Privacy Policy
Last updated: July 22, 2026
1. Information we collect
- Account information: your email address, name, and profile picture, provided by Google when you sign in.
- Search Console data: with your permission, we request read-only access to your Google Search Console property and import performance metrics (clicks, impressions, click-through rate, average position, queries, and pages) so ScoutSEO can analyze changes over time.
- Feedback you submit: if you respond to an in-app feedback prompt, we store your response (e.g. whether an investigation was useful, any text you write, and your subscription interest) together with your account email.
2. How we use this data
We use this data solely to operate and improve the Service: running the investigation engine against your Search Console history, generating plain-language narration of the results, and understanding whether the product is useful so we can improve it. We do not sell your data.
3. Sub-processors
We use the following third-party sub-processors to operate ScoutSEO. None of them are permitted to use your data for any purpose other than providing their service to us.
| Sub-processor | Purpose | Data processed | Location |
|---|---|---|---|
| Google LLC | Sign-in (Firebase Authentication) & Search Console API access | Account profile (email, name, picture); read-only GSC performance data | United States |
| Neon, Inc. | Primary database hosting (Postgres) | All persisted application data (account records, Search Console metrics, feedback submissions) | United States (AWS us-east-1, N. Virginia) |
| Railway Corporation | Backend API hosting & compute | All request data in transit (same categories as above) | United States |
| Anthropic, PBC | AI-generated narration (Claude API) | Computed investigation metrics & findings — not your raw Search Console credentials | United States |
| Vercel Inc. | Frontend hosting & CDN | None stored — serves the application interface only | United States (global edge network; origin infrastructure in the U.S.) |
4. International data transfers
ScoutSEO and all of the sub-processors listed above currently operate exclusively in the United States. If you are located outside the United States — for example, in the European Economic Area, the United Kingdom, or elsewhere — using ScoutSEO means your data, including any Search Console data you connect, is transferred to and processed in the United States. If your organization requires a Data Processing Agreement (DPA) or has specific cross-border transfer requirements (e.g. Standard Contractual Clauses), contact us at hello@scoutseo.io and we'll work through what's needed.
5. Data retention
We retain your account and Search Console data for as long as your account is active, so ScoutSEO can compare current data against your history. You can request deletion of your account and associated data at any time (see Contact below).
6. Your choices
You can revoke ScoutSEO's access to your Google account at any time from your Google Account's third-party access settings. Doing so stops any further data import; previously imported data remains until you request deletion.
7. Security
Access tokens and Search Console data are stored in our database and are only ever used to serve your own requests. We do not share your Search Console data with other users.
8. Changes to this policy
We may update this policy from time to time. We'll update the "Last updated" date above when we do.
9. Contact
Questions about this policy, or want your data deleted? Contact us at hello@scoutseo.io.