Privacy Policy
Last updated: May 12, 2026
Scouq Inc. ("we," "us," or "our") operates the Scouq platform at scouq.com and scouq.com/app ("the Platform"). This Privacy Policy explains how we collect, use, disclose, and protect your information when you use our Platform.
1. Information We Collect
Information You Provide
- Account information: Name, email address, and profile details provided during registration via Google OAuth or email authentication
- Subscription information: Billing details and payment information processed through our payment provider (we do not store full credit card numbers)
- User content: Saved deals, property analyses, notes, watchlists, portfolio data, forum posts, and search queries you enter into the Platform
- Communications: Messages you send to us through support channels or feedback forms
Information Collected Automatically
- Usage data: Pages visited, features used, search queries, time spent on the Platform, and interaction patterns
- Device information: Browser type, operating system, screen resolution, and device identifiers
- Log data: IP address, access times, referring URLs, and error logs
- Location data: General geographic location derived from your IP address (we do not collect precise GPS location)
2. How We Use Your Information
We use the information we collect to:
- Provide, maintain, and improve the Platform and its features
- Process your account registration and manage your subscription
- Deliver property analyses, deal scores, and market intelligence
- Personalize your experience and provide relevant search results
- Send transactional emails (account verification, password resets, billing receipts)
- Send product updates and feature announcements (you can opt out at any time)
- Monitor and analyze usage trends to improve the Platform
- Detect, prevent, and address technical issues and security threats
- Comply with legal obligations
3. Third-Party Services
We use the following third-party services to operate the Platform. Each service receives only the data necessary to perform its function:
| Service | Purpose | Data Shared |
|---|---|---|
| Supabase | Authentication, database, and data storage | Account data, user content, usage records |
| Google OAuth | Account authentication | Email, name, profile picture (as authorized by you) |
| MapTiler | Map rendering and geocoding | Map tile requests, search queries for address lookup |
| Groq | AI-powered deal analysis and strategy comparison | Property address, listing details, and analysis context you submit. Not used by Groq to train models per their API terms. |
| OpenStreetMap Nominatim | Geocoding fallback when MapTiler is unavailable | Address strings you search. See the Nominatim usage policy. |
| Vercel | Hosting and content delivery | Standard web request data (IP, user agent, request logs) |
We do not sell your personal information to third parties. We do not share your data with third parties for their own marketing purposes.
4. Data Storage and Security
Your data is stored in Supabase-managed PostgreSQL databases with Row Level Security (RLS) enabled, ensuring that users can only access their own data. All data is encrypted in transit using TLS 1.2+ and encrypted at rest.
We implement industry-standard security measures including:
- Encrypted data transmission (HTTPS/TLS)
- Database-level row security policies
- Secure authentication with PKCE flow
- Regular security reviews
- Access controls limiting employee access to production data
While we take reasonable steps to protect your information, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.
5. Cookies and Tracking
We use minimal cookies and local storage for essential Platform functionality:
- Authentication tokens: To keep you signed in across sessions
- Session data: To maintain your preferences and application state
- Local storage: To cache data for offline access and performance
We do not use third-party advertising cookies or cross-site tracking pixels. We do not participate in ad networks or behavioral advertising.
6. Data Retention
We retain your account data and user content for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where we are required to retain it for legal, accounting, or security purposes.
Anonymized and aggregated data that cannot be used to identify you may be retained indefinitely for analytics and product improvement purposes.
Backup copies of deleted data may persist in our backup systems for up to 90 days before being permanently removed.
7. Your Rights
Depending on your jurisdiction, you may have the following rights regarding your personal data:
- Access: Request a copy of the personal data we hold about you
- Correction: Request correction of inaccurate or incomplete data
- Deletion: Request deletion of your personal data
- Export: Request a portable copy of your data in a machine-readable format
- Restriction: Request that we limit how we process your data
- Objection: Object to processing of your data for certain purposes
- Withdrawal of consent: Withdraw consent for data processing where consent is the legal basis
To exercise any of these rights, contact us at hello@scouq.com. We will respond to your request within 30 days.
8. California Residents (CCPA)
If you are a California resident, you have the right to:
- Know what personal information we collect and how it is used
- Request deletion of your personal information
- Opt out of the sale of your personal information (we do not sell personal information)
- Not be discriminated against for exercising your privacy rights
To submit a CCPA request, contact us at hello@scouq.com.
9. European Residents (GDPR)
If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, we process your personal data under the following legal bases:
- Contract performance: To provide the Platform services you have requested
- Legitimate interests: To improve our services, ensure security, and communicate with you
- Consent: Where you have given explicit consent for specific processing activities
- Legal obligation: To comply with applicable laws and regulations
Your data may be transferred to and processed in the United States. We ensure appropriate safeguards are in place for international data transfers.
10. Children's Privacy
The Platform is not intended for use by anyone under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child under 18, we will take steps to delete that information promptly.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Last updated" date. For significant changes, we will provide additional notice via email or an in-app notification.
Your continued use of the Platform after changes are posted constitutes your acceptance of the updated policy.
12. Contact Us
If you have questions or concerns about this Privacy Policy or our data practices, contact us at:
Email: hello@scouq.com
You may also contact your local data protection authority if you have concerns about how we process your personal data.