Better Outcomes
Sign in

Privacy

What we hold, why, and what you can ask for.

Last updated 12 November 2026. We apply one set of rules everywhere rather than a different standard per country, and where two rules differ we follow the stricter one. Questions, or any request about your own data: privacy@betteroutcomes.ai.

Who we are

Two different jobs, and the difference matters.

Better Outcomes sells consulting done by agents. We handle information in two quite different roles, and your rights run differently in each.

For our own business — your account, your sign-in, your invoices, the people we talk to at your company — we decide what is held and why. In data protection language we are the controller, and this page is our notice to you.

For your business data — what an agent reads in your systems, what it writes, what it remembers about your customers — you decide and we act on your instructions. We are the processor. The terms of that work are in the data processing agreement, which also lists every company that helps us do it.

Our contact address for privacy is privacy@betteroutcomes.ai. We have not appointed a data protection officer; we are small enough that the owner answers these himself.

What we hold

Four kinds of thing, and nothing else.

Your account
Your name, work email, company, role, and the sign-in codes we email you. A code works once and expires quickly.
What you tell us about your business
The answers you give at intake, the evidence you upload, the numbers behind a recommendation. This is the raw material of the work.
What your agents did
When an agent ran, which one, whether it succeeded, how long it took, what it cost, and whether that run touched personal data. We do not keep the text of a run. Not a sample of it, not a redacted version — the record is the facts about the run and not its contents.
What the agent remembers
An agent keeps a memory about your business so it does not ask you the same thing twice. Every entry carries the source it came from; nothing is remembered without one.
What we never hold
Card numbers — our payment provider holds those and we never see them. Passwords and keys to your systems — an agent is given a scoped grant that expires, never a password.

Why we are allowed to

The permission behind each use.

To provide what you bought
Running your account, your agents and your engagement. We need this to perform our contract with you.
To take payment and keep records
Invoices, tax and accounting records. We are obliged by law to keep these.
To keep the service safe and working
Sign-in security, abuse prevention, limits that stop an agent doing more than it should. This is our legitimate interest in running a service that does not harm anyone.
To make the agents better
Our own people review what an agent decided and record the lesson. How that works, and the one consent it needs from you, is in the next section and in the terms.
What we do not do
We do not sell your information, we do not share it for anyone else's advertising, and we do not use it to train a general-purpose AI model. When an agent calls a model, we instruct the provider not to keep the text and not to train on it.

Learning across clients

What pools, and what never does.

Our agents get better because our own people correct them, and we keep the lesson. Some of those lessons are kept in a shared record so every client's agent benefits, and you should know exactly what that record contains.

It holds three things: the business function the question was about, the answer that turned out to be right, and a short code for why the answer changed. That is all.

It never holds your name, your words, your evidence or your numbers. Your reviewer's note, the case it came from and every figure stay with your account alone.

The same line applies to questions asked of your own data: we learn that a kind of question is common — that many clients ask which days are worst — and never the question, the answer or the figure.

Using the service means agreeing to this shared learning. If you would rather your corrections stayed with your account only, tell us and we will agree it in your contract; your agent then learns from you alone.

Who sees it

A short list, and every look is logged.

The people you give access to
Your own team, with the roles you set.
Our reviewers
A named Better Outcomes person signs off the work an agent does. A lesson cannot be recorded without a named person behind it.
One client can never see another
This is not a promise, it is a test we run on a real database before every release, and it passes.
If you came through a partner
Your partner is your supplier and sees your account. Better Outcomes staff do not open a partner's client conversations unless the partner asks, or security or the law requires it, and the access is logged.
The companies that help us run
Payments, email, model hosting and our server. Each one is named, with what it does and where it is, in the data processing agreement.

Where it goes

The work is global, so the data crosses borders.

Better Outcomes is run from Dubai and our server is in the United Arab Emirates. To do the work, information reaches a small number of companies in other countries — a payment provider, a mail host, and the companies that host the AI models our agents call.

Where we send information outside the country it was collected in, we do it under a written contract that binds the recipient to the same protection, or because you asked us to, or because we must to perform our contract with you. Every recipient, its country and what it does is listed in the data processing agreement, which also carries our instruction to every model host to keep nothing and train on nothing.

We would rather tell you this plainly than bury it: our fallback model providers are not all in the same jurisdiction as our primary one. The subprocessor list names each one and its country so you can decide whether that works for you.

How long

The keeping rules.

Your business records
What we hold to do an engagement is deleted at the end of it plus thirty days.
engagement + 30 days
The agent's memory
Kept while your account is open, because it is what stops the agent asking you the same thing twice. It goes when the account goes.
life of the account
The audit log
Who did what and when, so a question about the past can be answered.
12 months
Run records
Evidence about agent runs is read over a rolling thirty-day window, and never includes the text of a run.
30 days
Invoices and tax records
Kept for as long as the law where we are established requires.
as required by law

Your rights

What you can ask, and what happens.

You can ask us for a copy of what we hold about you, to correct it, to delete it, to give it to you in a form you can take elsewhere, to stop a particular use, or to object to it. Write to privacy@betteroutcomes.ai.

We answer within one month. If a request is genuinely complicated we will tell you inside that month and say when we will finish.

Two things we want to be straight about. Deleting a person works today and we test it: removing someone takes their facts, their history and every lesson learned only from them. Producing everything we hold about one named person is still partly a manual job — we will do it, by hand where we must, and we are building the route that makes it quick.

How a request is handled step by step, and what we do if information is ever exposed, is set out on your rights and our breach process.

If we get it wrong you can complain to us first, and then to the data protection authority where you are.

The rest

Children, changes, and security.

Children
This is a service sold to businesses. It is not for children and we do not knowingly hold a child's information. If you believe we do, write to us and we will remove it.
Security
How we protect it, what we have tested and what we have not, is in the information security policy. We publish what we fail as well as what we pass.
Changes
If we change this page we will tell you before the change applies to you, and the date at the top will change.