Privacy Policy

Account details. Your name and work email address. If you sign up with a password, we store only a salted hash of it, never the password itself. If you sign in with Google, we receive your name, email address and profile picture from Google.

Work data from the tools you connect. Only what the alerts need: issue keys, titles, status, assignee, dates, priority and blocked-by links, plus pull request, review and CI status from GitHub. We never store issue descriptions or code. We check comments only to see whether you were mentioned and are waiting on a reply.

Connection credentials. The OAuth tokens that let us read from your tools, and from Slack if you connect it. Tokens are encrypted at rest.

Your settings and actions. Notification preferences, time zone, and what you snooze, handle or star.

Technical data. A session cookie that keeps you signed in, and standard server logs (such as IP address and browser) kept briefly for security and debugging. We do not run advertising or analytics trackers.

• To build your Brief, rank what needs you, and send your digest and alerts.
• To draft status updates and messages when you request them.
• To run your account, take payment for paid plans, and send service emails such as sign-up and password reset.
• To send optional product tips and trial reminders. You can switch these off in Settings or with the unsubscribe link in any such email.
• To keep the service secure and fix problems.

We do not sell your data, and we do not use your project data to train AI models.

If you choose “Continue with Google”, we request only your basic profile: name, email address and profile picture. We use it to create your account and sign you in, and for nothing else. We do not request access to your Gmail, Drive, Calendar or any other Google service.

Lookouts' use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

We use a small number of service providers to run Lookouts. They process data only on our behalf:

• DigitalOcean. Cloud hosting and data storage (Frankfurt, Germany)
• Resend. Sending our emails (account, digest and alert emails)
• OpenAI. Generating AI drafts (status updates and nudges) when you ask for one
• Slack. Delivering your digest and alerts to your own Slack account, if you connect it
• Lemon Squeezy. Payments and subscriptions, if you upgrade to a paid plan

Some of these providers are based outside your country, including in the United States. We share data with them only as needed for the purpose above. We may also disclose information if the law requires it.

Lookouts asks for read-only access to Linear and Jira, and read access to pull request, review and CI status on GitHub without access to repository contents. We never create, edit or comment on your issues. The one write we make is registering a Jira webhook so changes arrive quickly. In Slack we can only send you direct messages. We cannot read your Slack messages or channels.

We keep your data while your account is open. Disconnecting a tool deletes everything we synced from it. Deleting your account removes your workspace, connections and synced data. Short-lived technical records, such as webhook logs and old activity, are deleted automatically within about 60 days. Backups held by our database provider are overwritten on their normal schedule.

Tokens are encrypted at rest, traffic uses HTTPS, and incoming webhooks are verified. No system is perfectly secure, but we work to protect your data and will tell you about a breach that affects you as the law requires. More detail is on our security page.

You can ask us to access, correct, export or delete your personal data, and to object to or restrict how we use it. Depending on where you live (for example under the GDPR or California law), you may have additional rights. Most things you can do yourself in Settings. For anything else, email us and we will respond within a reasonable time. You can also complain to your local data protection authority.

We use one essential cookie to keep you signed in, and your browser stores your light or dark theme choice locally. We do not use advertising or tracking cookies.

Lookouts is for working professionals and is not intended for anyone under 16. We do not knowingly collect their data.

If we change this policy in a way that matters, we will update the date above and, for significant changes, tell you by email or in the app.