Privacy policy
Last updated 2026-10-21. This policy covers this website and the waitlist. The Outlatch service has its own data processing terms, summarised at the end.
Who we are
SEOlith LLC ("we", "us") operates Outlatch and this website, and is the controller of the personal data described here. Contact: privacy@outlatch.com.
What we collect
If you only read the website
We set no cookies and run no analytics, advertising or tracking scripts. Our hosting provider, Cloudflare, processes standard request data (such as your IP address and browser type) to deliver the site and protect it from attacks. Your colour-theme choice is stored in your browser's local storage on your device and is never sent to us.
If you join the waitlist
You give us your email address (required), organisation size, mail platform and consent, and optionally your name, role, organisation, which compliance frameworks apply, and a short note. We also store, for abuse prevention only, a keyed hash of your IP address. We cannot recover your IP address from the hash, and we delete the hash after 30 days.
If you email us
We keep the message and your address for as long as needed to respond and keep a record of the conversation.
Why we use it, and our legal basis
- Waitlist and pilot contact: your consent, which you can withdraw at any time. Withdrawing does not affect earlier processing.
- Running and securing the site (including the IP hash and rate limiting): our legitimate interest in keeping the site secure and free of abuse.
- Replying to your enquiries: our legitimate interest in responding, or steps you ask us to take before a contract.
We do not sell personal data, do not share it for advertising, and do not use it for automated decisions about you.
Who receives it
Our service provider Cloudflare, Inc. hosts the site and stores waitlist data (Cloudflare Workers and D1) and routes email to our team. Our staff with a need to contact you can access waitlist entries. We do not use other processors for the waitlist.
International transfers
Cloudflare operates globally, so data may be processed in the United States and other countries. Where required, transfers rely on Cloudflare's data processing terms, which incorporate Standard Contractual Clauses, and on the EU-US Data Privacy Framework where available.
How long we keep it
- Waitlist entries: until you ask us to delete them, or 24 months after sign-up if we have not been in touch, whichever comes first.
- IP hash: 30 days.
- Emails to us: as long as needed for the conversation, then deleted or archived for legitimate business records.
Your rights
Depending on where you live (for example under the GDPR, UK GDPR or California law) you may have the right to access, correct, delete or export your personal data, to object to or restrict processing, and to withdraw consent. Email privacy@outlatch.com and we will respond within one month. You can also complain to your data protection authority.
Security
The site is served over HTTPS only, with a strict content security policy. Waitlist data is stored in an access-controlled Cloudflare account. See our security page.
The Outlatch service
When an organisation uses Outlatch, it is the controller of its employees' data and SEOlith LLC acts as its processor under a data processing agreement. By design the service receives keyed hashes of recipient addresses, domains, signal codes, scores and timestamps, and not message bodies, subjects or plain recipient addresses. Details are in the agreement and on our security page.
Children
This site is for businesses and is not directed at children.
Changes
We will post changes here and update the date above. For material changes affecting waitlist members we will email you.