PRIVACY POLICY
1. Overview
IntelScout ("IntelScout," "we," "us," or "our") operates IntelScout, a software-as-a-service intelligence, open-source intelligence (OSINT), and security analysis platform available at https://intelscout.app (the "Platform"). This Privacy Policy describes how we collect, use, store, disclose, and protect information in connection with access to and use of the Platform.
This Policy is intended to satisfy applicable privacy and data protection requirements under United States law, including the California Consumer Privacy Act and California Privacy Rights Act (collectively, "CCPA/CPRA"), and reflects industry best practices for secure, enterprise-grade SaaS platforms.
2. Scope and Applicability
This Privacy Policy applies to information collected through the IntelScout Platform and related communications. It does not apply to third-party websites, services, or platforms that may be linked to or integrated with IntelScout, which are governed by their own privacy practices.
IntelScout is intended for use by businesses, enterprises, and government or law-enforcement entities. It is not designed for consumer social networking or advertising purposes.
3. Information We Collect
3.1 Account and Business Contact Information
We collect limited business contact information necessary to create accounts, provide access to the Platform, and communicate with authorized users. This information may include a user's name, business email address, phone number, organization or employer, and role or job title. Such information is collected only when a user submits a demo request, creates an account, or otherwise voluntarily provides it. If a demo form is not completed or an account is not created, this information is not collected.
3.2 Payment and Identity Verification Information
Payment processing and related identity verification (KYC) are handled exclusively by our third-party payment processor, Stripe. We do not store full payment card numbers or sensitive financial credentials on our systems. Any payment or KYC information is processed directly by Stripe in accordance with its own privacy and security policies.
3.3 Intelligence, OSINT, and Investigative Data
As an intelligence and OSINT platform, IntelScout allows users to input, analyze, and process information relating to third parties. Such information may include publicly available data, public records, identifiers, URLs, selectors, or other data points used for threat intelligence and investigative purposes. Analytical outputs may include inferred or contextual intelligence derived from user-provided inputs and public sources.
This information is provided or initiated by users acting in a professional or investigative capacity and is processed solely to deliver the functionality of the Platform.
3.4 Search Queries and Usage Metrics
Search queries submitted through the Platform are anonymized and are not logged in identifiable form. We collect limited aggregated usage metrics, including token or resource consumption, solely to operate the Platform, manage billing, maintain system performance, and prevent misuse. Raw search content is not retained.
3.5 Cookies and Technical Data
IntelScout uses essential cookies and similar technologies strictly necessary to enable core functionality such as authentication, session management, and security. We do not use advertising cookies, marketing trackers, or session-recording technologies.
4. Use of Information
We use the information we collect only for legitimate business and operational purposes, including providing and securing access to the Platform, authenticating users, processing payments, preventing fraud and abuse, maintaining system integrity, complying with legal obligations, and responding to lawful requests from authorities.
We do not use personal information for advertising, marketing, behavioral tracking, or automated decision-making or profiling.
5. Data Sharing and Disclosure
We do not sell, rent, or share personal information for commercial purposes. Information may be disclosed only in the following limited circumstances: to Stripe for payment processing; to infrastructure and cloud service providers solely to host and operate the Platform; or to law enforcement, regulators, or government authorities when required by law, subpoena, or other legal process. We may also disclose information as necessary to protect the rights, security, or integrity of IntelScout, our clients, or the public.
6. Data Security
We implement administrative, technical, and organizational safeguards designed to protect information from unauthorized access, disclosure, alteration, or destruction. These safeguards include encryption at rest and in transit, access controls and role-based access management, audit logging, SOC 2-aligned controls, and an incident response program. While no system can be guaranteed to be completely secure, we take security seriously and continually improve our controls.
7. Data Retention
Information is retained only for as long as necessary to fulfill the purposes described in this Policy, unless a longer retention period is required by law. By default, retained data is stored for up to six months or until a user requests deletion, subject to system limitations and legal obligations.
8. User Rights and Choices
Within the operational limits of the Platform, users may request access to retained personal information, request correction of inaccuracies, request deletion, or request export of their data. Requests may be submitted by contacting us at the address listed below. IntelScout does not currently offer services targeted to residents of the European Union. We do serve California residents and honor applicable rights under CCPA/CPRA.
9. California Privacy Rights
California residents have the right to know what categories of personal information are collected, the purposes for which information is used, and to request access to or deletion of personal information, subject to applicable exemptions. We do not sell or share personal information as defined under California law.
10. Investigative and Public-Source Disclaimers
IntelScout processes information derived from public and user-provided sources. We do not guarantee the accuracy, completeness, or current status of such information. Clients are responsible for ensuring that their use of the Platform complies with applicable laws, regulations, and professional standards.
11. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in legal requirements, technology, or our practices. Any updates will be posted on the Platform with an updated effective date.
12. Contact Information
Questions or requests regarding this Privacy Policy or our data practices may be directed to:
Email: support@intelscout.app
Last updated: December 17, 2025