Privacy Shield Protocol

Privacy Policy

At Scout, we treat your privacy and credential security as our highest operational priority. This policy outlines how we encrypt, collect, store, and protect your information when utilizing our services.

1. Advanced Credentials Encryption

Unlike standard marketing applications, Scout uses advanced encryption protocols to safeguard your account information:

  • All passwords and session cookies are encrypted at rest using **AES-256 (Fernet cryptography)**.
  • Decryption only occurs dynamically in-memory within worker processes during active login operations, and keys are never logged or stored in plain text.
  • If you use the **Live Browser (interactive login)** feature, your passwords are never saved to our database at all—only the generated session tokens/cookies are encrypted and saved.

2. Information Collection & Usage

We only collect and process data essential to run campaigns and publish schedules:

  • **Account Credentials**: Securely encrypted passwords or cookies for connected platforms.
  • **Campaign Parameters**: Target keywords and brand descriptions used by AI models to search for prospects.
  • **Lead Metadata**: Public profiles and post snippets extracted during channel crawls to help you qualify buyers.

3. Dynamic Cookie & Session Lifetime

Scout monitors session health dynamically. When session verification fails or tokens expire:

  • The system updates the status flag (`EXPIRED` or `INVALID`) in the database.
  • You can clear, update, or sync cookies manually at any time via the frontend dashboard.
  • We delete expired cookies from database storage upon request or connection reset.

4. Secure Payment Processing

Payment information is processed entirely through **Paystack’s PCI-DSS compliant secure gateway**. Scout does not collect, capture, or store your credit card numbers, expiry dates, or CVV codes on our servers.

5. Data Retention

You have full ownership of your data. If you delete a social account or close your workspace, all associated credentials, campaign qualifiers, and generated lead records are permanently purged from our database immediately.

SYSTEM_REF: PRIV-V1.0 LAST UPDATED: JUNE 2026