Privacy Policy

1. Introduction

ScoutScore ("we", "us", "our") operates the website at scoutscore.ai and related APIs, SDKs, and services (collectively, the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

2. Information We Collect

2.1 Information You Provide

• Account information: When you create an account, we collect your name, email address, and authentication credentials.
• Service claims: If you claim ownership of a service listed on ScoutScore, we collect domain ownership verification details.
• Payment information: If you subscribe to a paid plan, payment processing is handled by Stripe. We do not store your full credit card number.
• Communications: When you contact us, we collect the content of your messages.

2.2 Information from Third-Party Services

• Twitter/X: If you connect your Twitter/X account, we receive your public profile information (username, display name, profile image) and your Twitter/X user ID as provided by the Twitter/X API. We do not access your direct messages, and we do not post to your account without your explicit permission.
• GitHub: If you sign in via GitHub, we receive your public profile information (username, avatar, email) as authorized during the OAuth flow.

2.3 Information Collected Automatically

• Usage data: We collect information about how you interact with our Service, including pages visited, features used, and API calls made.
• Device and browser data: We may collect your IP address, browser type, operating system, and device identifiers.
• Analytics: We use Vercel Analytics to understand usage patterns. This data is aggregated and does not personally identify you.

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the Service
• Authenticate your identity and manage your account
• Process transactions and send related notifications
• Display trust scores and service metadata on the ScoutScore leaderboard and API
• Communicate with you about updates, security alerts, and support
• Detect, investigate, and prevent fraudulent or unauthorized activity
• Comply with legal obligations

4. How We Share Your Information

We do not sell your personal information. We may share your information in the following circumstances:

• Service providers: We share data with third-party vendors who help us operate the Service (e.g., Stripe for payments, Vercel for hosting, Neon for database services).
• Public service data: Trust scores, service metadata, and publicly available endpoint information are displayed on our leaderboard and accessible via our API. This data is derived from publicly available sources.
• Legal requirements: We may disclose information if required by law, regulation, legal process, or governmental request.
• Business transfers: In connection with a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

5. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Service. If you request account deletion, we will delete your personal data within 30 days, except where we are required to retain it for legal or compliance purposes. Publicly indexed service data (trust scores, endpoint metadata) derived from public sources may be retained independently of your account.

6. Data Security

We implement appropriate technical and organizational measures to protect your personal information, including encryption in transit (TLS), secure database access controls, and regular security reviews. However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

7. Your Rights and Choices

Depending on your jurisdiction, you may have the following rights:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete data.
• Deletion: Request deletion of your personal data.
• Portability: Request your data in a structured, machine-readable format.
• Withdraw consent: Where processing is based on consent, you may withdraw it at any time.
• Disconnect third-party accounts: You can disconnect linked accounts (Twitter/X, GitHub) from your ScoutScore settings at any time. We will stop receiving data from those services upon disconnection.

To exercise any of these rights, contact us at privacy@scoutscore.ai.

8. Cookies and Tracking

We use essential cookies to maintain your session and authentication state. We use Vercel Analytics for aggregated usage metrics. We do not use third-party advertising trackers or sell data to advertisers.

9. Children's Privacy

The Service is not directed to individuals under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected such information, we will take steps to delete it promptly.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence, including the United States. These countries may have data protection laws that differ from your jurisdiction. By using the Service, you consent to the transfer of your information to these countries.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page with a revised "Last updated" date. Your continued use of the Service after changes constitutes acceptance of the updated policy.

12. Contact Us

If you have questions about this Privacy Policy or our data practices, contact us at: privacy@scoutscore.ai