OutcomeOS

  Privacy policy

How we handle your data.

Last updated · May 15, 2026

OutcomeOS ("we", "us", "OutcomeOS") is operated by Abhisek Bose. This page explains what data we collect when you use outcomeos.online and the connected services, why we collect it, who we share it with, and what rights you have.

If anything here is unclear, email hello@outcomeos.online.

1. What we collect

1.1 Account data

  • Your name and email address, captured by our identity provider (Clerk) when you sign up
  • Authentication state, OAuth provider identifiers (if you sign in via Google), and session metadata
  • Optional onboarding data: your experience band (years of experience), AI-outcome goal, and confidence rating

1.2 Assessment data

  • Every quiz attempt: questions shown, answers selected, time taken
  • Computed scores and the 4-cluster skill breakdown
  • Personalized study suggestions generated by AI based on your wrong answers
  • Real-task simulator submissions: code you wrote, AI chat history within a simulator session, and the 5-dimension score we computed
  • Cohort enrollment records and capstone submissions, if you join a cohort

1.3 Payment data

We do not store your payment card information. Subscriptions are handled by Clerk Billing, which uses Stripe as the underlying payment processor. We store only the subscription status (active / canceled / refunded) and the timestamp of the last billing event.

1.4 Usage and device data

  • IP address (used only at request time for rate limiting; not persistently stored alongside your account)
  • User agent (browser type) for the same reason
  • Vercel-collected analytics: aggregate page views, no individual tracking

1.5 What we do NOT collect

  • We do not run third-party advertising trackers (no Google Analytics, no Facebook Pixel, no LinkedIn Insight Tag)
  • We do not sell your data to anyone for any purpose
  • We do not access your email inbox or external services beyond what's required to sign you in

2. How we use your data

  • Provide the service: show your scores, persist your attempts, run the AI mentor, mint your Skill Passport on cohort graduation
  • Personalize study suggestions: we send your wrong answers and cluster scores to our AI provider (Groq) so it can generate per-cluster suggestions
  • Send transactional email: sign-up confirmation, weekly drill nudges (Vercel cron + Resend), capstone graded emails. You can opt out of non-essential emails at any time.
  • Aggregate benchmarks: we publish anonymized, aggregated score distributions on /benchmarks. Individual users are never identifiable in these aggregates.
  • Display you on the public leaderboard if you rank in the top entries — first name + last initial only, never your full name or email

3. Who we share with (sub-processors)

We use the following sub-processors. Each receives only the data required to perform its function:

We do not share data with sub-processors outside this list. If we add a new one, this page will be updated with a new "last updated" date.

4. Data sent to AI providers

When you use the AI mentor, the personalized-suggestions feature, or the real-task simulator, the following is sent to Groq:

  • Your most recent quiz scores and cluster breakdown
  • The specific questions you got wrong (without your personal info)
  • Your chat messages and the AI's replies, for the mentor
  • The code you submitted, for the simulator
  • A rolling summary of your conversation history with the mentor

Per Groq's terms, your data is not used to train their models. We do not send your name, email, or any PII to Groq beyond what's required for the request.

5. Where your data lives

  • Primary database: MongoDB Atlas (cluster region: AWS us-east-1)
  • Hosting: Vercel (edge-distributed, originating from AWS regions)
  • Authentication: Clerk (multi-region)

If you are located in the EU/UK and require data residency in your region, contact us and we will work with you on a case-by-case basis.

6. How long we keep it

  • Active account data: kept while your account is active and for up to 90 days after deletion (for backup integrity and dispute resolution)
  • Anonymized aggregate scores: kept indefinitely in the benchmarks dataset (your identity is removed)
  • Issued Skill Passports: signed credentials are retained as long as the credential is publicly referenced (so third-party verifiers continue to work)
  • Backups: rolling 30-day backups maintained by MongoDB Atlas, encrypted at rest

7. Your rights

You have the right to:

  • Access your data — request a full export by emailing hello@outcomeos.online
  • Correct inaccurate data — update your name and email in your account dashboard
  • Delete your account and all associated data — send us a deletion request and we will execute it within 30 days
  • Object to any specific processing (we will stop unless we have a legal basis to continue)
  • Withdraw consent for marketing emails at any time (the unsubscribe link is in every email; transactional emails are not opt-out-able while your account is active)
  • Port your data to another service in machine-readable JSON

8. Cookies

We use the minimum cookies required for the service to function:

  • Clerk session cookies — to keep you signed in
  • Vercel essentials — for routing + edge cache

We do not use third-party advertising cookies. We do not require a cookie banner because we only use strictly-necessary cookies under EU/UK ePrivacy guidance.

9. Children

OutcomeOS is intended for working professionals. We do not knowingly collect data from anyone under 16. If you believe a minor has created an account, email us and we will delete it.

10. Changes to this policy

If we make material changes, we will update the "Last updated" date above and email active subscribers. Continued use of the service after a change constitutes acceptance.

11. Contact

For any privacy-related question, email hello@outcomeos.online or write to:

Abhisek Bose, OutcomeOS
India

See also: Terms of Service