Legal

Privacy Policy

Effective date: placeholder — pending legal review

1. Data Controller

Scout ("we", "us", "our") is the data controller for personal data collected through this platform. Our data is stored in the European Union (Supabase EU region).

For data protection enquiries, contact: privacy@scouthq.io.

2. What We Collect

Candidates: name, email address, location, work history, skills, languages, working rights, CV files, and any other information you add to your profile.

Recruiters: name, email address, company name, billing information (processed by Stripe — we do not store card details), and job postings.

All users: authentication data, session information, and usage logs.

3. How We Use It

We use your data to provide the Scout service: matching candidates with job opportunities, enabling recruiters to review applications, and processing subscription payments.

We do not sell your personal data to third parties. We do not use your data for automated decision-making that produces legal or similarly significant effects.

4. Legal Basis (GDPR Art. 6)

Contract performance (Art. 6(1)(b)) — processing necessary to provide the service you signed up for.

Legitimate interests (Art. 6(1)(f)) — fraud prevention, platform security, and service improvement.

Legal obligation (Art. 6(1)(c)) — retaining billing records as required by applicable law.

5. Data Retention

Candidate profile data is retained for as long as your account is active. You may request deletion at any time (see Your Rights below).

Billing records are retained for the period required by applicable tax law (typically 7 years). Usage logs are retained for 90 days.

6. Your Rights

Under GDPR, you have the right to: access your personal data, correct inaccurate data, request erasure ("right to be forgotten"), data portability, and object to processing based on legitimate interests.

To exercise any of these rights, email privacy@scouthq.io. We will respond within 30 days.

7. Cookies

We use strictly necessary cookies for authentication and session management. See our Cookie Policy for details.

8. Third-Party Processors

We share data with the following processors under data processing agreements: Supabase (database and auth, EU region), Stripe (payment processing), and Resend (transactional email).

9. Contact

For privacy concerns or to exercise your rights: privacy@scouthq.io.

You also have the right to lodge a complaint with your national data protection authority.

This document is a placeholder pending legal review. It does not constitute legal advice.