Privacy Policy

Last updated: 1 October 2026

OutsourceHub24 is a trading name of Marketercore Ltd, a company registered in England and Wales (company number 13420440), registered office: 128 City Road, London EC1V 2NX, United Kingdom.

This policy explains what personal data Marketercore Ltd collects when you use OutsourceHub24, why, and your rights. We are the data controller. Contact: support@outsourcehub24.com.

What we collect

Account data: name, email, password (stored only as a salted hash), and optional two-factor settings.
Business profile and briefs: the information you give us so we can produce your jobs, and the files we deliver.
Payments: bundle, amount and payment status, and when you confirmed at checkout (or when turning on auto top-up) that you want work to start straight away. Card details go straight to Stripe; we never see them. If you choose to save a card when you pay, Stripe keeps it for one-click buying (and auto top-up only if you switch it on); we store only the card brand and the last 4 digits. You can remove the card any time in Credits & billing.
Usage and security data: sign-in times, device type, IP address, a random device identifier (the on_dev cookie), and security events (for example failed sign-ins).
Past free-trial checks: we no longer offer a free trial and no longer collect these details. If you started a free trial before it ended, we keep the check made at the time (your name, birth year, the last 4 digits of your phone, your IP address and country, a short device summary, and coded (hashed) versions of your email, phone, name, date of birth, card and device identifiers) for the period shown below, only to prevent fraud.
Analytics (only if you accept analytics cookies): pages viewed and buttons used, linked to a random identifier.
Support messages you send us.
Voice messages: if you press Speak in "Describe it", your browser or phone turns your speech into text using its own speech service (Chrome and Android use Google's, Safari and iPhone use Apple's), and the text appears in the box for you to check before you send it. We only receive the text you choose to send. Where your browser can't do this, the recording may be sent to one of our AI service providers to turn it into text; we don't keep the recording.
WhatsApp number (optional): only if you switch on WhatsApp reminders under Account → Profile. We use it only to remind you before unused credits expire. Switch the reminders off (or clear the number) at any time and we delete it.
Request checks: to keep our service within the law and our AI providers' usage rules, we record when a request is refused or checked by our team (the reason, a short extract of the words that triggered it, and the decision).
AI agents you build: your agents' names, instructions, documents and settings, and your own conversations with them.
Your agents' visitors (you are the controller): when your agent answers people on its public chat link or your website, we process their messages, the replies, any details they choose to leave and the page they chatted from, on your behalf as your processor. See "AI agents, public chat links and website chat" in the Terms of Service.
Chat assistant: the questions you type into the website chat. To write an answer they are sent to our AI service providers along with passages from our help pages; we don't store the conversation. If you choose "Talk to a person", the chat so far is attached to your support request.

Why we use it (and our legal basis)

To provide the service and deliver your jobs, contract.
To take payments, keep accounting records and prevent fraud, legal obligation and legitimate interests.
To keep accounts secure (sign-in alerts, rate limits, abuse controls), legitimate interests.
To stop referral abuse and keep the records of past free-trial checks, legitimate interests (preventing fraud).
To send transactional emails (receipts, job updates, security alerts and credit-expiry reminders), contract. Optional announcements follow your notification preferences.
To send credit-expiry reminders on WhatsApp, consent (you switch them on, and can switch them off at any time).
To check requests and prevent misuse of the service, legitimate interests (keeping the service lawful and within our providers' rules).
To understand and improve the product, consent (analytics cookies) or legitimate interests (aggregate service metrics).

We use trusted processors, under contract, only to run the service:

Our AI service providers, to create and check your work from what you tell us, and to write your AI agents' replies. They process it on our behalf under contract, and they don't use your content to train their models.
Stripe, payments and refunds.
Resend, sending email.
Meta (WhatsApp Business), sending credit-expiry reminders on WhatsApp, only if you switch them on.
Amazon Web Services (London region), hosting and backups.
Google Fonts, web fonts (your browser requests these from Google).

Some processors may handle data outside the UK; where they do, appropriate safeguards (such as standard contractual clauses) apply. We never sell your data.

Confidentiality and no AI training

Your briefs, files and finished work are confidential. Our staff and processors are bound by confidentiality.
We never use your content to train AI models, and our AI service providers don't use it to train theirs.
We never show your work as a sample or in our marketing without your permission.
See our Confidentiality & NDA terms, which apply automatically to every customer.

How long we keep it

Account and job data: while your account is open. When you delete your account from Account → Privacy, it is closed: you are signed out, can no longer sign in and we stop emailing you, but we keep the account record, your jobs and files so it can be reopened if you ask. To have your personal data erased as well, email support@outsourcehub24.com and we will erase your profile, briefs, files, contact details and saved card (payment records excepted, see below).
Past free-trial check records: 2 years from the check, even if you delete your account, then deleted.
Request-check records and credit-reminder records: 2 years, then deleted (sooner if your personal data is erased).
AI agent conversations and leads: for the period chosen for each agent (3, 6 or 12 months; 12 by default), then deleted automatically, and straight away when the agent or account is deleted.
Payment and credit records: 6 years, as UK law requires, then deleted.
Sign-in sessions: up to 30 days (14 days if unused). Security events: 180 days. Error logs: 90 days. Analytics: 13 months. Sent-email records: 30 days.
Backups: overwritten within 14 days.
Deleting a job's files: the account owner or a manager can delete a job's files from its page at any time (Delete this job's files). The delivered files, every version, review links and files attached to its messages are removed straight away, and from backups as they are overwritten within 14 days. The job record, credits and invoice are kept. You can also ask us to delete any of your content and we'll do it within 30 days.

Your rights

You can access, correct, export, restrict, object to, or delete your data. Most of this is self-service: Account → Privacy lets you download everything we hold about you and delete (close) your account. To have your personal data erased, or for anything else, email support@outsourcehub24.com. You can also complain to the UK Information Commissioner's Office (ico.org.uk).

Cookies

See our Cookie Policy.

Children

The service isn't for anyone under 18.

Changes

We'll post updates here and tell you about significant changes by email or in the app.