Privacy Policy
Effective date: July 18, 2026
This policy explains how ScouttOpp ("we", "us", "our") collects, uses, and protects your personal information when you use our platform.
This document was drafted as a starting point and should be reviewed by a qualified legal professional before going live. It is not a substitute for legal advice.
1. Who We Are
ScouttOpp is a curated hiring platform for creative professionals based in India, serving users globally. For privacy questions or requests, contact us at privacy@scouttopp.com.
2. Information We Collect
Information you give us directly
- Candidates: full name, email address, phone number, location (city and country), timezone, pronouns, professional bio, primary role, years of experience, portfolio media and links, LinkedIn, Instagram, website, resume URL, and profile avatar.
- Employers: company name, website, LinkedIn URL, industry, company size, founding year, company bio, logo, and hiring preferences (roles, contract type, budget, urgency).
- All users: email and password, or Google OAuth identity.
Information collected automatically
- An HTTP-only session cookie to keep you logged in (strictly necessary — not used for tracking).
- Employer discovery activity: which profiles are viewed, saved, passed on, and private notes. Used to power the discovery engine and future AI-matching features.
- Page view and navigation events collected via PostHog analytics (anonymised; no advertising use).
- Standard server logs (IP address, browser type, referring URL) for security and abuse prevention.
- Profile completeness score (0–100) computed automatically to determine discovery eligibility.
Information from third parties
Google OAuth: if you sign in with Google, Google shares your name, email, and profile picture with us under Google's own terms. We use this only to create and manage your account.
Google Forms: candidate applications are submitted via Google Form. When our admin approves an application, the submitted data is imported into our database once. We do not read from Google Forms on an ongoing basis.
3. How We Use Your Information
We use the information we collect to:
- Create and maintain your account and profile.
- Operate the talent discovery platform — showing candidate profiles to approved employers whose needs match the candidate's preferences.
- Verify candidates and employers before granting platform access.
- Send transactional emails: invitations, verification results, and critical service notices. We do not send marketing emails without your consent.
- Calculate profile completeness to determine discovery eligibility.
- Enforce our Terms & Conditions, detect fraud, and prevent abuse.
- Improve platform features using aggregated, non-identifying usage data.
- Comply with applicable Indian and international law.
We do not sell your personal data or use it for advertising networks.
5. Data Retention
| Data type | Retention period |
|---|---|
| Active accounts | Retained while account is active. |
| Deleted accounts | Deleted or anonymised within 30 days. |
| Portfolio files | Deleted when you remove them or delete your account. |
| Candidate staging data | Up to 90 days after rejection, for audit purposes. |
| Server logs | Up to 90 days. |
| Employer notes | Deleted when employer deletes their account or on verified request. |
6. Your Rights
Depending on your location, you may have the right to:
- Access the personal data we hold about you.
- Correct inaccurate data — most fields are editable directly in your dashboard.
- Delete your account and data via Account Settings or by emailing us.
- Restrict certain uses of your data.
- Data portability — receive your data in a machine-readable format (JSON).
- Object to processing where we rely on legitimate interests.
India (DPDPA 2023): you have the right to access, correct, and request erasure of your personal data. EU/UK (GDPR): you may also lodge a complaint with your local supervisory authority.
To exercise any right, email privacy@scouttopp.com. We will respond within 30 days.
8. Security
- All data in transit is encrypted using TLS.
- Passwords are hashed using bcrypt and never stored in plaintext.
- Row-level security (RLS) policies ensure users can only access their own data.
- Portfolio files and avatars are stored in private buckets, served only via time-limited signed URLs.
- File uploads are validated for type, size, and content using magic-byte checks.
- Authentication endpoints are rate-limited to prevent brute-force attacks.
No system is 100% secure. In the event of a breach affecting your rights, we will notify you as required by applicable law.
9. Children's Privacy
ScouttOpp is not intended for anyone under 18. We do not knowingly collect data from children. If you believe a child has created an account, contact privacy@scouttopp.com and we will delete the account and its data promptly.
10. International Transfers
ScouttOpp is based in India. Your data may be processed in data centres outside your country (including where Supabase, Vercel, and PostHog host their infrastructure, primarily in the United States). By using the platform, you consent to these transfers. We take steps to ensure compliance with applicable data protection law.
11. Changes to This Policy
We may update this Privacy Policy at any time. We will update the effective date at the top of this page and, for material changes, notify you by email or platform notice at least 14 days before they take effect. Continued use after the effective date constitutes acceptance of the revised policy.
12. Contact & Grievance Officer
For any privacy questions, requests, or complaints:
ScouttOpp
Privacy: privacy@scouttopp.com
Support: support@scouttopp.com
Grievance Officer: grievance@scouttopp.com
In accordance with the IT Act 2000 and applicable Indian law, our Grievance Officer will acknowledge complaints within 24 hours and resolve them within 15 working days.