Privacy Policy

Account and usage data: name, email, organization, role, and in-product activity (pages viewed, features used, plans generated) needed to operate and improve the Service.

Customer Data: the legacy-system exports, connection metadata, and derived analysis (graphs, classifications, plans) a Customer uploads or connects to Scout. Customer Data may include personal data about the Customer's own end users or employees if present in the systems analyzed — Customer is the data controller for that data, and Maxis processes it as a data processor / service provider under Customer's instructions.

Billing data: handled by our payment processor (Stripe); we retain only the subscription and invoice metadata needed for account management, not full card numbers.

Cookies: see Section 6 below.

• To provide, secure, and support the Service.
• To process billing and enforce subscription entitlements.
• To send account, security, and billing notifications.
• To improve the Service, including via aggregated, de-identified usage analysis.
• To comply with legal obligations and enforce our Terms of Service.

Environments can be configured with a residency mode controlling how long extracted data and classification findings are retained, and an administrator can trigger immediate deletion of findings, annotations, and collections for an environment at any time. Retention and disposition policies are configurable per organization under Compliance settings.

Depending on your location, you may have the right to access, correct, export, or request deletion of your personal data, and to object to or restrict certain processing. Scout supports a formal right-to-be-forgotten (data-subject request) workflow: an organization administrator or compliance officer can submit an erasure request for a data subject, which is tracked against a committed SLA (30 days by default) until fulfilled. To exercise these rights, contact your organization's Scout administrator or reach us via our contact form.

We do not sell personal data. We share data with subprocessors who help us operate the Service (cloud hosting, payment processing, email delivery, and — where a Customer opts in — the Alchemize migration platform for downstream conversion work), each bound by contractual confidentiality and data-protection obligations, and as required by law.

Scout uses strictly necessary cookies to keep you signed in and to remember your cookie preference. Where analytics or other non-essential cookies are used, they are only set after you accept the cookie banner shown on your first visit; you can change your choice at any time via the "Cookie preferences" link in the site footer. Rejecting non-essential cookies does not affect your ability to use the Service.

We use encryption in transit and at rest for sensitive data (including AES-256-GCM for stored credentials), role-based access control, and audit logging of security-relevant actions. No method of transmission or storage is 100% secure, but we work to protect data using industry-standard practices.

Data may be processed in countries other than where it originated. Where required, we rely on appropriate safeguards (such as standard contractual clauses) for cross-border transfers.

We may update this Policy from time to time; material changes will be notified via the Service or email at least 30 days before taking effect.

Questions about this Policy or a data-subject request can be sent via our contact form. See also our Terms of Service.