Privacy Policy

Last updated: 2026-07-17 · Operator: SignalScout (contact support@scout.nuits.net)

This Privacy Policy describes how SignalScout (“we”, “us”) processes personal data when you use https://scout.nuits.net and related services (the “Service”).

1. Who we are

SignalScout is operated as a software product at scout.nuits.net. For privacy requests email support@scout.nuits.net. Update this section with your registered legal entity name and postal address before enterprise sales.

Payments for credit packs are processed by Polar as Merchant of Record (tax collection and customer receipts for the sale). Polar’s privacy terms also apply to checkout data they process as MoR.

2. Data we collect

• Account: email address, user id, credit balance, account creation time.
• Authentication: single-use magic-link tokens (15 minutes), signed session cookie (ss_session, 30 days, HttpOnly).
• Usage: run history (workflow type, units charged, status, timestamps), credit ledger entries (grants/consumes with reasons).
• Inputs you provide: lead lists (company, domain, optional name/role), product/value-prop text, competitor domains, free-sample form fields. Treat any personal data in those inputs as customer-controlled content.
• Free-tool abuse control: IP address + calendar day counter (rate limit).
• Technical logs: request path, status, latency (Cloudflare Workers logs). Optional error monitoring via Sentry when configured.
• Payments: handled by Polar (email, payment method, tax location). We store purchase metadata needed to grant credits (order id, credit amount).

3. Why we process data (purposes & legal bases)

• Provide the Service (account, auth, research runs, credits) — contract / legitimate interests.
• Security & abuse prevention (Turnstile, IP free limits, rate limits) — legitimate interests.
• Billing & accounting — legal obligation / contract (via Polar MoR + our ledger).
• Support & product improvement — legitimate interests.

We do not sell personal data. We do not scrape or resell contact databases. You bring your own lists.

4. Subprocessors

We use the following processors to operate the Service (see also Terms § Subprocessors):

• Cloudflare — hosting (Workers, D1, Durable Objects), DNS, Turnstile, TLS.
• Polar — checkout, tax, receipts (Merchant of Record).
• Resend — transactional magic-link email.
• OpenRouter — model API routing for research agents (and underlying model providers OpenRouter routes to).
• Exa / Firecrawl — public-web research tools used by agents.
• Sentry (optional) — error monitoring when SENTRY_DSN is set.

5. International transfers

Infrastructure and AI providers may process data in the United States and other countries. Where required, we rely on appropriate transfer mechanisms offered by those providers (e.g. SCCs) and contractual DPAs.

6. Retention

• Magic-link tokens: 15 minutes, single-use.
• Session cookie: 30 days (or until logout / account deletion).
• Free-usage IP counters: daily buckets.
• Account, runs, ledger: until you delete your account (or we close the Service).
• Polar retains its own payment/tax records per its policies as MoR.

7. Your rights

Depending on your location (including GDPR/UK GDPR/CCPA), you may have rights to access, correct, export, delete, object, or restrict processing. In the product you can:

• Export your account, runs, and ledger (JSON) from the app.
• Delete your account (erases user, tokens, runs, and ledger rows we hold).
• Log out (clears the session cookie).

Email support@scout.nuits.net for other requests. We aim to respond within 30 days (or sooner where law requires).

8. Cookies

We use a single essential session cookie (ss_session) after sign-in. Cloudflare may set security cookies related to Turnstile. We do not use third-party advertising cookies by default. If analytics are added later, EU visitors will get a consent mechanism for non-essential cookies.

9. Children

The Service is for business users 18+. We do not knowingly collect data from children.

10. Changes

We may update this policy. Material changes will be reflected by the “Last updated” date and, where appropriate, a notice in the product.

11. Contact

support@scout.nuits.net · SLA expectation: email reply within 2 business days for support.