Privacy Notice

Last updated: September 2026

This notice explains how personal data is handled when you use Outcome OS (the "Service") and this website. It is written to meet the requirements of the EU General Data Protection Regulation (GDPR) and Spanish data protection law.

1. Who is responsible

Mesero Labs SL (NIF B24873507, Avenida Alfonso el Sabio, 23, 03004 Alicante, Spain) is the controller of personal data processed to provide the Service, except where this notice says otherwise. Contact: info@mesero-tpv.es.

2. What we collect

• Account information: name, email address, login details and account settings.
• Prompts and uploaded content: the instructions, text, files and other material you submit to the Service.
• AI generations: the output produced for you, and related information such as which model was used and how many credits were consumed.
• Payment and billing information: purchase history, credit balance, and billing details such as country and tax information. Card and payment details are collected and processed by Paddle, not stored by us.
• Technical and security logs: IP address, device and browser information, timestamps and error records, used to operate and protect the Service.
• Support communications: messages you send us.

This website does not use analytics or advertising cookies.

3. Why we use it, and our legal bases

• To provide the Service, including running your AI tasks, keeping your history and managing credits. Legal basis: performance of our contract with you.
• Billing, tax and accounting. Legal basis: contract, and compliance with legal obligations.
• Security, fraud prevention and abuse prevention, including enforcing our acceptable use rules. Legal basis: our legitimate interest in keeping the Service safe.
• Support and service communications. Legal basis: contract and legitimate interest.
• Improving the Service using aggregated usage information. Legal basis: legitimate interest.
• Anything else for which we ask your consent, which you can withdraw at any time.

4. AI model training

We do not use your prompts, uploaded content or generations to train Outcome OS models unless you explicitly opt in.

5. Who we share it with

We do not sell your personal data. We share it only with service providers who help us run the Service, under contracts that limit their use of it:

• Third-party AI providers, which receive your prompts and content to generate output. Their handling and retention of that data is governed by their own terms and data processing commitments, and may differ between providers.
• Paddle (Paddle.com Market Ltd and its affiliates), our reseller and Merchant of Record, which processes payments, invoicing, tax and refunds. Paddle acts as an independent controller for the payment data it collects; see Paddle's own privacy notice.
• Cloudflare, which provides hosting, content delivery and security for this website and parts of the Service.
• Storage and infrastructure providers, which host our databases and files.
• Authorities or other parties where required by law or needed to protect rights and safety.

6. International transfers

Some of these providers process data outside the European Economic Area, including in the United States. Where that happens we rely on appropriate safeguards, such as an adequacy decision (including the EU–US Data Privacy Framework where the provider is certified) or the European Commission's Standard Contractual Clauses.

7. How long we keep it

Retention periods depend on account status, service requirements and applicable legal obligations. We keep account data and content while your account is active, delete or anonymise it within a reasonable period after you close your account or ask us to delete it, and keep billing records for as long as tax and accounting law requires.

8. Security

We use technical and organisational measures to protect personal data, including encryption in transit and restricted access. No system is completely secure, and we will notify you and the authorities of a personal data breach where the law requires.

9. Your rights

Subject to the conditions in the GDPR, you have the right to:

• access your personal data and receive a copy of it;
• correct inaccurate data;
• have your data deleted;
• receive your data in a portable format (export);
• restrict or object to certain processing, including processing based on legitimate interests;
• withdraw consent at any time, where processing is based on consent.

To make a request, including a deletion or export request, email info@mesero-tpv.es from the address linked to your account. We may need to verify your identity before acting on it.

You can also complain to the Spanish data protection authority, the Agencia Española de Protección de Datos (www.aepd.es), or to the authority in the country where you live.

10. Children

The Service is not intended for anyone under 18, and we do not knowingly collect their personal data.

11. Changes to this notice

We may update this notice. The date at the top shows when it last changed, and we will tell you about material changes through the Service or by email.