AB Testing / Legal
Privacy Policy
1. Information we process
1.1 Depending on how you use AB Testing, we may process account identifiers, creator profile information, test questions and alternatives, images or URLs supplied for testing, votes and response metadata, creator configuration and consent records, confidentiality settings, billing and transaction information, country/state or province/postal code, technical request information used for security and duplicate-response controls, support communications, product analytics events, and legal-acceptance records such as the authenticated account identifier, accepted Terms and Privacy Policy versions, acceptance timestamp, document identifiers or hashes, IP address, user-agent information, Cloudflare request identifiers, and coarse country code where available.
2. Why we use information
2.1 We use information to provide and secure tests; authenticate creators; process responses; calculate results; provide AI evaluation when authorized; recruit or manage respondents where requested; process payments and applicable taxes; prevent fraud, abuse, duplicate voting, scraping, and unauthorized access; enforce our Terms; moderate prohibited or high-risk content; comply with legal obligations; and understand and improve the service.
3. Billing and location information
3.1 We may request your country, state/province or region, and postal code to determine billing jurisdiction, tax treatment, service availability, and compliance obligations. We do not require precise GPS location for ordinary creator onboarding. Payment providers may separately collect billing-address information and other transaction signals under their own policies.
4. Content safety and moderation
4.1 Questions, options, URLs, images, account activity, and related metadata may be processed by automated rules, classifiers, fraud systems, and, where necessary, authorized human reviewers to detect prohibited content, safety risks, illegal activity, rights violations, or misuse. Content may be blocked, limited, quarantined, or removed based on these checks. We aim to limit review of private or confidential research to what is reasonably necessary for safety, security, legal compliance, or enforcement.
5. Public, unlisted, private, and confidential content
5.1 How test material is exposed depends on the creator-selected mode. Public tests may intentionally be available to the public. Unlisted tests are intended to be accessed through their link but should not be treated as secret solely because the URL is hard to guess. Private and Confidential modes use additional access, indexing, crawler, participant, and result-sharing controls where available. We do not intentionally place private or confidential test content into public sitemaps, public directories, advertising datasets, or unrelated training datasets.
6. Guest voting
6.1 Guest voters may participate without an account when the selected test mode permits it. Their response is recorded and may be associated with pseudonymous browser or technical signals used to reduce duplicate or abusive voting. Confidential Research may require additional identity, eligibility, or confidentiality acknowledgments before content is shown.
7. Human research and confidentiality
7.1 Human respondents necessarily receive the test material required to make the requested decision. Outland.Work LLC can restrict access and impose confidentiality obligations, but cannot guarantee that an authorized person will never remember, photograph, copy, or wrongfully disclose information after viewing it.
8. AI and agent processing
8.1 Human-only research and AI evaluation are separate permissions. We do not intentionally send confidential test material to an AI evaluator merely because the service supports AI features. If a creator expressly selects AI or human-plus-AI evaluation, Outland.Work LLC may transmit the minimum test material necessary to the selected model route or approved third-party model provider to perform that evaluation.
9. AI training and unrelated reuse
9.1 We do not use private or confidential customer research content to train or fine-tune unrelated AB Testing models or create unrelated commercial datasets without an additional lawful basis and permission where required. Selecting AI evaluation or AI-generated reporting authorizes the processing needed to perform that selected feature; it does not by itself authorize unrelated model training. General product analytics should not contain raw private research content. Security, fraud, and quality telemetry is limited to information reasonably necessary for those purposes.
10. Sensitive information
10.1 The standard self-service product is not intended for protected health information, biometric identifiers, precise geolocation, highly sensitive financial credentials, government identification numbers, passwords or authentication secrets, or information collected from children. Regulated or high-risk research may require additional review, controls, contractual terms, or may be declined.
11. Service providers and disclosures
11.1 We use service providers to operate AB Testing, including Cloudflare for hosting, database, networking and security functions; Clerk for account authentication; Stripe and related payment or tax services for checkout and billing; PostHog or similar tools for product analytics; AWS services for transactional email and related infrastructure; panel or recruiting providers for managed human research; and selected AI-model providers when a creator expressly authorizes AI evaluation or analysis. Providers receive only the information reasonably necessary for their function and process it subject to applicable contractual and legal restrictions. We may also disclose information when required by law, to protect the service or users, to investigate fraud or abuse, or in connection with a merger, financing, acquisition, or sale of all or part of the business, subject to applicable law.
12. Security
12.1 We use access controls, anti-bot systems, rate limits, crawler classifications, machine-readable content-use signals, security logs, and similar measures to reduce unauthorized access, scraping, fraud, and abuse. No system can guarantee absolute security.
13. Retention
13.1 We retain information only for as long as reasonably necessary for the purpose for which it was collected and for legitimate security, fraud-prevention, billing, tax, dispute, backup, contractual-evidence, and legal-compliance purposes. Active account and research records are generally retained while the account or study remains in use. Billing, tax, transaction, security, abuse-prevention, and legal-acceptance records may be retained longer where reasonably necessary to establish transactions, enforce agreements, prevent repeated abuse, resolve disputes, or meet legal obligations. Backups may persist for a limited period after deletion from active systems. Deleting the AB Testing copy cannot delete material independently copied outside the service.
14. Your choices and rights
14.1 You may request access, correction, deletion, portability, restriction, objection, or other privacy rights available under applicable law through the contact channel identified on the AB Testing site. Marketing communications are optional and can be declined or unsubscribed without affecting transactional or service messages. We may need to verify your identity before fulfilling a request. Some information may be retained where required or permitted by law.
15. Children
15.1 AB Testing is intended for adults. Creator accounts and paid research participation are not intended for people under 18. Do not use the standard product to intentionally collect personal information from children.
16. International use
16.1 If you use AB Testing from outside the country where our systems or service providers operate, information may be transferred and processed across borders subject to applicable safeguards and legal requirements.
17. Changes
17.1 We may update this policy as the service evolves. Material changes will be posted with a new effective date and, where appropriate, additional notice.
18. Operator and contact
18.1 Outland.Work LLC operates AB Testing and is responsible for the processing described in this policy, subject to applicable law and any separate agreement. Privacy questions, rights requests, and concerns about research content may be submitted through the contact channel identified on the AB Testing site.