Legal

Privacy Policy

Last updated: August 9, 2026

This policy explains what data Scoutedly collects, why we process it, where it is stored, and what rights you have. We process only the data needed to provide the service: finding business contacts from open sources, analyzing companies, and sending personalized emails from your mailbox.

1. Who we are

Scoutedly is a B2B client acquisition system: it searches for potential clients from open sources, analyzes them, drafts personalized emails, sends them from your mailbox, and follows up. If you have questions about this policy, contact us: oleksii@conversai.xyz.

2. What data we process

• Account data — email address, name, company name, billing information and subscription status.
• Campaign data — the offer text you provide, search parameters, lists of found companies (name, contact info, public data from their websites), generated emails, and your edits to them.
• Your mailbox access — when you connect Gmail or an SMTP mailbox, we store the connection (OAuth token or credentials) in encrypted form and use it only to send and read email on your behalf, as you configure.
• Usage and technical data — pages visited, actions in the interface, IP address, browser type, and technical logs needed for security and debugging.

3. Why we process data

• To provide and operate the service you signed up for (performance of the contract);
• To send emails on your behalf and manage replies (your instructions);
• To ensure security, prevent abuse, and comply with legal obligations;
• Legitimate interest in improving the product and providing support.

4. Where data is stored and processed

We use trusted third-party services, each bound by its own privacy commitments:

• Supabase (PostgreSQL, authentication) — stores your account and campaign data;
• Vercel — hosting and delivery of the web application;
• AI providers (DeepSeek, OpenAI, Google Gemini) — process text (company data, email drafts) to generate analyses and letters; we send only the text needed for the task, no credentials;
• Search providers (Serper, Google Places) — used to find companies from open sources;
• Gmail / your SMTP provider — sending and receiving email through your own mailbox.

5. Cookies

We use cookies and local storage to keep the service working and remember your preferences:

• Session and authentication cookies — keep you signed in;
• scoutedly-theme — remembers your light/dark theme choice;
• scoutedly-locale — remembers your language;
• Consent storage — remembers your choice about this cookie notice.

You can block or delete cookies in your browser settings at any time. Blocking essential cookies may affect how the service works.

6. Retention

We keep account and campaign data while your account is active and for as long as needed to comply with legal obligations. You can ask us to delete your data at any time — see Section 8.

7. Security

Data is transmitted over encrypted connections. Mailbox credentials are stored in encrypted form, and server-side secrets are never exposed to the browser. Access to data is limited to what each component needs.

8. Your rights

Depending on your jurisdiction (including GDPR), you have the right to:

• access the data we hold about you;
• request correction or deletion of your data;
• object to or restrict processing;
• receive your data in a portable format;
• withdraw consent at any time.

To exercise any of these rights, write to oleksii@conversai.xyz. We respond within 30 days.

9. Changes to this policy

We may update this policy as the service evolves. The current version is always available at this page, with the date of the last update shown above.