Privacy Policy

Scoutly (“we,” “us,” or “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our mobile applications (iOS and Android), website, and related services (collectively, the “Platform”).

This Privacy Policy complies with the Personal Information Protection and Electronic Documents Act (PIPEDA) in Canada, Quebec’s Law 25, the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA/CPRA), and other applicable privacy laws in the United States.

Effective Date: March 2026

2.1 Account Data

When you create an account, we collect:

• Full name
• Email address
• Phone number
• City, province/state, and country

2.2 Profile Data

If you register as a Scout, we additionally collect:

• Business name and description
• Industry selection (from our 14 supported industries)
• Social media links (LinkedIn, Instagram, TikTok, website)
• Showcase content (service descriptions, pricing details)

2.3 Usage Data

We automatically collect information about how you interact with the Platform:

• Showcase views, favourites, and replies
• Search queries and filters applied
• Pages visited and features used
• Session duration and frequency

2.4 Device & Technical Data

• Device type, operating system, and version
• Browser type (for web users)
• IP address and approximate location
• Unique device identifiers

2.5 Payment Data

Subscription and boost payments are processed by trusted third-party payment processors. We do not store your credit card numbers, bank account details, or other financial instrument data. We receive only transaction confirmations, subscription status, and billing identifiers from these providers.

3.1 Directly from You

When you create an account, complete your profile, create showcases, submit support requests, or communicate with us.

3.2 Automatically

Through cookies, analytics tools, and similar technologies when you use the Platform. This includes usage patterns, device information, and performance data.

3.3 From Third Parties

We may receive information from third-party service providers that assist with payment processing, authentication, and platform operations, including payment confirmations and subscription status.

We process your personal information based on the following legal grounds:

• Consent — When you voluntarily provide information or opt in to certain features (e.g., marketing communications)
• Contract Performance — To provide the services you have requested and fulfill our obligations under our Terms of Service
• Legitimate Interests — To improve our Platform, prevent fraud, ensure security, and conduct analytics, where these interests do not override your privacy rights
• Legal Obligations — To comply with applicable laws, regulations, legal processes, or enforceable governmental requests

We use the information we collect to:

• Account Management — Create, maintain, and secure your account; verify your identity via email and phone
• Showcase Display — Display scout profiles and showcases to users searching for services in their area
• Algorithm & Ranking — Rank showcases based on engagement metrics including views, favourites, and replies to surface the most relevant results
• Payment Processing — Process subscription payments and boost purchases through our third-party payment processors
• Communications — Send transactional emails (account verification, payment confirmations, subscription updates) and, with your consent, promotional communications
• Safety & Fraud Prevention — Detect, investigate, and prevent fraudulent, unauthorized, or illegal activity on the Platform
• Analytics & Improvement — Understand usage patterns, improve features, fix bugs, and develop new functionality

We do not sell your personal information. We may share your information in the following circumstances:

6.1 With Other Users

Your public profile information, showcase content, and reviews are visible to other Platform users. Scout profiles include business name, industry, description, social links, and showcase details.

6.2 With Service Providers

We share data with trusted third-party service providers who assist in operating the Platform, including providers for payment processing, hosting, authentication, analytics, and content delivery. These providers are contractually obligated to protect your information and may only use it to perform services on our behalf.

6.3 For Legal Requirements

We may disclose your information if required by law, subpoena, court order, or governmental request, or when we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

6.4 Business Transfers

In the event of a merger, acquisition, reorganization, or sale of assets, your personal information may be transferred as part of that transaction. We will notify you of any such change.

We use cookies and similar tracking technologies on our website to:

• Essential Cookies — Enable core functionality such as authentication and security
• Analytics Cookies — Help us understand how visitors use the Platform so we can improve it
• Preference Cookies — Remember your settings and preferences (e.g., language selection)

You can manage your cookie preferences through your browser settings. Disabling certain cookies may affect Platform functionality. Our mobile applications (iOS and Android) do not use browser cookies but may use similar device-level identifiers for analytics.

We retain your personal information for as long as necessary to fulfill the purposes described in this policy:

• Active account data — Retained for as long as your account is active
• Deleted accounts — Personal data is purged within 30 days of account deletion, except where retention is required by law
• Transaction records — Retained for 7 years to comply with tax and financial reporting obligations
• Support tickets — Retained for 3 years after resolution
• Analytics data — Aggregated and anonymized data may be retained indefinitely

We implement appropriate technical and organizational measures to protect your personal information, including:

• Encryption of data in transit (TLS/SSL) and at rest
• Secure authentication with email and phone verification
• Access controls limiting employee access to personal data
• Regular security assessments and monitoring
• Secure infrastructure hosted by industry-leading providers

Breach Notification

In the event of a data breach that poses a real risk of significant harm, we will notify affected individuals and relevant authorities in accordance with applicable law:

• Canadian users — Within 72 hours, as required by PIPEDA and applicable provincial legislation
• U.S. users — Without unreasonable delay, in accordance with applicable state breach notification laws

Under PIPEDA and applicable provincial privacy legislation, Canadian residents have the following rights:

• Right of Access — Request access to the personal information we hold about you
• Right of Correction — Request correction of inaccurate or incomplete personal information
• Right to Withdraw Consent — Withdraw your consent to the collection, use, or disclosure of your personal information, subject to legal or contractual restrictions
• Right to Complain — File a complaint with the Office of the Privacy Commissioner of Canada (OPC)

Province-Specific Rights

• Quebec (Law 25) — Additional rights including data portability, the right to de-indexation, and enhanced consent requirements for automated decision-making
• Alberta & British Columbia (PIPA) — Substantially similar rights under provincial Personal Information Protection Acts

To exercise your rights, contact us at privacy@scoutlyhq.com. We will respond within 30 days.

California (CCPA/CPRA)

California residents have the right to:

• Know — Request disclosure of the categories and specific pieces of personal information we have collected
• Delete — Request deletion of personal information we have collected, subject to certain exceptions
• Opt-Out of Sale — Direct us not to sell your personal information (we do not sell personal information)
• Non-Discrimination — Not receive discriminatory treatment for exercising your privacy rights
• Correct — Request correction of inaccurate personal information
• Limit Use of Sensitive Personal Information — Limit how we use sensitive personal information (where applicable)

Other U.S. States

Residents of Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), and other states with comprehensive privacy laws may have similar rights including access, deletion, correction, opt-out of targeted advertising, and the right to appeal a denial of a privacy request. Contact us to exercise these rights.

Scoutly does not sell your personal information. We do not exchange personal information for monetary or other valuable consideration. We do not share personal information for cross-context behavioral advertising.

If you wish to submit a “Do Not Sell or Share” request for compliance purposes, you may do so by emailing privacy@scoutlyhq.com with the subject line “Do Not Sell My Personal Information.”

The Platform is not intended for individuals under the age of 18. We do not knowingly collect personal information from children under 18. If we become aware that we have collected personal information from a child under 18, we will take steps to delete that information promptly. If you believe a child has provided us with personal information, please contact us at privacy@scoutlyhq.com.

Scoutly operates in Canada and the United States. Your personal information is stored and processed on servers located in North America. If you access the Platform from outside these regions, your information may be transferred to, stored, and processed in Canada or the United States.

Data may be transferred between Canada and the United States as necessary to provide the Platform. Both countries maintain adequate data protection frameworks, and we implement appropriate safeguards for all cross-border transfers.

Scout profiles may contain links to external websites, including social media profiles (LinkedIn, Instagram, TikTok) and business websites. These third-party sites have their own privacy policies and practices, and we are not responsible for their content or privacy practices.

We encourage you to review the privacy policies of any third-party sites you visit through links on the Platform.

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. When we make material changes, we will notify you by:

• Posting the updated policy on the Platform with a revised effective date
• Sending a notification via email or in-app message for significant changes

Your continued use of the Platform after the effective date of any changes constitutes your acceptance of the updated Privacy Policy.

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Privacy Inquiries: privacy@scoutlyhq.com
General Legal: legal@scoutlyhq.com
Website: scoutlyhq.com

Data Protection Officer: dpo@scoutlyhq.com

For Canadian privacy complaints, you may also contact the Office of the Privacy Commissioner of Canada at www.priv.gc.ca.