Privacy Policy

Last revised: April 16, 2026

1. Introduction

Outlier Humans Inc ("Outlier Humans", "We", "Us", "Egma" or "Our") is a technology company dedicated to safeguarding the personal data of its users. We are the owner and operator of Egma. This Privacy Policy outlines how we collect, use, store, share, and protect your personal information when you access or use our websites, products, services, and applications (collectively, the "Services").

We are committed to complying with applicable data protection laws and regulations, including the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), the Digital Personal Data Protection Act 2023 (India), and other relevant privacy legislation.

2. Information We Collect

2.1 What We Collect

• Identity Information: Your name, username, and identifiers provided during registration.
• Contact Information: Email address, phone number, and other contact details.
• Business Information: Your medspa name, location, services offered, and provider details that you share for AI configuration.
• Billing Information: Payment details and transaction history.
• Call Data: Call recordings, transcripts, and booking data generated through our phone AI service.
• Automatically Collected Information: Device information, IP address, browser type, pages viewed, and other technical data.

2.2 How We Collect

• Cookies: We use cookies and similar tracking technologies to improve your experience.
• Phone Calls: Calls handled by our AI are recorded and transcribed to provide the service and improve quality.
• Web Forms: Information you voluntarily provide through our websites.

2.3 Purpose

• To provide and operate our phone AI service, including answering calls and booking appointments.
• To personalize and improve your experience.
• To analyze usage patterns and improve our products.
• To comply with applicable laws and regulations.

2.4 Security

We implement reasonable technical, administrative, and organizational security measures to protect your personal information. These include encryption of data in transit and at rest, access controls, and regular security assessments. However, no method of transmission is completely secure.

We retain your personal information only as long as necessary to fulfill the purposes for which it was collected.

3. Third-Party Links

Our Services may contain links to third-party websites. We are not responsible for the privacy practices of third-party sites. We encourage you to review their privacy policies.

4. Your Rights

Depending on your location, you may have the following rights:

• Access: Request access to your personal information.
• Erasure: Request deletion of your personal information.
• Rectification: Request correction of inaccurate information.
• Data Portability: Receive your data in a machine-readable format.
• Withdraw Consent: Withdraw consent at any time.
• Object: Object to processing based on legitimate interests.
• Complaint: Lodge a complaint with a data protection authority.

To exercise any rights, contact us at team@outlierhumans.com.

5. Data Sharing

We will not sell or lease your personal information. We may share data with:

• Service Providers: Cloud hosting, payment processors, and AI model providers who are contractually obligated to protect your data.
• Legal Purposes: Where required by law or to protect rights and safety.
• Business Transfers: In the event of a merger or acquisition.

6. HIPAA Compliance

Egma's phone AI handles calls for medical spas. While medical spas may not always be covered entities under HIPAA, we take patient privacy seriously. We do not store or transmit protected health information (PHI) beyond what is necessary to provide our booking and call handling services. Call recordings and transcripts are stored securely and access is restricted.

7. Regional Rights

California (CCPA): California residents have the right to opt out of the sale of personal information (we do not sell your data), request disclosure of collected information, and request deletion.

India: Your data is protected under the Digital Personal Data Protection Act 2023. You have the right to access, correct, and request deletion of your data.

UK/EEA: Your data is protected under GDPR. We process data on the basis of legitimate interests, contractual necessity, consent, or legal obligation.

8. Changes to This Policy

We may revise this Privacy Policy periodically. Material changes will be posted on our website with a revised date. Continued use constitutes acceptance.

9. Contact

For questions or concerns about this Privacy Policy, contact us at: team@outlierhumans.com