Last updated: October 20, 2026
Outfttr LLC ("we", "us", "our") operates Outfttr (outfttr.com). This Privacy Policy explains how we collect, use, and protect information when you use our Service.
When you create an account, we collect your name, email address, and business name. We use this to provide the Service and communicate with you.
You enter guest information, reservations, charges, and other business data into the Service. This data belongs to you and is processed solely to provide the Service. How we handle it on your behalf is set out in our Data Processing Agreement.
If you give us a phone number when you sign up and tick the consent box, we may send you text messages about your account (billing, booking confirmations, and service alerts). We do not send marketing texts, and we do not text your guests. Today we send no text messages at all. Guest phone numbers you enter are part of your business data; we show them to your staff and, if you connect your phone system, use them for caller ID.
We automatically collect basic usage data such as pages visited, feature usage, and error logs. This helps us improve the Service.
Payment processing is handled by Stripe. We do not store credit card numbers. Stripe's privacy policy governs the handling of payment data.
Some features (email template generation, questionnaire and package setup, and report insights) use OpenRouter, which routes requests to third-party AI model providers. These features send business content you provide — such as a template description, pricing structure, or anonymized aggregate statistics — to generate a result. Report Insights never sends guest names, only anonymized totals and percentages. In the Leads feature, when a follow-up you scheduled comes due, we send the prospect's name and a short summary of their inquiry to draft a reply for your staff to review. Apart from that, we do not send guest reservation records, payment details, or stored guest personal information to AI providers. Our own sales tool also uses AI to read emails about prospective customers that we forward to it.
We do not sell your personal information. We do not use your business data for advertising or share it with third parties for their marketing purposes.
We share information only in these circumstances:
We implement industry-standard security measures including encryption in transit (TLS), encryption at rest, role-based access controls, and audit logging. However, no method of transmission or storage is 100% secure.
We retain your account data for as long as your account is active. After cancellation, we keep your data for 90 days. We email you when the deletion is scheduled and again 30 and 7 days before. After the 90 days, one of our platform administrators approves the deletion of your account, within 30 days, and your data is deleted. You may ask in writing for earlier deletion; we record who asked and when, then delete.
Business data (guests, reservations, charges) and your audit log are deleted together. We keep only a minimal record that the account existed: its short name, the dates, who approved the deletion, and counts of what was removed. Backup copies are kept for 90 days and then removed. Anonymized usage data may be retained longer for analytics. The details are in our Data Processing Agreement.
Signed waivers are legal records that the business generally must keep for at least 7 years (longer if a signer was a minor). Outfttr keeps them while the account is active unless the owner downloads and removes them. If the account is cancelled, we notify the owner to download them, and they are deleted with the rest of the account's data after the 90-day window. You can download your signed waivers at any time, including after cancellation.
Depending on your location, you may have the right to:
To exercise these rights, contact us at support@outfttr.com.
We use essential cookies for authentication and session management. These are necessary for the Service to function and cannot be disabled. We also use a first-party cookie to remember which page or campaign brought you to Outfttr, so we know which marketing works; it contains no personal information.
We use PostHog for product analytics on our website and in the app, so we can see which pages and steps work and where people get stuck. PostHog sets an analytics cookie on our site and processes this data on our behalf. On our public website, sign-up and setup pages, and for businesses on a free trial, we may record sessions (a replay of page views and clicks) to improve the product. Anything typed into a form is hidden from these recordings.
We never track or record the pages your guests use (payment, questionnaire, waiver, feedback and unsubscribe pages), and we do not record sessions for businesses on a paid plan. We do not use advertising cookies, and we do not sell analytics data or use it for advertising.
Text messages are optional and only go to you, the account holder. If you give us your phone number at sign-up and tick the consent box, you consent to receive text messages from Outfttr about your account: billing, booking confirmations, and service alerts. Message frequency varies based on your activity. Message and data rates may apply. Today we send no text messages; your consent is kept for when we do.
We do not send marketing or promotional text messages, and we never send text messages to your guests. Text messages, when we send them, go through Twilio.
To opt out, reply STOP to any message. To get help, reply HELP or contact us at support@outfttr.com or call (833) 202-0404. After opting out, you will receive one confirmation message and no further texts unless you re-subscribe by texting START.
Outfttr is a business tool and is not directed at children. We do not knowingly collect information from children for our own purposes, and if we learn we have, we will delete it promptly. A lodge may record guests of any age (for example a child in a family's party) as part of its business data; the lodge is responsible for that information.
Your data is hosted in the United States (AWS, through Supabase; our database is in the US East (Ohio) region), and may otherwise be processed in the United States and other countries where our service providers operate. By using the Service, you consent to this transfer.
Access by foreign authorities. Data stored in the United States may be accessible to US courts, law enforcement, and national-security authorities under US law.
For lodges (our customers). We act as your service provider under our Data Processing Agreement, which is part of our Terms and applies to every lodge. It covers our accountability for data we process on your behalf, who our service providers are, a 72-hour breach-notice commitment, and deletion at the end of the relationship. If your lodge needs a signed copy, email legal@outfttr.com.
For Québec. Personal information may be communicated outside Québec, including to service providers located in the United States. Our privacy officer is named below.
We do not offer a Canadian hosting region today. Tell us if that matters to your lodge.
We may update this Privacy Policy from time to time. We will notify you of material changes via email or a notice in the Service. The "Last updated" date at the top indicates when this policy was last revised.
Questions about this Privacy Policy? Contact us at support@outfttr.com.
Outfttr LLC
1 115th Ave
Turtle Lake, WI 54889
United States
Privacy Officer: Shad Torgerson, support@outfttr.com