OUT

Privacy Policy

Last updated: March 2026

OUT is a weekly email newsletter that curates local events for subscribers in European cities. This policy explains what personal data we collect, why we collect it, and how we handle it.

1. Who is responsible for your data?

OUT is operated by André Barros. For data-related questions, contact us at: privacy@barrosbuilds.com

2. What data we collect

When you sign up, we collect:

Email address — to send you the newsletter
City — to select local events for you
Group type (just me, couple, family, friends) — to tailor recommendations
Interests (e.g. music, arts, food) — to select relevant events
Availability (weekends, weekday evenings, both) — to filter event timing
Budget — to filter events within your price range

Over time, we also collect:

Email engagement — whether you clicked events or gave thumbs up/down feedback, used to improve future recommendations

We do not collect any other personal data. We do not collect your name, location, IP address, or any sensitive personal data.

3. Why we collect it (legal basis)

We process your data on the basis of your explicit consent (GDPR Article 6(1)(a)). You gave this consent by checking the consent box on the signup form. You can withdraw consent at any time by unsubscribing (see Section 6).

4. How long we keep your data

We keep your data for as long as you are subscribed to OUT. If you unsubscribe, your data is retained for up to 30 days before permanent deletion, to handle any in-flight email sending or technical delays.

5. Who we share your data with

We use the following third-party services to operate OUT:

Resend (resend.com) — email delivery. Your email address is shared with Resend to send you emails.
Supabase (supabase.com) — database hosting. Your signup data is stored in a Supabase PostgreSQL database on EU infrastructure.
Anthropic (anthropic.com) — AI email generation. Your profile (city, interests, budget, group type) is sent to Anthropic's API to generate personalised email content. No email addresses are shared with Anthropic.

We do not sell your data to any third parties.

6. Your rights

Under GDPR, you have the right to:

Access the data we hold about you
Correct inaccurate data
Delete your data (right to erasure)
Withdraw consent at any time
Object to processing

7. How to unsubscribe or delete your data

Unsubscribe: click the unsubscribe link at the bottom of any OUT email. This immediately stops all future emails and deletes your data within 30 days.

Data deletion request: email privacy@barrosbuilds.com and we will delete all your personal data within 30 days and confirm deletion by email.

8. Cookies

OUT does not use cookies. The signup page and email links do not set any cookies on your device.

9. Changes to this policy

If we make material changes to this policy, we will notify you by email before the changes take effect.

Questions? Contact us at privacy@barrosbuilds.com