Outpost Privacy Policy

1. Purpose, Data Controller & Overview

Outpost is developed and operated by Alejandro Bermudez ("Data Controller"), operating as Outpost. Outpost is designed to respect your peace of mind and disconnection. We automate away-messages and notifications across messaging channels (WhatsApp, Telegram, LINE) when your device is powered off or you are traveling off-grid.

2. Data We Collect

• Account Information: Email address, hashed authentication credentials, and session identifiers.
• Channel Credentials & Bot Tokens: Messaging service tokens necessary to operate bot responders on your behalf.
• Trip Information & Schedules: Trip names, scheduled departure windows, and coarse expected return times.
• Emergency Contacts: Voluntary emergency contact names, phone numbers, or agency instructions entered by you for presence sharing.

3. Presence Page & Geolocation (VERIFY-06 Compliance)

Outpost strictly limits presence exposure. We do not track, store, or broadcast real-time GPS coordinates or precise minute-level departure timestamps. Presence links are tokenized, private by default, and provide only coarse return windows (e.g. "Sunday, Late Afternoon").

4. Data Deletion & Retention

You may request deletion of your account and all associated credentials at any time. When an account is deleted, all stored tokens, trips, and message logs are purged from our systems.

For Meta / WhatsApp user data deletion requests, our automated callback endpoint processes deletion requests per Meta platform policies.

5. Requests from Public Authorities & Government Access

Outpost enforces strict safeguards regarding any requests from law enforcement, courts, or public authorities for personal information or Platform Data:

• Legality Review: We require strict legal review of all requests to verify that they are issued under valid legal authority and jurisdiction.
• Challenging Unlawful Requests: We maintain provisions and procedures to legally challenge or seek modification of any requests that are overbroad, unlawful, or procedurally defective.
• Data Minimization: In accordance with our core architecture, message bodies are never stored. If disclosure is legally compelled, we apply strict data minimization to disclose only the minimum information legally necessary.
• Documentation: We thoroughly document all requests received, including legal reasoning, the requesting actors, and all responses provided.

6. Data Controller & Contact

The person responsible for all personal data and Meta Platform Data processed by Outpost is:

Alejandro Bermudez (Data Controller)
Email: privacy@outpostio.com