Do Not Track and Global Privacy Control signals do not change how the Service works.
9. How long we keep information
| Information | How long we keep it |
|---|---|
| Account information | Until you delete your account |
| Sales, with their items, photos, voice notes, transcripts, and listings | As long as the sale exists. A sale shared with others stays with its remaining members if you delete your account. |
| Items and photos you delete from a sale | Removed from the sale right away, and erased from our systems when the sale is deleted |
| Usage events and server logs | Up to 12 months |
| Early-access requests | 12 months after our last contact with you about the beta, then deleted. If you create an account, your account information follows the rows above. |
| Contact form messages | 12 months after the conversation ends, then deleted |
| Feedback | Until we no longer need it to improve Outlot. If you delete your account, we remove your name and email from it. |
| Data sent to OpenAI | Up to 30 days at OpenAI (section 5.1) |
| Data sent to SerpApi and Google | Under their own policies (section 5.2) |
The form periods include copies in our email and Slack. Deleted information can stay in our providers' backups for a limited time, until those backups are replaced. We may keep information longer if the law requires it or to resolve a dispute.
10. Deleting your account
You can delete your account at any time from the Profile screen in the iPhone app or the Profile page in the web app. When you do:
- Your account and profile are deleted, and you are signed out.
- Sales where you are the only member are deleted, with their items, photos, voice notes, and listings.
- Sales shared with others stay with them. We remove you from those sales, and what you added stays in the sale.
- Your usage events are deleted. Feedback you sent is kept without your name and email. Prices you entered as comparable sales stay with the item without your name.
- We delete or anonymize any remaining personal information within 30 days, except where the law requires us to keep it.
Account deletion is permanent. Export any sale you want to keep first.
11. Your rights and choices
11.1 What you can do in Outlot
- See your information in the app.
- Export a sale as a CSV spreadsheet with its photos.
- Correct your profile, sales, and listings by editing them.
- Delete items, sales you own, or your account (section 10).
- Ask us for a copy of your information, or for help with anything you cannot do in the app, at [email protected].
11.2 California privacy rights
If you live in California, the California Consumer Privacy Act (CCPA) gives you the rights below. We honor them for all users, wherever they live.
- Right to know what personal information we have collected about you, where it came from, why we collected it, and who we disclosed it to, and to get a copy.
- Right to delete your personal information, with some exceptions allowed by law.
- Right to correct inaccurate personal information.
- Right to opt out of sale or sharing. We do not sell or share personal information, so there is nothing to opt out of.
- Right to limit use of sensitive personal information. The only sensitive personal information we collect is your account login (email and password). We use it only to sign you in and protect your account, so this right does not apply. We do not use voice recordings to identify you.
- Right to non-discrimination. We will not treat you differently for using these rights.
We do not knowingly sell or share the personal information of anyone under 16.
Personal information we collected in the last 12 months
| Category (CCPA) | Examples | Disclosed to |
|---|---|---|
| Identifiers | Name, email address, IP address, account ID | Supabase, Railway, Cloudflare (email), Slack and Resend (form submissions), OpenAI (only if part of a sale's details) |
| Customer records | Company name, phone number, city and state, business contact details | Supabase, Slack and Resend (form submissions), OpenAI (only if part of a sale's details) |
| Commercial information | Records of personal property in your sales, such as items, listings, and prices | Supabase, OpenAI, SerpApi (search terms) |
| Audio and visual information | Item photos and voice notes | Supabase, OpenAI, SerpApi (photo links, shared with Google Lens) |
| Internet activity | Usage events and server logs | Supabase, Railway |
| Sensitive personal information | Account login (email and password) | Supabase |
We collect this information from you, from your device, and from Apple (section 3.7), for the purposes in section 4.
How to make a request. Email [email protected], from the email address on your account if you have one. We will confirm we received your request within 10 business days, verify your identity (usually by confirming you control your account email), and respond within 45 days. If we need more time, we will tell you why and may take up to 45 more days. An authorized agent can make a request for you. We will ask for proof of the agent's authority and may confirm your identity with you directly.
11.3 Other states
Wherever you live in the United States, you can ask us to access, correct, or delete your personal information, and we will handle the request the same way. If we deny your request, you can appeal by replying to our answer, and we will respond to the appeal within 45 days.
12. Security
- Data is encrypted in transit (TLS), and our database and storage provider encrypts it at rest.
- Access to our production systems is limited to Platte LLC personnel who need it.
- Photo links we share with SerpApi stop working after one hour.
No system is perfectly secure, and we cannot guarantee the security of your information. If a breach affects your personal information, we will notify you as the law requires. You can help by using a strong password and sharing invite codes only with your crew.
13. Children
Outlot is for businesses, and you must be 18 or older to use it. We do not knowingly collect personal information from children. If we learn that we have, we will delete it.
14. Changes to this policy
We may update this policy as Outlot changes. We will post the new version at outlot.co/privacy with a new effective date. For material changes, we will notify you in the app or by email before they take effect. If a change would let us use information we already have in a materially different way, we will ask for your consent first.
15. Contact us
Platte LLC
Email: [email protected]
Change log
| Version | Date | Changes |
|---|---|---|
| 1.0 | 2026-04-11 | Initial draft for external beta |
| 1.1 | 2026-04-19 | Renamed to Outlot; added contact information |
| 1.2 | 2026-04-21 | Clarified that AI processing is core to the Service; removed references to an in-app consent toggle |
| 1.3 | 2026-10-28 | Named Platte LLC as the operator and [email protected] as the contact. Added SerpApi and Google Lens, local price searches that use the sale's city and state, and a complete service provider list. Added website forms and their retention, public sale pages and the sale assistant, cookies and browser storage, and photo metadata handling. Updated account deletion (shared sales, feedback), device information, and the CCPA section (categories, sensitive information, appeals). |