PRIVACY POLICY

1. INTRODUCTION

SPECTRA ("we," "our," or "us") is operated by Project Outcast. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website at spectra.projectoutcast.com and use our social media open-source intelligence (OSINT) platform (the "Service").

By accessing or using the Service, you agree to this Privacy Policy. If you do not agree with the terms of this policy, please do not access or use the Service.

2. INFORMATION WE COLLECT

2.1 Information You Provide

• Search Queries: Usernames and profile identifiers you submit for analysis.
• Third-Party Credentials: If you provide Instagram session IDs or Twitter/X authentication tokens, these are used exclusively to perform lookups on your behalf. These credentials are held in server memory only for the duration of your active session and are never written to disk, logged, or stored persistently.

2.2 Information Collected Automatically

• Log Data: IP address, browser type, operating system, referring URLs, pages visited, and timestamps of access.
• Analytics Data: We use Google Analytics to collect anonymized usage statistics including page views, session duration, and general geographic location. Google Analytics uses cookies to collect this information.
• Cookies: We use strictly necessary cookies for session management. Analytics cookies are used by Google Analytics as described above.

2.3 Information We Do NOT Collect

• We do not require account registration.
• We do not collect names, email addresses, phone numbers, or payment information.
• We do not store search results or investigation data. All analysis results are returned to you in real time and are not persisted on our servers.
• We do not build profiles or dossiers on investigated subjects.
• We do not store your third-party platform credentials beyond the duration of your active session.

3. HOW WE USE YOUR INFORMATION

We use the information we collect for the following purposes:

• To provide, operate, and maintain the Service.
• To process your search queries and return intelligence results.
• To monitor and analyze usage trends to improve the Service.
• To detect, prevent, and address technical issues and security threats.
• To comply with legal obligations and respond to lawful requests from public authorities.

4. THIRD-PARTY SERVICES

Our Service interacts with the following categories of third-party services:

• Analytics: Google Analytics (subject to Google's Privacy Policy).
• Hosting: Our Service is hosted on Railway. Your interactions with the Service are subject to Railway's infrastructure.
• Social Media Platforms: When you use the Service, it retrieves publicly available data from third-party platforms such as Instagram (Meta) and Twitter/X. We are not affiliated with, endorsed by, or partnered with any of these platforms.

We do not sell, rent, trade, or otherwise transfer your personal information to third parties for their marketing purposes.

5. DATA RETENTION

• Session Credentials: Held in server memory only during your active session. Purged when the session ends or the server restarts.
• Search Results: Temporarily cached in server memory for performance (typically under 15 minutes). Never written to persistent storage.
• Server Logs: Retained for up to 90 days for security and diagnostic purposes, then automatically deleted.
• Analytics Data: Retained by Google Analytics per their standard retention policies.

6. DATA SECURITY

We implement reasonable administrative, technical, and physical security measures to protect your information, including:

• Encryption of all data in transit via TLS/HTTPS.
• In-memory only processing of sensitive credentials (no disk persistence).
• Rate limiting and input validation on all API endpoints.
• Security headers (X-Content-Type-Options, X-Frame-Options, Referrer-Policy, etc.).
• CORS restrictions to prevent unauthorized cross-origin requests.

However, no method of electronic transmission or storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee its absolute security.

7. YOUR RIGHTS

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Access: Request a copy of any personal data we hold about you.
• Rectification: Request correction of inaccurate data.
• Erasure: Request deletion of your personal data.
• Restriction: Request that we restrict processing of your data.
• Data Portability: Request a copy of your data in a machine-readable format.
• Objection: Object to our processing of your data.

Since SPECTRA does not require registration and does not persistently store user data, the practical scope of these rights is limited. If you wish to exercise any of these rights or have questions, contact us at leen@projectoutcast.com.

8. INTERNATIONAL DATA TRANSFERS

Our servers may be located in different jurisdictions. By using the Service, you consent to the transfer of your information to facilities outside your country of residence, where data protection laws may differ. We take reasonable steps to ensure your data is treated securely and in accordance with this Privacy Policy.

9. CHILDREN'S PRIVACY

The Service is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from anyone under 18 years of age. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at leen@projectoutcast.com and we will take steps to delete such information.

10. CHANGES TO THIS PRIVACY POLICY

We reserve the right to update this Privacy Policy at any time. Changes will be effective immediately upon posting the revised policy on this page with an updated "Last updated" date. Your continued use of the Service after any changes constitutes your acceptance of the revised policy. We encourage you to review this page periodically.

11. CONTACT US

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at: