1. Who processes the data
The data controller is Outrun Media FZCO (reg. No. DMCC823103, trade licence No. DMCC-789012, Dubai, UAE), operating under the Outrun Media brand ("we"). Data requests — via the bot @OutrunMedia_Bot or the manager @Outrun_Manager.
This policy covers the website https://outrun-media.com, the Telegram bot @OutrunMedia_Bot and chats with the team on Telegram.
2. What data we collect
Candidates — bot application
- Name and country of residence.
- Telegram username and account ID.
- Answers to application questions.
- Where you came from: the site button label and UTM tag, if the link had one.
Buyers — during cooperation
- Chats with the team, reports, screenshots and campaign stats.
- Country of tax residence and tax status — for the agreement and tax records.
- Payout details: a USDT wallet address or bank card details you provide yourself. The full card number is not entered in the agreement — it is sent to the manager in a separate private message.
- Credit and payout history.
- An ID document — only where applicable law requires it.
Website visitors
- Technical data your browser sends when loading pages: IP address, browser type, referring page. This is received by the site's hosting provider and by Google Fonts.
- The site uses no advertising or analytics cookies — see the cookie policy.
3. Purposes and legal bases
| Purpose | Legal basis |
|---|---|
| Review the application and reply | Candidate's consent |
| Concluding the agreement, training and support | Performance of contract |
| Calculations and payouts | Performance of contract |
| Tax and accounting records | Legal obligation |
| Fraud prevention | Legitimate interest |
| Understand which sources bring candidates | Legitimate interest |
| Website operation and security | Legitimate interest |
4. Who we share data with
We don't sell personal data or share it with third parties for their own marketing. Data is processed only by services we can't work without:
- Telegram — the bot and chats run on it.
- The hosting provider (servers in the EU) — runs the site and the bot and stores applications.
- Google Fonts — technical data when pages load.
- Banks, payment and crypto services — only the details and amounts needed for a payout.
- Affiliate programs — campaign statistics only, no personal details.
- Public authorities — only upon a lawful request.
These services may be located in different countries, including outside yours. We transfer only the data needed for the purposes above. Where applicable law requires safeguards for transfers to a country without adequate protection, we apply them — standard contractual clauses or equivalent.
5. How long we keep data
- Applications from candidates who did not start cooperation — up to 12 months.
- Buyer data — for the duration of cooperation and afterwards for as long as applicable accounting and tax laws require.
- Payout details — deleted within 30 days after final settlement unless the law requires otherwise.
- Website technical logs — under the hosting provider's rules, usually no longer than 30 days.
After these periods, data is deleted or anonymized.
6. Your rights
You can request access to your data, its correction or deletion, restrict processing, object to processing based on legitimate interest, receive your data in a machine-readable format, and withdraw consent. Withdrawing consent doesn't affect the lawfulness of processing before withdrawal.
Send requests via the bot @OutrunMedia_Bot or to the manager @Outrun_Manager. We reply within 30 days. You also have the right to lodge a complaint with the data protection authority in your country.
7. Data security
Only staff who need data for their work have access to it. Data is encrypted in transit, team accounts use two-factor authentication, databases are backed up regularly and data no longer needed is deleted. Payout details are never posted in group chats. We never ask for passwords, SMS codes, or access to your wallets or cards.
If a breach may affect your rights, we will notify you without undue delay and no later than 72 hours after discovery: what happened, which data is affected, what we did and what we recommend you do. Where applicable law requires, we will also notify the supervisory authority.
8. Age
We work only with people aged 18 and over and don't knowingly collect data from minors. If such data reaches us, we delete it.
9. Changes to this policy
We may update this policy. The current version is always published on this page with its update date. Buyers are notified of material changes via the bot @OutrunMedia_Bot.