Scouty | Your Personal AI Event Scout

1. Introduction

This Privacy Policy describes how Scouty (“Company,” “we,” “us,” or “our”) collects, uses, discloses, and protects your personal information when you access or use our website at meetscouty.com, our messaging integrations, applications, and any related services (collectively, the “Services”).

We are committed to protecting your privacy and handling your personal information in compliance with applicable privacy legislation, including Canada's Personal Information Protection and Electronic Documents Act (PIPEDA), the European Union's General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and other applicable provincial, state, and international privacy laws.

By accessing or using the Services, you acknowledge that you have read, understood, and agree to the collection, use, and disclosure of your personal information as described in this Privacy Policy. If you do not agree, please discontinue use of the Services immediately.

2. Information We Collect

We collect personal information in several ways, depending on how you interact with the Services:

2.1 Information You Provide Directly

When you use the Services, you may provide the following types of information:

Contact information — your name, phone number, email address, and messaging platform identifiers.
Communications — messages, queries, feedback, and any other content you send to or through the Services.
Preferences and interests — event preferences, search criteria, location preferences, and other information about the types of events you are interested in.
Account information — any information provided when creating or managing an account, including authentication credentials.
Payment information — if applicable, billing details and payment method information processed through third-party payment processors.
Any other information — you voluntarily provide in the course of using the Services.

2.2 Information Collected Automatically

When you access or use the Services, we may automatically collect certain information, including:

Device information — device type, operating system, browser type and version, screen resolution, and unique device identifiers.
Usage data — pages visited, features used, interactions with the Services, messages sent and received, events viewed, matches accepted or declined, and timestamps of activity.
Log data — IP address, access times, referring URLs, and other standard server log information.
Location data — approximate geographic location inferred from your IP address or, where applicable, more precise location information if you provide it or if your device settings permit.
Performance data — information related to the performance of the Services, including error reports and diagnostic data.

2.3 Information from Third-Party Sources

We may receive information about you from third-party sources, including:

Messaging platforms — profile information, contact details, and message content provided through platforms you use to interact with the Services.
Authentication providers — information from single sign-on or identity verification services.
Public sources — publicly available information relevant to the Services.
Business partners — information from partners, affiliates, or service providers in connection with the Services.

3. How We Use Your Information

We use the information we collect for the following purposes:

Providing and operating the Services — processing your preferences, discovering and matching events, delivering notifications, and responding to your communications.
Personalization — tailoring recommendations, content, and experiences to your interests and preferences.
Improving the Services — analyzing usage patterns, conducting research, and developing new features, products, and services.
Analytics and insights — generating aggregated, anonymized, or de-identified data products, analytics, and insights derived from usage and event data.
Communications — sending service-related messages, updates, security alerts, and support communications.
Marketing — with your consent where required, sending promotional communications about our Services, features, or offers.
Safety and security — detecting, investigating, and preventing fraudulent, unauthorized, or illegal activity, and protecting the rights, property, and safety of the Company and our users.
Legal compliance — complying with applicable laws, regulations, legal processes, or enforceable governmental requests.
Business operations — supporting our internal business operations, including auditing, data analysis, and troubleshooting.

4. Legal Bases for Processing (GDPR)

If you are located in the European Economic Area (EEA), the United Kingdom, or Switzerland, we process your personal data based on the following legal bases:

Consent — where you have given us explicit consent to process your personal data for specific purposes. You may withdraw your consent at any time by contacting us.
Contractual necessity — where processing is necessary for the performance of a contract with you or to take steps at your request prior to entering into a contract.
Legitimate interests — where processing is necessary for our legitimate business interests, such as improving the Services, preventing fraud, and ensuring security, provided these interests are not overridden by your data protection rights.
Legal obligation — where processing is necessary to comply with a legal obligation to which we are subject.

5. Disclosure of Your Information

We may share your personal information in the following circumstances:

Service providers — with third-party vendors, contractors, and service providers who perform services on our behalf, including messaging delivery, AI processing, cloud hosting, data storage, analytics, error monitoring, and payment processing. These providers are contractually obligated to protect your information and use it only for the purposes for which it was disclosed.
AI providers — your messages and preferences may be processed by third-party artificial intelligence providers to operate the Services. We select providers with appropriate data protection standards.
Business transfers — in connection with any merger, acquisition, reorganization, sale of assets, or bankruptcy, your personal information may be transferred as part of the transaction. We will notify you of any such change.
Legal requirements — when required by law, regulation, legal process, or governmental request, or when we believe in good faith that disclosure is necessary to protect our rights, protect your safety or the safety of others, investigate fraud, or respond to a government request.
Aggregated or de-identified data — we may share aggregated, anonymized, or de-identified information that cannot reasonably be used to identify you, for any purpose, including research, analytics, and industry insights.
With your consent — in other circumstances where you have provided your explicit consent to the disclosure.

We do not sell your personal information to third parties. For the purposes of the CCPA, we do not “sell” or “share” (as those terms are defined under the CCPA) your personal information.

6. Cookies and Tracking Technologies

Our website may use cookies, web beacons, pixels, and similar tracking technologies to collect usage data and improve the Services. These technologies may include:

Essential cookies — necessary for the operation of the website and cannot be disabled.
Analytics cookies — used to collect anonymized data about how visitors use our website, helping us improve the user experience.
Functional cookies — used for error monitoring and performance optimization.

We do not use advertising cookies or third-party tracking pixels for targeted advertising purposes. You can manage your cookie preferences through your browser settings. Disabling certain cookies may affect the functionality of the Services.

7. Data Security

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include, but are not limited to:

Encryption of data in transit using TLS/SSL protocols.
Encryption of sensitive data at rest in our database systems.
Access controls and authentication mechanisms to limit access to personal data.
Regular security assessments and monitoring of our systems.

However, no method of transmission over the internet or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security. In the event of a data breach that poses a risk to your rights and freedoms, we will notify affected individuals and applicable regulatory authorities as required by law.

8. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes for which it was collected, including to provide the Services, comply with our legal obligations, resolve disputes, and enforce our agreements. The specific retention period depends on the nature of the data and the purposes for which it is processed.

When your personal information is no longer required for these purposes, we will securely delete or anonymize it. Anonymized data that can no longer be associated with you may be retained indefinitely for analytical and research purposes.

To request deletion of your personal data, contact us at hello@meetscouty.com. We will process your request within thirty (30) days, subject to any legal obligations requiring us to retain certain information.

9. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal information:

9.1 Rights Under PIPEDA (Canada)

Under Canada's Personal Information Protection and Electronic Documents Act, you have the right to:

Access your personal information held by us and be informed of its use and disclosure.
Challenge the accuracy and completeness of your personal information and have it amended as appropriate.
Withdraw your consent to the collection, use, or disclosure of your personal information, subject to legal or contractual restrictions.
File a complaint with the Office of the Privacy Commissioner of Canada if you believe your privacy rights have been violated.

9.2 Rights Under GDPR (European Economic Area, UK, Switzerland)

If you are located in the EEA, United Kingdom, or Switzerland, you have the following rights under the General Data Protection Regulation:

Right of access — to obtain confirmation of whether we are processing your personal data and to request a copy of that data.
Right to rectification — to request correction of inaccurate or incomplete personal data.
Right to erasure — to request deletion of your personal data in certain circumstances.
Right to restriction of processing — to request that we limit the processing of your personal data in certain circumstances.
Right to data portability — to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit it to another controller.
Right to object — to object to the processing of your personal data based on legitimate interests or for direct marketing purposes.
Right to withdraw consent — to withdraw your consent at any time where we rely on consent as the legal basis for processing.
Right to lodge a complaint — to file a complaint with a supervisory authority in your country of residence.

9.3 Rights Under CCPA (California)

If you are a California resident, you have the following rights under the California Consumer Privacy Act:

Right to know — to request information about the categories and specific pieces of personal information we have collected about you, the categories of sources, the business purposes for collection, and the categories of third parties with whom we share your information.
Right to delete — to request deletion of your personal information, subject to certain exceptions.
Right to opt-out — to opt out of the “sale” or “sharing” of your personal information. As noted, we do not sell or share your personal information.
Right to non-discrimination — to not be discriminated against for exercising your privacy rights.
Right to correct — to request correction of inaccurate personal information.

To exercise any of these rights, please contact us at hello@meetscouty.com. We will respond to your request within the timeframes required by applicable law. We may need to verify your identity before processing your request.

10. International Data Transfers

Scouty operates from Canada. Your personal information may be transferred to, stored in, and processed in Canada, the United States, or other countries where our service providers operate. These countries may have data protection laws that differ from the laws of your jurisdiction.

Where we transfer personal data outside of the EEA, United Kingdom, or Switzerland, we ensure that appropriate safeguards are in place, such as standard contractual clauses approved by the European Commission, or other legally recognized transfer mechanisms. By using the Services, you consent to the transfer of your information to these jurisdictions, subject to the protections described in this Privacy Policy.

11. Children's Privacy

The Services are not intended for individuals under the age of 16. We do not knowingly collect, solicit, or maintain personal information from children under 16 years of age. If we become aware that we have collected personal information from a child under 16, we will take steps to promptly delete such information. If you believe that a child under 16 has provided us with personal information, please contact us at hello@meetscouty.com.

12. Artificial Intelligence Processing

The Services use artificial intelligence and machine learning technologies to process your information, including your messages, preferences, and interactions. This processing is integral to the operation of the Services and includes:

Analyzing your preferences and communications to provide personalized event recommendations.
Processing and generating natural language responses to your queries.
Creating vector representations of your interests for matching purposes.
Extracting and summarizing event information from third-party sources.

Your data may be transmitted to third-party AI service providers for processing. We ensure that such providers are subject to appropriate data protection agreements. AI processing does not involve automated decision-making that produces legal effects or similarly significant effects concerning you without human oversight.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. When we make material changes, we will notify you through the Services, by email, or by other reasonable means. The “Last updated” date at the top of this Privacy Policy indicates when it was last revised.

Your continued use of the Services after any modifications to this Privacy Policy constitutes your acceptance of the updated policy. We encourage you to review this Privacy Policy periodically.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

Scouty
Email: hello@meetscouty.com
Website: meetscouty.com

If you are not satisfied with our response, you have the right to lodge a complaint with your local data protection authority, including the Office of the Privacy Commissioner of Canada, your relevant EU/EEA supervisory authority, or the California Attorney General's office, as applicable.